Privacy policy

Last update: September 24, 2024

Introduction

Dextra, including its company Fix Freelancer Ltd and an AI solution DextraAI ("Dextra", "we"), cares about user privacy and takes the protection of your personal data seriously. This Privacy Policy is designed to inform users about their rights as regards privacy and explain how we collect, process, retain, share, and transfer their personal data, keeping it secure every step of the way.

The Privacy Policy governs the processing of your personal data by Dextra when you connect your Google account/your Facebook profile/your Instagram account to Dextra and give Dextra access to the content of your Google account/your Facebook profile / your Instagram account or otherwise interact with Dextra or use the website https://www.godextra.com, Dextra’s mobile application, pages or content Dextra operates, or request and/or use any products, services, functionality or applications (mobile apps) of Dextra (jointly the "services").

Your personal data is controlled by Fix Freelancer Ltd, a company that determines the purposes and means of processing your personal data. This Privacy Policy also applies to Dextra operators, and all companies affiliated or otherwise connected with Dextra, including legal entities, individual entrepreneurs, and consultants that are engaged in processing your personal data. All Dextra operators shall adhere to appropriate safeguards when processing your personal data in accordance with the EU General Data Protection Regulation (the "GDPR").

By connecting your Google account (Google Sign-In)/your Facebook profile (Facebook Login)/your Instagram account to Dextra and giving Dextra access to the content of your Google account/your Facebook profile/your Instagram account, using our services or scheduling meetings through our website using integrated third-party service and checking the designated box in the Dextra’s user interface, you confirm your acceptance of the terms of this Privacy Policy. These implicit actions indicate that your consent to the processing of your personal data is freely given, specific, informed, and unambiguous. In cases where we are legally required to obtain your informed consent to process some categories of your personal data or to proceed with any other actions, we shall ask you for your specific consent. We may periodically modify this Privacy Policy as we undertake new personal data practices or revise procedures to comply with applicable laws. Please check back from time to time this page with our Privacy Policy to ensure you agree with any changes to it (the last update date is specified at the top of the Privacy Policy).

Data Protection Officer

If you have any questions, requests, or complaints in relation to our privacy practices and this Privacy Policy, or you want to exercise your rights as regards privacy, please contact our Data Protection Officer at dpo@godextra.com, or by mail at the postal address: Fix Freelancer Ltd, a company duly registered and operating under the laws of the Republic of Cyprus under registration No. HE 445986, registered at Theklas Lysioti, 17, Pissas building, 5&6th floor, 3030, Limassol, Cyprus.

Personal data we collect and purposes it serves

Personal data categories we may collect:

  • Information collected directly from you when you give access Dextra to:

Your Google account:

  • Content of your email messages
  • Texts in the body of the email messages
  • Texts in email subject lines
  • Senders’ email addresses
  • Information about whether the email was answered
  • Email settings (e.g., filters, labels, preferred languages)
  • Your primary Google account email address

Your Facebook account:

  • Content of your private messages
  • Mobile number or email address connected to your Facebook profile

Your Instagram account:

  • Content of your private messages (Instagram Direct)
  • Mobile number or email address connected to your Instagram account
  • Information collected when you visit Dextra’s website or use Dextra (including mobile application): internet connection data, IP address, login, browser type and version, device type, category and model, location of your device, time zone settings, device language, application or SDK usage, information from cookies, as well as other information about your interaction with the website.
  • Information from publicly available sources

We may collect and process your personal data for the following purposes:

