Legal

Privacy Policy

Last updated: June 09, 2026 · Effective: June 09, 2026

Summary: Xenoraa collects only the information necessary to provide our services. We do not sell your personal data. You retain full ownership of your content. We use industry-standard security practices to protect your information.

1. Introduction

Welcome to Xenoraa ("we," "our," or "us"). Xenoraa is a multi-tenant SaaS platform that enables professionals to create and manage their digital identity at xenoraa.com/username or via a custom domain.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at xenoraa.com. By creating an account or using our services, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, username, password, and profession when you register.
Profile Content: Bio, profile photo, work experience, social media links, and any other content you add to your profile.
Business Content: Blog posts, job listings, CRM leads, expense records, and e-commerce products you create on the platform.
Payment Information: Billing details processed securely through Razorpay. We do not store your card details on our servers.
Communications: Messages you send to our support team or through the platform's contact forms.

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, time spent, and actions taken within the platform.
Device Information: Browser type, operating system, IP address, and device identifiers.
Cookies: Session cookies for authentication and preference cookies for user experience. See Section 7 for details.
Log Data: Server logs including request timestamps, error logs, and access records.

2.3 Information from Third Parties

Payment Processors: Razorpay may share transaction status and basic billing information with us.
AI Services: When you use the AI chatbot feature, queries are processed through OpenAI's API. Please review OpenAI's Privacy Policy.

3. How We Use Your Information

We use the information we collect to:

Create and manage your account and tenant profile.
Provide, operate, and improve the Xenoraa platform and its features.
Process payments and manage your subscription.
Send transactional emails (account confirmation, password reset, subscription alerts).
Send platform updates and newsletters (you may unsubscribe at any time).
Provide customer support and respond to your inquiries.
Monitor platform performance, security, and prevent abuse.
Comply with legal obligations.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Isolation and Multi-Tenancy

Xenoraa is a multi-tenant platform. Each tenant's data (blog posts, CRM leads, contacts, expenses, etc.) is logically isolated using tenant identifiers. Your data is accessible only to:

You (the account owner / admin).
Sub-users you explicitly invite to your workspace.
Xenoraa's super administrators for platform maintenance and support purposes only.

Tenant data is never shared between separate tenant accounts.

5. Data Sharing and Disclosure

We may share your information in the following limited circumstances:

Service Providers: Trusted third-party vendors (hosting, email delivery, payment processing, AI services) who process data on our behalf under strict data processing agreements.
Legal Requirements: When required by applicable law, court order, or government authority.
Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users.
Protection of Rights: To protect the rights, property, or safety of Xenoraa, our users, or the public.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account:

Your profile and public content will be removed within 30 days.
Backup copies may persist for up to 90 days before permanent deletion.
We may retain anonymized, aggregated data indefinitely for analytics.
Financial records are retained for 7 years as required by Indian tax law.

7. Cookies

We use the following types of cookies:

Essential Cookies: Required for authentication and session management. Cannot be disabled.
Preference Cookies: Remember your settings (e.g., sidebar state, theme preferences).
Analytics Cookies: Help us understand how users interact with the platform (anonymized).

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in.

8. Security

We implement industry-standard security measures to protect your data, including:

HTTPS/TLS encryption for all data in transit.
Bcrypt password hashing — we never store plain-text passwords.
Regular security audits and vulnerability assessments.
Access controls limiting data access to authorised personnel only.

No system is completely secure. If you discover a security vulnerability, please report it to support@xenoraa.com.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your account and associated data.
Portability: Request an export of your data in a machine-readable format.
Opt-out: Unsubscribe from marketing communications at any time.

To exercise these rights, contact us at support@xenoraa.com.

10. Children's Privacy

Xenoraa is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly.

11. International Data Transfers

Xenoraa is operated from India. If you access our services from outside India, your data may be transferred to and processed in India. By using our services, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or by displaying a prominent notice on the platform. Your continued use of Xenoraa after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Email: support@xenoraa.com
Website: xenoraa.com