Privacy Policy
Last modified: February 2026
Extralt SAS, a company organized under the laws of France (hereafter, "Extralt", "we", "our" and/or "us") provides an online software-as-a-service (SaaS) platform (the "Service") on its website at https://extralt.com that enables businesses to extract structured data from websites at scale, enrich that data using AI-powered processing, and derive market intelligence from product information.
Extralt recognizes data protection as an important topic and understands the responsibility that comes with the handling of personal data. This Privacy Policy describes our practices related to personal data collected, used, stored and otherwise processed in connection with the Extralt Service.
What this privacy policy covers
This privacy policy applies to the personal data Extralt processes as a data controller, i.e. as the party that determines what personal data to collect and to what end.
The Extralt Service is not intended for use by persons under the age of 18. If Extralt has reason to believe that a user is under the age of 18, Extralt will promptly block and/or terminate that user's account and delete all personal information previously submitted by that user.
For your convenience, hyperlinks may be posted on the Extralt website that link to other websites that Extralt does not own or control. This privacy policy is not applicable to them and Extralt has no liability for the content of third-party websites nor the personal data they collect.
What personal data is collected?
Personal data means any information relating to an identified or identifiable person. Depending on the purposes detailed below, personal data processed by Extralt includes:
- Contact information: Name and email address collected during registration.
- Organization information: Organization name and billing details when you subscribe to our services.
- Transaction information: Details related to purchases you make, including billing data. We never store your full credit card information.
- Usage data: Information on how you use the Extralt Service, including IP address, date and time of access, and usage patterns.
The personal data processed by Extralt is limited to data necessary for the purposes described in this Privacy Policy.
Payment information
When you make a purchase on the Service, any credit card information you provide is collected and processed directly by our payment processor Polar. We never receive or store your full credit card information. Polar commits to complying with the Payment Card Industry Data Security Standard (PCI-DSS) and using industry standard security. Polar may use your Payment Information in accordance with their own Privacy Policy at https://polar.sh/legal/privacy.
Lawful basis and purpose of processing
Under GDPR, we must have a lawful basis for processing your personal data. Extralt processes your data based on the following:
Contract performance (GDPR Article 6(1)(b))
Processing your registration, account, and payment information is necessary to provide you with the Extralt Service:
- To create and manage your user account
- To manage our business relationship with you, including processing orders, invoices, and providing support
- To communicate with you about your account and our services
Legitimate interests (GDPR Article 6(1)(f))
We process certain data based on our legitimate interests, balanced against your privacy rights:
- To improve your experience and our services
- To remember your settings and preferences
- To create anonymous data for analytics
- For compliance, fraud prevention and safety
Legal obligation (GDPR Article 6(1)(c))
- To manage legal obligations related to applicable export laws, trade sanctions, and embargoes
- To keep financial records as required by law
How long is your data stored?
Extralt does not store your personal data for more time than necessary. Retention periods vary depending on the data categories and processing activities:
- Active accounts: Data is retained while your account is active.
- Cancelled subscriptions or expired trials: Data is retained for 1 year to allow reactivation, after which it is permanently deleted.
- Account deletion requests: Data is permanently deleted within 90 days of your request.
- Legal requirements: Some data may be retained longer if required by law.
With whom do we share your personal data?
Extralt does not rent or sell your information. We may share your necessary personal data with the following categories of organizations:
- Service providers: Third party vendors that perform tasks on our behalf, such as authentication, payment processing, database hosting, content delivery, and error monitoring.
- Law enforcement: When required by law or if we believe in good faith that disclosure is reasonably necessary to comply with legal process or protect the rights, property, or safety of Extralt, our customers, or the public.
International data transfers
Some of our service providers are located outside the European Union. When transferring personal data outside the EU, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data receives adequate protection.
What are your rights?
Depending on the applicable data protection laws, you may have the following rights regarding your personal data:
- Access your personal data
- Request the rectification, completion, update or erasure of your personal data
- Restrict processing
- Obtain a copy of your personal data stored by Extralt
- Object to specific processing of your personal data if that processing is based on legitimate interests
- Data portability
If the processing of your personal data is based on your consent, you have a right to withdraw that consent at any time.
Automated processing: Extralt uses automated processing, including AI and machine learning, to enrich extracted data. This includes translation, taxonomy classification, embedding generation, and product matching. This processing is used to improve data quality and does not produce legal or similarly significant effects on you. You can choose whether to use enrichment features when configuring your extraction tasks.
You may exercise your rights by contacting us at support@extralt.com.
If your usual place of residence is in the European Union, Liechtenstein, Norway or Iceland, you have a right to file a complaint with your local data protection authority.
Data security
Extralt maintains appropriate technical and organizational measures to protect your personal data from loss, misuse and unauthorized access, disclosure, alteration and destruction. However, while we strive to protect your personal data, we cannot guarantee full protection against any leak due to the inherent risks of the Internet.
You are responsible for the confidentiality of your password and information appearing on your account. Ensure that you log out of your session when using a shared computer.
Cookies and tracking
Extralt uses minimal cookies necessary for the operation of our Service. Our authentication provider (Clerk) sets session cookies to keep you signed in. These are strictly necessary cookies and cannot be switched off.
Third-party services
The following third parties process data on our behalf to operate the Extralt Service:
| Service | Purpose |
|---|---|
| Clerk | Authentication provider. Handles user registration and login. |
| Polar | Payment processor. Handles subscription billing and credit card processing. |
| Convex | Database and backend infrastructure. |
| Cloudflare | Content delivery network and hosting. |
| Sentry | Error monitoring. Helps us detect and fix issues in our Service. |
| Google Cloud | AI/ML processing for product enrichment, including translation and classification. |
Customer data
Data that you extract using our service ("Customer Data") belongs to you. We process this data on your behalf as a data processor, not as a data controller. You are responsible for ensuring that your use of Extralt to collect data complies with applicable laws and the terms of service of the websites you extract data from.
When you use enrichment features, Extralt processes your extracted data using AI to translate, classify, and match products. You can only access enriched product data for products you have extracted. Your extraction data, including the specific URLs you extract and your pricing and availability data, remains private to your organization.
Changes to this policy
This Privacy Policy may be updated from time to time in accordance with our requirements and circumstances, or where required by applicable laws and regulations. Please check back periodically for updates. If major changes occur, we may inform you via email or by posting a notice on our website.
Contact information
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:
Extralt SAS
229 rue Saint-Honoré, chez Hellodom
75001 Paris, France
support@extralt.com