  • To prepare statistical analysis and form reports for you by using DextraAI. The reports may include information about:
    – Number of emails in the mailbox
    – Number of emails from clients and partners
    – Number of missing emails (unread, in trash or spam folders, etc.)
    – Text response options that can be used for further correspondence
  • To enable you to create an offer if it is appropriate in relation to your correspondence (name of services/works, amount of remuneration, description of services/works).
  • To handle your requests to Dextra’s support team.
  • To schedule meetings with our managers through Dextra’s website using integrated third-party services.
  • To improve user experience, products, services, marketing, and user and customer relationships by conducting statistical research based on personal data of users, including survey data; (ii) troubleshooting of Dextra (analyzing performance and functionality, fixing errors, etc.); (iii) data analysis.
  • To improve your experience with Dextra along with its functionality, efficiency, and usability, and to make it more personalized. Where applicable, automate your interaction with Dextra, provide interactive notifications regarding the usage of Dextra, and maintain internal services.
  • To inform you about offers on special features, options, products, and services of Dextra, including by sending you targeted or personalized advertising about products and services that we believe may be interesting or useful to you or that you have requested to stay updated about. Dextra may also inform you about products or services provided by its subsidiaries, affiliates, and partners, including marketing partners.

Legal basis for the data processing under GDPR:

  • Consent (if applicable)
  • Contractual or pre-contractual measures (Art. 6.1 (b) of GDPR)
  • Legitimate interests (Art. 6.1 (f) of GDPR)
  • Compliance with legal obligations under applicable laws (Art. 6.1 (c) of GDPR)
  • Protection of the vital interests of the data subject or of another natural person (Art. 6.1 (d) of GDPR)
  • Performance of a task carried out in the public interest (Art. 6.1 (e) of GDPR)

Your rights

The GDPR and some countries' privacy laws provide certain rights to data subjects, which, subject to the applicable laws, you may exercise by contacting our DPO.

Right to be informed and right of access:

You may check if Dextra processes your personal data or get access to your personal data that Dextra has. You may also request information about the purposes of the processing, categories of personal data concerned, who we disclose your personal data to, source of the data (if it was not collected directly from you), envisaged period for which the personal data will be stored, and other information as per the applicable laws.

Right to rectification:

You may request us to correct (rectify) the record of your personal data maintained by Dextra if it is inaccurate or incomplete.

Right to erasure ("right to be forgotten"):

You may request that we erase your personal data or cease processing it, subject to certain exceptions.

Right to restriction of processing:

In some cases, you may have the right to restrict our processing of your personal data.

Right to data portability:

Where our legal basis for processing your personal data is contractual or pre-contractual measures, we will, if technically feasible and upon your request, provide your personal data to you or transmit it directly to another controller, subject to certain exceptions.

Right to object:

You may object, on grounds relating to your particular situation, to the processing of your data. For example, if our legal basis for processing for direct marketing purposes is a legitimate interest, you have the right to object to such processing.

Right to withdraw consent:

For processing requiring your consent, you can withdraw your consent at any time by contacting us at the email stated below. Such withdrawal of consent does not affect the lawfulness of the processing based on the consent given before exercising this right.

If you refuse to allow Dextra to process your personal data where Dextra needs to process your personal data by law, or under the terms of your contracts with Dextra, Dextra may not be able to enter into or perform these contracts, or you may not or will not be able to use certain functionality of Dextra. Further, in some cases, Dextra may terminate the business relationship with you, and/or continue processing your personal data without your consent on the grounds specified in Art. 6.1 of GDPR and/or in accordance with other applicable laws.

Right not to be subject to decisions based solely on automated processing, including profiling:

Dextra may rely on automated services, including profiling, to determine whether an account poses legal risk or another type of risk. Please note, however, that Dextra shall not make any decision whose legal effects would significantly affect you based solely on the processing of your personal data by automated (technological) means without any human involvement. The Dextra team will review any decision that is made based on the algorithm. If you have any concerns regarding this matter, please contact us so we can resolve them.

Reasonable access to your personal data and any other related information shall be provided at no cost upon request made to Dextra. We shall respond to your request within 30 days from the day of its receipt, unless applicable law specifies otherwise. If the response cannot be provided within this time frame, we shall give you a date estimate for when the information shall be provided. If we cannot satisfy your request, we shall specify the reason and inform you about your additional rights.

