General Terms and Conditions
Rules for accessing and using the Xenaflow service. Updated: August 31, 2025
Rules for accessing and using the Xenaflow service. Updated: August 31, 2025
B2B document: these GTC govern access to and use of the marketing site and the application app.xenaflow.com. In case of conflict: contract/T&C > DPA > these GTC > documentation.
Legal identity & host: see Legal notice. Personal data: see Privacy policy.
These Terms govern access to and use of the Xenaflow SaaS (app.xenaflow.com) and the xenaflow.com website by business customers. If you have a signed contract or order form, that document prevails over these Terms in the event of conflict; where relevant, the Data Processing Agreement (“DPA”) prevails over privacy matters.
Acceptance. You accept these Terms when creating an account or by continuing to use the Service after notice of an update.
Notices.Xenaflow may notify you by email sent to your admin/contact address(es) or via in-product banners. Formal legal notices should be sent to legal@xenaflow.com and the postal address in the Legal notice.
Evidence. System logs (timestamps, IPs, identifiers), delivery receipts and email headers are admissible evidence.
Accounts use work email and strong passwords. Customer must keep credentials confidential and is responsible for activity until Xenaflow is informed of risk of unauthorized use. MFA is required for admin profiles and recommended for others (TOTP/passkeys when available). Credential compromise must be promptly reported to support@xenaflow.com
A limited, non-exclusive, non-transferable license to access and use for internal business purposes, for the contractually agreed term, subject to compliance with the GTC and, where applicable, the T&C.
Do not use the Service in any way that disrupts operations, degrades performance, or harms security or third-party rights, including:
In case of a threat (security/availability/third parties), Xenaflow may take any necessary measure (rate limiting, targeted suspension, IP blocking, temporary account deactivation) during investigation.
Each Party agrees to keep the other’s non-public information confidential (know-how, technical documents, business and security information) during the contractual relationship and for 3 years thereafter, except for information that became public through no fault, was already known, received from a lawful third party, or is required by law to be disclosed.
Ownership. Customer retains all rights to Customer Content.
Processor role. For data processed within the application on Customer’s behalf, Xenaflow acts as processor under GDPR and follows Customer instructions and the DPA.
Outputs. The Service may generate “Outputs” based on inputs, configurations or automations. Customer is responsible for reviewing Outputs and ensuring they are fit for purpose and compliant with applicable laws.
Model training. Unless expressly agreed in writing, Xenaflow does not use Customer Content or Outputs to train foundation models.
The Service (software, structure, interfaces, databases, trademarks, logos, graphics) is owned by Xenaflow or its licensors. No rights are granted beyond the license in Section 5.
For processing where Xenaflow is the controller (site, account, commercial relationship), see the Privacy policy. For processing carried out as a processor in the application, the Parties enter into and comply with a DPA (data processing agreement).
Audience measurement may be performed via self-hosted Matomo without cookies, in line with CNIL recommendations (see Policy).
The Service is provided “as is”. Planned maintenance may occur, preferably off-peak, with prior notice where reasonably possible. Xenaflow may evolve, add or remove features for technical, legal or security reasons. Any service level commitments (SLA) are set out in the contract/T&C.
The Service may integrate with third-party tools subject to their own terms. Xenaflow is not responsible for malfunctions attributable to such third-party services.
Where applicable, a trial access or free version may be offered. Xenaflow may freely set the duration, functional limits, and end it at any time.
Standard support by email: support@xenaflow.com. Enhanced levels (if applicable) are specified in the contract/T&C.
Xenaflow may immediately suspend access in case of credential compromise, security threat, serious non-compliant use, legal order, or non-payment (if applicable), for the time needed for checks and remediation.
Upon end of access, the Customer has 30 days to export its data via export functions (CSV/JSON) or request an export. Any specific extraction/formatting assistance may be billed on a time-and-materials basis. After this period, data are deleted from active systems and backups per the retention policy.
If the Service is paid, fees, taxes, invoicing, payment terms, late fees, upgrades/downgrades, and refunds are governed by the Contract/T&C. If no fees apply, this section is inapplicable.
Xenaflow may process aggregated and/or de-identified usage data (logs, performance metrics, feature adoption) to maintain, secure and improve the Service, as described in the Privacy Policy. Customer grants Xenaflow a non-exclusive, royalty-free license to use feedback/suggestions to enhance the Service
With Customer’s consent (email suffices), Xenaflow may use Customer’s name and logo in client lists, websites and presentations. Customer may withdraw consent at any time by writing to contact@xenaflow.com Trademarks remain the property of their respective owners.
Each Party excludes indirect damages (loss of profit, revenue, data, goodwill). Xenaflow’s aggregate liability, regardless of theory, is limited to the net amounts paid by the Customer during the 12 months preceding the event, except in cases of bodily injury, gross negligence, or willful misconduct. No restoration is warranted beyond the planned backups.
A party is not liable for failure to perform due to an event beyond its control, unforeseeable at conclusion, and irresistible in its effects (French Civil Code Art. 1218).
Xenaflow may amend the GTC for legal, technical, security or service-evolution reasons.
Where a signed contract/T&C exists, those terms prevail for change procedures.
Last updated: August 31, 2025.
Service intended for professionals only. These terms are governed by French law. Jurisdiction lies with the courts where Xenaflow’s registered office is located, subject to mandatory provisions. Consumer mediation does not apply in the absence of consumer relationships.
Publisher, hosting provider, publication director: see Legal notice.
If these Terms are published in multiple languages, the French version prevails in case of discrepancy, to the extent permitted by law