Privacy Policy

Introduction

This Privacy Policy describes how Novitxe, a simplified joint-stock company (SAS) under French law, registered under SIREN number 842 438 400, publisher of the Yelence platform (yelence.com), collects, uses, and protects the data you provide. Data controller: Novitxe — contact@yelence.com. Full company identification details are available on our legal notice page. We handle all information received with rigor, discretion, and in strict accordance with the purposes for which it was shared.

Version 2.0 - last updated September 4, 2026.

Data protection contact

PY Houessou is Yelence's data protection contact. For any question about how your personal data is processed, or to exercise any of the rights described below, you can reach him directly at contact@yelence.com.

Data collected

In the context of using the platform, we collect the following data:

• —account data: email address,
• —company data: name, sector, country, stage, questionnaire responses,
• —usage data: pages visited, actions taken, technical information (browser, device).

Legal basis for processing

We process your data on the following legal bases:

• —performance of a contract (Art. 6.1.b GDPR) — processing necessary to deliver the assessment service you subscribe to,
• —legitimate interest (Art. 6.1.f GDPR) — improvement of our tools, platform security, aggregated anonymized analyses,
• —consent (Art. 6.1.a GDPR) — placement of analytics cookies (Google Analytics, Microsoft Clarity) on your device, only if you accept them.

Use of data

This data is used exclusively to:

• —provide and operate the assessment service,
• —improve the relevance and accuracy of our analytical tools,
• —produce aggregated and anonymized sector-level analyses for research or publication purposes.

Data retention

Your data is retained for the following periods:

• —account and assessment data: 3 years from your last active session,
• —payment data (receipts, transaction history): 10 years in accordance with statutory accounting obligations,
• —browsing data and analytics cookies: 13 months maximum.

Upon expiry of these periods, data is permanently deleted or irreversibly anonymized.

Data sharing

We do not sell your personal data to any third party, under any circumstances.

Your data may be processed by technical subprocessors, each bound by a data processing agreement compliant with Article 28 GDPR, in the following categories. The name of each provider is listed in our records of processing activities, available on request at contact@yelence.com:

• —hosting of the platform and of data (cloud infrastructure; account and assessment data hosted within the European Union),
• —payment processing (PCI-DSS certified provider — your banking details never transit through our servers),
• —AI-based analysis of questionnaires to generate reports (data limited to questionnaire answers, not used to train models),

Some sub-processors may process your data outside the European Economic Area. Such transfers are governed by standard contractual clauses approved by the European Commission.

Cohort processing

If you join the platform through an organization (incubator, accelerator, DFI) enrolling a cohort of startups, specific rules apply in addition to those described above:

• —the cohort manager (the organization) can see that you joined the program and follow the cohort's overall progress;
• —depending on the access rights the organization has configured for its program, the manager may access your score and, if you consent or if your agreement with the organization provides for it, your full report;
• —aggregated, anonymized cohort analyses may be produced for the organization (impact report), without individually identifying startups beyond data already shared with the organization;
• —the legal basis for this sharing is the performance of the contract between you and the organization (or, failing that, the organization's legitimate interest in tracking the use of a program it funds).

You are informed of this sharing before joining a cohort. Your rights (access, rectification, erasure, objection) remain exercisable with Novitxe under the conditions described below.

Automated decision-making and profiling

The score and report you receive are generated by an automated process, assisted by an artificial intelligence model, based on your questionnaire answers. In accordance with Article 13.2.f GDPR, we inform you of the following:

• —general logic: answers are scored and then weighted across 6 dimensions (team, market, business model, finances, traction, governance) to produce an overall score out of 100 and a prioritized gap report;
• —scope and consequences: the score and report are indicative. They do not, on Novitxe's part, trigger any automated decision producing legal effects or significantly affecting you;
• —if a third party (for example a partner institution) uses the score to inform a funding decision, that decision remains, to our knowledge, made by a person rather than in a fully automated way; we update this policy should that change.

You may request further information about this process at any time, or challenge a use of the score you consider inappropriate, by writing to contact@yelence.com.

Cookies and trackers

Company data confidentiality

Company-specific information entered in the assessment questionnaire is strictly confidential. It is never made public, shared with other users, or used for commercial purposes without your explicit consent.

Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure: encrypted connections (HTTPS/TLS), restricted data access, and secure authentication. These measures are regularly reviewed.

Your rights

Under applicable regulations, you have the following rights regarding your data:

• —right of access (Art. 15): view the data we hold about you,
• —right of rectification (Art. 16): correct any inaccurate information,
• —right to erasure (Art. 17): request deletion of your account and data,
• —right to data portability (Art. 20): receive your data in a structured, machine-readable format,
• —right to object (Art. 21): object to processing based on legitimate interest,
• —right to withdraw consent: withdraw your consent to analytics cookies at any time via the "Manage cookies" link at the bottom of the page.

To exercise these rights, contact us at: contact@yelence.com. We will respond within one month.

If you believe that the processing of your data does not comply with applicable law, you have the right to lodge a complaint with the relevant supervisory authority (e.g. the CNIL in France: www.cnil.fr).