Right to lodge a complaint with the competent supervisory authority:

Under the laws of many countries, you have the right to lodge a complaint with the appropriate data protection authority if you have concerns about the way we process your personal data.

Personal data of children and minors

We do not knowingly collect, process, store, use or disclose the personal data of individuals who have not reached sufficient legal capacity to use Dextra under the national laws of the country of citizenship and/or permanent residence of the data subject, unless otherwise provided by applicable laws.

You must not use Dextra if you: (1) do not have the sufficient legal capacity to use Dextra in accordance with the national laws of your country of citizenship and/or permanent residence; and (2) have not obtained all the necessary permissions and consents to perform work and/or provide services in the country of which you are a citizen and/or in which you permanently reside and/or from which you access and/or plan to use Dextra.

Sensitive and special categories of personal data

We may collect and process sensitive user data only for the purposes as defined in this Privacy Policy and in compliance with applicable laws. By giving Dextra access to the content of your Google account/ your Facebook profile/your Instagram account or using our services, you acknowledge and agree that you provide Dextra with access to your emails/private messages that may contain sensitive data (including but not limited to data relating to religion, politics, health, trade union membership). We take appropriate measures to safeguard the confidentiality and integrity of your sensitive information. We adhere to industry-standard security practices and employ robust encryption techniques to protect your data. You have the right to withdraw your consent at any time; however, please note that if you choose to do so, Dextra's functionality may be limited, and certain features and services may not be fully available to you.

How we process personal data

Dextra may take any action with respect to your personal data that is permitted by applicable law and that is necessary or desirable for achieving the above purposes, including, without limitation, collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (disclosure, provision, access), segmentation, depersonalization, blocking, deletion, or destruction of personal data, as well as any other actions in respect of your personal data subject to applicable laws.

Dextra may view and search your emails/private messages, create and send emails/messages on your behalf (i.e., from your email address or from your account), and analyze your personal information, including any personal information you've made publicly available.

Dextra uses data processing methods such as non-automated processing of personal data, automated processing of personal data with or without transmission of the received information via information and telecommunication networks, and mixed processing of personal data.

Automation of user interaction

Dextra strives to ensure maximum convenience and efficiency in communicating with its users, as well as quick responses to users’ typical questions and situations that arise in the course of their interaction with Dextra. For these purposes, your personal data may be processed, including through third-party services and automated data processing, to promptly send you interactive content, notifications, and guides on working and/or interacting with Dextra. If you believe that such automated processing of your data has a negative effect on you and you do not agree with such processing, you can contact us. We shall review your particular circumstances and act accordingly.

International transfers of personal data

Dextra may transfer your personal data outside of the European Economic Area. When doing so, Dextra puts in place appropriate technical and organizational safeguards (including Standard Contractual Clauses) to ensure that such transfers are carried out in compliance with applicable data protection laws, except where the country to which the data is transferred has already been determined by the European Commission to provide an adequate level of protection.

When and how we share your information

We prioritize the protection of your personal information and do not share it with organizations or individuals outside of Dextra, except in specific situations:

  • With Your Consent

In certain cases, we will only share your personal data outside of Dextra when we have obtained your explicit consent:

  • Third-party AI model tools

We will always inform you about such instances in our Privacy Policy and seek your permission before sharing your personal data with third-party AI model tools.

To provide Dextra's services, including email analysis and generating personalized automatic responses based on your email content, we may share your personal data with AI model tools like OpenAI's (OpenAI OpCo, LLC) AI tool or Microsoft (Microsoft Corporation) AI tool. You can review OpenAI's Privacy Policy at https://openai.com/policies/privacy-policy and Microsoft's Privacy Statement at https://privacy.microsoft.com/en-gb/privacystatement. However, we will not share your data without your explicit permission, which we request during your registration with Dextra. It's important to note that these third-party AI tools operate independently and maintain their own privacy policies governing data processing, which may be subject to updates over time.

