Back to Xeboki

Privacy Policy

Last updated: January 15, 2025

Your Privacy Matters: This Privacy Policy explains how Xeboki collects, uses, and protects your information when you use our AI-powered POS system and related services.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Name and contact information (email, phone number)
  • Business information (company name, address, tax ID)
  • Billing and payment information
  • User credentials and authentication data

1.2 Business Data

Through your use of our POS system, we process:

  • Sales transactions and payment data
  • Inventory and product information
  • Customer data you input into the system
  • Analytics and reporting data
  • Employee access logs and activities

1.3 Technical Information

We automatically collect:

  • Device information (IP address, browser type, operating system)
  • Usage data (features used, time spent, error logs)
  • Performance metrics and system diagnostics
  • Cookies and similar tracking technologies

2. How We Use Your Information

2.1 Service Delivery

  • Process payments and manage transactions
  • Provide real-time analytics and business insights
  • Maintain inventory and customer management features
  • Synchronize data across your devices

2.2 Service Improvement

  • Develop and enhance our AI-powered features
  • Monitor system performance and reliability
  • Conduct research and analytics to improve our services
  • Personalize your user experience

2.3 Communication

  • Send service-related notifications and updates
  • Provide customer support
  • Share important security and system alerts
  • Send marketing communications (with your consent)

3. Data Sharing and Disclosure

3.1 We Do Not Sell Your Data

Xeboki does not sell, rent, or trade your personal information to third parties for their marketing purposes.

3.2 Service Providers

We may share data with trusted service providers who help us operate our business:

  • Payment processors (for transaction processing)
  • Cloud hosting providers (for data storage and computing)
  • Analytics services (for usage insights)
  • Customer support tools

3.3 Legal Requirements

We may disclose information when required by law or to:

  • Comply with legal obligations
  • Protect our rights and safety
  • Investigate fraud or security issues
  • Enforce our Terms of Service

4. Data Security

We implement comprehensive security measures to protect your information:

  • Encryption: Data is encrypted in transit and at rest using industry-standard protocols
  • Access Controls: Strict access controls and authentication requirements
  • Regular Audits: Security audits and vulnerability assessments
  • Secure Infrastructure: SOC 2 compliant data centers and cloud services
  • Employee Training: Regular security training for all staff members

5. Data Retention

We retain your information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Maintain business records as required by law

Upon account termination, we will delete or anonymize your data within 90 days, except as required for legal compliance.

6. Your Rights and Choices

6.1 Access and Control

You have the right to:

  • Access your personal information
  • Update or correct inaccurate data
  • Delete your account and associated data
  • Export your business data
  • Opt out of marketing communications

6.2 Data Portability

You can export your business data at any time through our dashboard or by contacting our support team.

7. Cookies and Tracking

We use cookies and similar technologies to:

  • Maintain your session and preferences
  • Analyze usage patterns and improve our services
  • Provide personalized content
  • Ensure security and prevent fraud

You can control cookie preferences through your browser settings, though this may affect some functionality.

8. International Data Transfers

Your information may be processed and stored in countries other than your own. We ensure appropriate safeguards are in place, including:

  • Standard contractual clauses
  • Adequacy decisions
  • Certification programs

9. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email or through our services. Your continued use constitutes acceptance of the updated policy.

11. Regional Privacy Rights

11.1 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know about personal information collected and the right to delete personal information.

11.2 European Residents (GDPR)

European residents have rights under the General Data Protection Regulation, including the right to data portability, the right to rectification, and the right to object to processing.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

  • Email: privacy@xeboki.com
  • Address: [Your Business Address]
  • Phone: [Your Phone Number]

We will respond to your inquiry within 30 days.