Privacy policy.

Privacy Privacy policy. Last updated: 2 May 2026 This Privacy Policy explains how Carvaly collects, uses, shares, protects, and retains information for the public website, authenticated valuation app, dealer workspaces, billing flows, support, and security operations. Carvaly is owned and operated by XPO8 Limited. Who controls your information Carvaly is owned and operated by XPO8 Limited. In this Privacy Policy, "Carvaly", "we", "us", and "our" refer to XPO8 Limited and the Carvaly website, app, dealer workspace, valuation tools, billing flows, support channels, and related services. This policy applies to carvaly.com, app.carvaly.com, and other Carvaly-controlled services that link to this policy. It does not apply to third-party websites, payment pages, authentication providers, or services that have their own privacy notices. Carvaly is designed for Malaysian used-car valuation and dealer workflows. Where Malaysian personal data protection law applies, we aim to process personal data consistently with the Personal Data Protection Act 2010 principles of notice and choice, disclosure, security, retention, data integrity, and access. Where Hong Kong privacy law applies, we aim to handle personal data consistently with the Personal Data (Privacy) Ordinance principles for fair collection, data accuracy, retention, use limitation, security, openness, and access or correction. Our role and your organization's role For account registration, website visitors, billing administration, product security, support, analytics, and direct relationship management, XPO8 Limited usually acts as the organization that controls why and how the relevant personal data is processed. For dealer workspace records, fleet notes, internal transaction records, offer notes, and other records entered by an organization for its own business purposes, the organization may independently control how that information is used. In those cases, Carvaly provides tools that help the organization store and process the records. If your organization uses Carvaly, your organization is responsible for giving any required notices to its staff, contractors, customers, sellers, buyers, and business contacts whose information it enters into the workspace. Your organization is also responsible for using the product in a way that matches its own privacy, HR, customer, and compliance obligations. Scope of this policy This policy covers personal data that can identify a living individual directly or indirectly, including identifiers, contact details, account details, vehicle-linked notes that identify someone, communications, technical identifiers, and billing-related information. This policy also explains how we handle non-personal, aggregated, anonymized, or de-identified information. Information that cannot reasonably identify you may be used for product analytics, reliability work, and business planning. If we combine non-personal information with personal data, we treat the combined information as personal data while it remains combined. Information we collect The information we collect depends on how you use Carvaly, whether you use the public website, create an individual account, join a dealer organization, run a valuation, save a vehicle, pay for credits, or contact support. • Identity and contact information, such as name, email address, phone number, company or dealership name, role, organization membership, invite status, and account preferences. • Authentication and account information, such as login events, session identifiers, password reset events, social sign-in identifiers, security settings, device sessions, and account status. • Vehicle and valuation information, such as make, model, year, variant, mileage, registration-related details you provide, location, condition, service history, ownership notes, accident or repair notes, photos or descriptions, valuation requests, saved valuation results, and valuation history. • Dealer workspace information, such as fleet records, acquisition cost, target margin, selling price, stock status, aging-stock notes, organization users, audit events, and internal notes. • Billing information, such as plan selection, credit balance, subscription events, invoices, payment status, checkout metadata, billing address where provided, tax-related details where needed, and payment processor references. We do not receive or store full card numbers when a payment processor tokenizes the payment instrument. • Support and communication information, such as messages, attachments, call notes, feedback, survey responses, bug reports, legal notices, privacy requests, and marketing preferences. • Technical information, such as IP address, browser type, device type, operating system, approximate location inferred from network data, referral URL, pages viewed, features used, timestamps, cookie identifiers, diagnostic events, error logs, performance data, and security logs. Sensitive and high-risk information Carvaly is not designed to collect sensitive personal data unless a feature expressly asks for it or you choose to include it in a note, message, file, or support request. Sensitive information may include government identifiers, precise identity documents, financial account details, health information, criminal-offence information, biometric information, religious beliefs, political opinions, or similar high-risk details. Do not upload identity documents, bank statements, financing documents, police reports, medical details, or other sensitive information unless the product specifically requests it and you have a lawful basis to provide it. If you include sensitive information unnecessarily, we may delete, mask, restrict, or decline to process it. Vehicle records can sometimes reveal personal details indirectly, such as seller identity, location, ownership history, financing notes, or accident context. You should enter only the information needed for the relevant valuation, listing, support, or workspace workflow. Sources of information We collect information directly from you when you submit it, automatically when you use the service, from your dealership or organization when it invites or manages you, from payment and authentication providers, from support interactions, and from publicly available information or service providers where that is lawful and necessary to operate the service. We do not control the accuracy of information published by third-party websites or other service providers that you or we may encounter while using Carvaly. We may also receive information from fraud-prevention systems, email delivery systems, analytics tools, hosting logs, error monitoring tools, and other service providers that help us operate and secure Carvaly. If another user or organization provides information about you, such as by inviting you to a workspace, assigning you a role, entering your contact details, naming you in a note, or including you in a