Data shared with third-party AI model tools includes email (private messages) content, text within email bodies, text in email subject lines, sender email addresses, and information regarding email responses.

Actions that third-party AI model tools can perform: These tools are essential for Dextra's operation and are integral to our services. They may have access to scan your inbox, view, copy, and analyze information from your emails/private messages, as well as generate content for your emails/ private messages (such as responses to your emails).

Right to opt-out of sharing: You can revoke your consent at any time by contacting us at dpo@godextra.com. If you choose to revoke access to your personal data by third-party AI tools, they will no longer have access to your information through Dextra. Please note that revoking this access may affect Dextra's ability to provide you with its services.

  • Messaging services and business management solutions

We may use and share your personal data with Calendly (Calendly, LLC and its Affiliates) for the purpose of scheduling meetings through Dextra’s website using the integrated Calendly service. Calendly acts as a processor of your personal data on behalf of Dextra and processes data strictly to facilitate scheduling meetings, as per their Customer Terms and Conditions, Invitee Terms and Conditions and Privacy Notice. This processing is limited to the necessary functions required to provide the scheduling services.

  • Other third parties

Furthermore, in cases where your consent is a legal requirement, we will share your personal data with third parties if you explicitly request or authorize such sharing. This may include exercising your rights under the GDPR for data transfer (a data portability request).

For legal grounds

There may be instances where we are legally obligated to share users' personal data with law enforcement agencies or courts to comply with applicable laws, prevent fraudulent activities, uphold contractual agreements with you, or protect our rights, property, and the well-being of our employees and other involved parties.

Specifically, only in accordance with applicable legislation, we may disclose personal information outside of Dextra when we have a sincere belief that accessing, using, preserving, or disclosing this information is reasonably necessary to:

  • Comply with relevant laws and regulations (including anti-money laundering regulations), resolve disputes or claims, or respond to official governmental requests.
  • Identify, prevent, or manage instances of fraud, addressing potential violations, security concerns, or technical issues.
  • Respond to emergencies or address acts of God.
  • Safeguard the rights, property, or safety of Dextra, Dextra's users, or the public, as mandated or permitted by law.

In line with the aforementioned conditions and only when allowed by applicable legislation, we may share your personal data with:

  • Law enforcement agencies and government authorities for compliance and protection purposes.
  • Companies and individuals who provide services on our behalf, helping us operate Dextra (e.g., hosting, customer support, and website analytics).
  • Professional advisors such as lawyers, auditors, bankers, and insurers, when necessary for the professional services they provide to Dextra.
  • Affiliates such as our corporate parent, subsidiaries, and affiliates, for purposes consistent with this Privacy Policy.

It's essential to highlight that in these circumstances, we never sell your personal data to any organization or individual.

We may de-identify, anonymize, or aggregate personal data for use or sharing with third parties for any legally permissible purpose.

Secure data handling procedures

We prioritize the security and confidentiality of personal and sensitive user data at Dextra. We have implemented rigorous data handling procedures (physical, technical, and administrative safeguards) to ensure its protection. These procedures include robust encryption methods, access controls, data minimization practices, secure storage systems, employee training on data security, appropriate disciplinary measures to enforce our employees’ responsibilities as regards ensuring privacy, incident response protocols, third-party compliance requirements, and regular audits and assessments. Besides, we update and test our security technology on an ongoing basis.

Marketing communication and direct marketing

We may use some of your personal data to decide which products, services, special functions, and offers of Dextra may be of interest to you. You may receive marketing communications from Dextra if you request information from Dextra and/or agree to receive marketing communications from Dextra, or if you are a registered user of Dextra and you do not opt out of receiving such communications.

