Legal

Privacy notice.

This notice explains what personal data exPErtus collects through this website, why we collect it, and how we handle it. It applies to the public site and to the waitlist form. It does not cover the separate Data Processing Agreement that governs pilot and customer engagements — that is a separate contract provided on request.

Effective date · 22 April 2026 Version · 1.0

1. Who we are

exPErtus is operated by exPErtus BV, a company established under the laws of Belgium with registered office at Hoge Haar 3, 2970 Schilde, Belgium, registered with the Belgian Crossroads Bank for Enterprises under company number 1035.977.915. For questions or requests relating to this notice, contact us at hello@expertus-tax.com. For Data Protection Agreement (DPA) requests in the context of a pilot or customer engagement, use the same address.

2. What we collect

From the waitlist form we collect:

From standard web analytics we may collect aggregated, non-identifying data (approximate location, device type, referrer, pages viewed). We do not set marketing cookies and we do not build cross-site profiles.

We do not collect special categories of personal data through this site. Do not submit client facts, matter information, or any confidential data via the waitlist form — that is not what it is for.

3. Why we collect it

We use the information you submit for a single purpose: to contact you about a pilot, early-access engagement, or a substantive conversation about exPErtus. We do not run mass mailings, drip campaigns, or remarketing, and we do not sell your data.

4. Legal basis

Under the GDPR (Regulation (EU) 2016/679), we rely on:

5. How long we keep it

We retain waitlist submissions for up to 24 months from the date of submission, or until you ask us to delete your data, whichever comes first. If a pilot or customer relationship begins, the data moves under the contractual terms of that engagement and is governed by the relevant DPA.

6. Who processes it

We use a small number of processors to run the site and handle waitlist submissions:

A current list of processors is available on request. Where any transfer outside the EEA occurs, we rely on Standard Contractual Clauses and apply supplementary measures in line with Chapter V GDPR.

7. Security

We apply appropriate technical and organisational measures to protect personal data — access controls, encryption in transit, logging, and the principle of data minimisation. Production infrastructure is hosted in the EU. ISO 27001 certification is in progress; we operate to the standard today.

8. Your rights

Under the GDPR you have the right to:

To exercise any of these rights, write to hello@expertus-tax.com. We aim to respond within one month.

9. Product data (separate from this site)

Any data you submit to the exPErtus product itself during a pilot or customer engagement is governed by the DPA signed for that engagement, not by this notice. As a matter of policy: client inputs are never used to train models, training data and assessment data are strictly separated, and processing takes place in controlled EU-hosted infrastructure.

10. Changes to this notice

We will update this notice when our practices change. The effective date at the top reflects the current version. Material changes will be communicated through the website.

11. Contact

Questions, requests, or DPA enquiries: hello@expertus-tax.com.