Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number (optional), password
• Profile Data: Avatar, display name, bio, NFT characters
• Content: Files, messages, shared folders
• Payment Information: Billing details for subscriptions (processed securely by our payment providers)
• Communications: Support tickets, feedback, contact form submissions

1.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type
• Usage Data: Features used, time spent, interactions within the app
• Log Data: IP address, access times, error logs
• Cookies & Similar Technologies: For session management and preferences
• Gamification Data: Tokens earned, missions completed, levels achieved

1.3 Information From Third Parties

• Social Login: If you sign up via social media, we receive basic profile information
• Payment Processors: Transaction confirmations from Stripe or other payment providers

2. How We Use Your Information

We use collected information for the following purposes:

• Provide Services: Deliver cloud storage, chat, and gamification features
• Account Management: Create and maintain your account
• Communication: Send important updates, security alerts, and support responses
• Personalization: Customize your experience and recommendations
• Security: Detect fraud, prevent abuse, and protect user safety
• Analytics: Improve our services and understand usage patterns
• Legal Compliance: Fulfill legal obligations and enforce our terms
• Marketing: Send promotional content (you can opt-out anytime)

3. Data Security

We implement industry-standard security measures to protect your data:

• End-to-End Encryption: Files and messages are encrypted using AES-256
• Secure Storage: Data distributed across multiple secure servers
• Access Controls: Strict employee access policies and authentication
• Regular Audits: Security assessments and penetration testing
• HTTPS/TLS: All data transmission is encrypted
• Two-Factor Authentication: Available for enhanced account security

4. Data Sharing & Disclosure

We do NOT sell your personal information. We may share data only in these circumstances:

4.1 Service Providers

We work with trusted third-party providers for:

• Cloud infrastructure (AWS, Google Cloud)
• Payment processing (Stripe)
• Analytics (anonymized data only)
• Customer support tools

4.2 Legal Requirements

We may disclose information if required by law, court order, or government request.

4.3 Business Transfers

In case of merger or acquisition, your data may be transferred to the new entity (you'll be notified).

4.4 With Your Consent

We'll share data with third parties only when you explicitly authorize it.

5. Your Rights & Choices

You have the following rights regarding your data:

5.1 Access & Portability

• Request a copy of your data in a portable format
• Download all your files anytime

5.2 Correction & Update

• Edit your profile information in account settings
• Request correction of inaccurate data

5.3 Deletion

• Delete your account and associated data anytime
• Request removal of specific data

5.4 Opt-Out

• Unsubscribe from marketing emails
• Disable push notifications
• Manage cookie preferences

5.5 Object to Processing

• Object to certain data processing activities
• Withdraw consent at any time

To exercise these rights, contact us at: privacy@xevora.online

6. Data Retention

We retain your data for as long as necessary to provide services:

• Active Accounts: Data retained while account is active
• Deleted Accounts: Most data deleted within 30 days (some backups may persist up to 90 days)
• Legal Requirements: Some data retained longer for legal compliance
• Anonymized Data: May be retained indefinitely for analytics

7. Children's Privacy

Xevora is not intended for children under 13. We do not knowingly collect data from children under 13. If we discover such data, we'll delete it immediately. Parents who believe their child provided information should contact us.

8. International Data Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place through:

• Standard Contractual Clauses (EU-approved)
• Adequacy decisions
• Other lawful transfer mechanisms

9. Cookies & Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for site functionality
• Preference Cookies: Remember your settings
• Analytics Cookies: Understand usage patterns
• Marketing Cookies: Deliver relevant ads (if enabled)

You can manage cookies through your browser settings.

10. Third-Party Links

Our service may contain links to third-party websites. We're not responsible for their privacy practices. Please review their privacy policies before providing any information.

11. California Privacy Rights (CCPA)

If you're a California resident, you have additional rights:

• Right to know what personal information we collect
• Right to delete personal information
• Right to opt-out of sale (we don't sell your data)
• Right to non-discrimination

12. European Privacy Rights (GDPR)

If you're in the EU/EEA, you have rights under GDPR including:

• Right to access, rectification, and erasure
• Right to data portability
• Right to object and restrict processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

13. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via:

• Email notification
• In-app announcement
• Website banner

Continued use after changes constitutes acceptance of the updated policy.

14. Contact Us

For privacy-related questions or requests, contact us at:

• Email: privacy@xevora.online
• Data Protection Officer: dpo@xevora.online
• Company: Crazy Wolf Limited
• Website: xevora.online
• Contact Form: xevora.online/contact