Dextra may use various types of marketing communications, including direct marketing. By connecting your Google account (Google Sign-In)/your Facebook profile (Facebook Login)/your Instagram account to Dextra and giving Dextra access to the content of your Google account/your Facebook profile/your Instagram account or using our services, you consent to Dextra processing your personal data and communicating and interacting with you for direct marketing purposes. In addition, where applicable, the basis for the processing of your personal data shall be our legitimate interest in accordance with Art. 6.1(f) GDPR. As part of direct marketing or other types of marketing, Dextra may (but is not obliged to) process your personal data and send you newsletters, promotional offers or other informational and/or marketing materials, subscriptions and messages, or invite you to participate in events and advertising campaigns, as well as conduct surveys, research, and questionnaires with your participation, and use other online marketing tools. Dextra reserves the right to at any time review and change the content of marketing communications, technologies used for marketing purposes, and methods for segmenting user (customer) groups (target groups). Also, Dextra may send you personalized marketing communications, including with regard to the history of your actions in and/or interaction with Dextra, in order to further personalize the service and better cater to user needs.

You have the right to at any time restrict Dextra from processing your personal data for the purposes of direct marketing, market research, and profiling conducted by Dextra for direct marketing purposes at any time by emailing us at the address provided below, or, if applicable, by following opt-out instructions contained in our marketing email or message sent to you, or by using the functionality of your device (if supported).

Your opting out of receiving marketing communications shall not apply to service messages that are directly related to your use of Dextra and performance of your agreements with Dextra.

Data storage and retention

Dextra retains your personal data to enable your use of Dextra for the period required to fulfill the relevant legitimate purposes described above, or as may be required by applicable laws (for example, for tax and accounting purposes or anti-money laundering regulations, or to address future legal disputes or claims). In addition, we may store, in document form, some of your data related to the execution of civil law relations and other legal relations and agreements with Dextra or for the purposes related to legal relations arising due to the involvement of Dextra and in accordance with applicable laws.

Data deletion

We respect individuals’ rights to the deletion of their personal data as permitted by applicable laws. Data subjects have the right to request the deletion of their personal data at any time, and we will take appropriate measures to fulfill these requests in a timely manner, ensuring compliance with GDPR requirements and safeguarding individuals’ privacy rights. Upon receiving a valid data deletion request, we will review and respond to it within 30 days. However, certain exceptions, such as obligations related to Anti-Money Laundering laws and other legal requirements, may limit our ability to immediately fulfill data deletion requests. In cases where data retention is necessary to comply with Anti-Money Laundering laws or other legal obligations, we will retain the personal data for the required period. Once the retention period expires or the legal obligations no longer apply, we will promptly and securely delete the data in accordance with applicable laws. This includes the deletion of data stored in our databases, backups, and third-party systems used for data processing. In any case, we will make reasonable efforts to comply with data deletion requests within the boundaries set by relevant legal exceptions and requirements

Deleting your Dextra account

You can request to delete your Dextra account at any time by sending an email to help@godextra.com from the same email address associated with your Dextra account. Upon receiving the request for deletion, your Dextra account will be disabled within 30 days, and all submitted mailbox data will be permanently deleted from our database. Please note that certain information, such as your email address, registration date, deletion request details, and deletion date, will be retained in our database for legal and administrative purposes, in accordance with applicable laws.

For more information on how to delete an account, please refer to 'How to delete an account'.

Changes and updates to the Privacy Policy

Because our company and services change from time to time, this Privacy Policy can also be expected to change. We reserve the right to amend it at any time, for any reason, and without any notice to you other than the posting of the amended Privacy Policy on our website. We may email periodic notices regarding our terms and conditions or material changes thereto, but you should still regularly check our website to review the current amended version of the Privacy Policy. The provisions herein supersede all previous notices or statements regarding our privacy practices.

By using Dextra, you agree to the terms and conditions of this Privacy Policy and any other agreement we may have with you. If you do not agree to these terms and conditions, you should not use Dextra.

Questions, concerns, or complaints

Contact us at:

FIX FREELANCER LTD
Theklas Lysioti, 17
Pissas building,
5&6th floor,
3030 Limassol, Cyprus

dpo@godextra.com