Privacy Policy

We aim to be straightforward. If anything in this policy is unclear, email privacy@xovera.io.

1. Information we collect

Information you provide

• Identity and contact information (name, company, work email, phone number, role)
• Business qualification details (ad spend, CRM, team size, notes)
• Account credentials and profile data when you sign in to a Xovera platform
• Payment and billing information when you become a customer

Information collected automatically

• Device, browser, and operating system details
• IP address and approximate location
• Pages visited, features used, and how you navigate our properties
• Cookies and similar technologies (see Section 6)

Information from third parties

• Authentication providers (e.g. Google, Microsoft) when you use single sign-on
• Integrations (CRMs, calendars, ad platforms) you connect to a Xovera platform
• Analytics and advertising partners, in line with their own policies

2. How we use your information

• To provide and operate our products and services
• To respond to inquiries, schedule calls, and provide customer support
• To process payments and manage your account
• To send transactional messages (account confirmations, security alerts, service updates)
• To send marketing communications when you’ve opted in (see Section 4)
• To improve our products, run analytics, and detect fraud or abuse
• To comply with legal obligations

We do not sell your personal information.

3. How we share information

• Service providers— companies that help us operate (cloud hosting, email delivery, payment processing, analytics, CRM, customer support tools). They’re bound by contract to use your data only on our instructions.
• Integration partners — when you authorize an integration (e.g. connecting Xovera AI to your CRM), data flows between us and that partner per your configuration.
• Legal requirements — if required by law, regulation, or valid legal process, or to protect our rights, users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with continuity of this policy.

4. Marketing and SMS

When you opt in, we may send relevant updates by email or SMS. You can opt out at any time by replying STOP to any SMS or clicking unsubscribe in any email. Transactional messages (account confirmations, service notifications) continue regardless of marketing preferences.

If you provide a phone number through a form and check the SMS marketing opt-in, you’re agreeing to receive recurring marketing text messages from Xovera. Message frequency varies. Message and data rates may apply. Reply HELP for help, STOP to cancel. Consent is not a condition of purchase.

5. Data security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. No system is perfectly secure, but we work to minimize risk.

6. Cookies and tracking

We use cookies and similar technologies for:

• Essential site functions (authentication, security, preferences)
• Analytics (understanding how visitors use the site)
• Advertising and remarketing (only with your consent where legally required)

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

7. Data retention

We keep personal data only as long as needed for the purposes described, or as required by law. Inactive marketing contacts are removed periodically. Customer records are retained for the duration of your account plus a reasonable period for legal and accounting purposes.

8. Your rights

Depending on where you live, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your data, subject to legal exceptions
• Object to certain processing
• Restrict or port your data
• Withdraw consent for marketing or other consent-based processing

EU and UK (GDPR)

Xovera acts as a controller for the data described in this policy. Lawful bases for processing include performance of a contract, legitimate interests, your consent, and legal obligations. You have the right to lodge a complaint with your local supervisory authority.

California (CCPA / CPRA)

California residents have additional rights, including the right to know, delete, and correct personal information; the right to opt out of any “sale” or “sharing” of personal information; and the right to limit use of sensitive personal information. We do not sell personal information as defined under CCPA. To exercise these rights, email privacy@xovera.io.

How to exercise your rights

Email privacy@xovera.io. We’ll respond within the timeframe required by applicable law. We may need to verify your identity before fulfilling certain requests.

9. International transfers

Xovera operates globally. If you’re outside the country where our infrastructure is hosted, your data may be transferred to and processed in other jurisdictions. We use safeguards such as Standard Contractual Clauses when transferring personal data out of the EU or UK.

10. Children

Our services are not intended for children under 16, and we do not knowingly collect data from them. If you believe we’ve collected information from a child, contact us and we’ll delete it.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. Significant changes will be communicated through the website or by email.

12. Contact

Xovera — privacy@xovera.io for privacy questions, support@xovera.io for general inquiries.