transaction record, we process that information according to this policy and the relevant organization's instructions or product settings where applicable. How we use information We use information to operate, secure, bill, support, improve, and explain Carvaly. We only aim to collect and use information that is reasonably connected to the service, our legal obligations, our legitimate operational needs, or your instructions. • Provide valuation ranges, saved results, fleet views, Carvaly listing features, and account features. • Create and manage accounts, authenticate users, process invites, maintain organization membership, assign roles, and preserve workspace records. • Process subscriptions, credits, top-ups, checkout events, invoices, payment status, tax records, fraud checks, disputes, and billing support. • Detect, prevent, investigate, and respond to security incidents, misuse, spam, fraud, unauthorized access, automated data extraction, credit abuse, and violations of our Terms. • Respond to support, privacy, legal, sales, onboarding, and product-feedback requests. • Analyze product performance, debug errors, improve reliability, measure feature usage, refine valuation workflows, and develop new product functionality. • Send service notices, account alerts, billing notices, security notices, legal updates, product updates, and marketing communications where permitted. • Comply with legal duties, enforce agreements, protect rights, preserve evidence, respond to lawful requests, and complete business transactions such as restructuring or acquisition activity. Product improvement, models, and analytics We may use product usage data, vehicle inputs, output quality signals, error patterns, and support feedback to test, monitor, improve, and develop Carvaly. This may include improving user experience and measuring feature reliability. Where practical, we use aggregated, pseudonymized, anonymized, or de-identified information for analytics. We may retain non-identifying signals even after an account or organization record is deleted. We do not intend valuation output to be a solely automated decision with legal or similarly significant effect. Carvaly output supports human decision-making by buyers, sellers, and dealer teams, who remain responsible for final decisions. Legal bases and consent Depending on the context and applicable law, we may process personal data because it is necessary to perform a contract with you, because you consented, because we have a legitimate interest that is not overridden by your rights, because we must comply with a legal obligation, or because processing is needed to establish, exercise, or defend legal claims. Where we rely on consent, you may withdraw consent where legally available. Withdrawing consent may limit or prevent use of features that require the relevant information, such as login, saved valuations, dealer workspace access, billing, security checks, or direct marketing. Our legitimate interests may include operating the product, securing accounts, preventing fraud and misuse, improving reliability, understanding feature usage, supporting users, enforcing terms, protecting legal rights, and maintaining accurate business records. Where law requires express consent for direct marketing, sensitive personal data, or a new purpose that is not compatible with the original purpose, we will seek consent in a manner appropriate to that context. Vehicle, valuation, and listing data Vehicle data submitted to Carvaly is used to generate valuation outputs, store result history, build fleet and margin views, publish or manage Carvaly listings where you use those features, and improve the quality and reliability of the service. Valuation outputs are informational estimates. They support human decision-making and do not by themselves create a binding purchase, sale, lending, insurance, or legal decision. If you include another person's personal data in vehicle notes, transaction records, support messages, or uploaded materials, you are responsible for having a lawful basis and any required permission to provide that information to Carvaly. Vehicle information may be linked to an account, organization, valuation history, listing, offer, or transaction workflow. That context helps preserve auditability, billing, support, fraud prevention, dispute handling, and workspace continuity. We may derive non-identifying product statistics from vehicle and listing information you or your organization provide. Dealer organization access When you join a dealer organization, authorized organization contacts and members may see information connected to that organization. This can include your name, email address, role, workspace activity, saved vehicles, valuations, listings, offers, billing-related status, and support context relevant to the organization. Your organization may control or request deletion, export, or retention of workspace records that belong to the organization. If you leave an organization, records you created for that organization may remain available to the organization unless law, contract, or product settings require otherwise. Authorized organization contacts may be able to change your role, invite or remove users, view usage, manage billing, review saved vehicles, see activity associated with shared records, and request support for organization records. You should not use an organization workspace for personal information that you do not want the organization to access. If an organization asks us to assist with support, billing, security, exports, or account administration, we may share relevant information with that organization's authorized contacts after reasonable checks. How we share information We do not sell personal information in the ordinary meaning of selling a customer list for money. We share information only as needed to operate Carvaly, follow your instructions, support organization workflows, comply with law, or protect rights and security. • With your organization, including authorized contacts, authorized team members, and invited users who need access to shared workspace records. • With service providers that host, secure, process, transmit, analyze, or support Carvaly, such as cloud hosting, database, authentication, payment, email, logging, analytics, customer support, and security providers. • With payment processors such as Stripe to process payments, subscriptions, invoices, refunds where applicable, fraud checks, disputes, and billing support. • With third parties you choose to interact with through Carvaly, such as a buyer, seller, dealer, partner, or support channel, where a feature requires sharing or you direct us to share. • With professional advisers, auditors, insurers, banks, acquirers, regulators, courts, law enforcement, or other parties where reasonably necessary for legal, compliance, corporate, security, or dispute purposes. • With successors or counterparties in connection with a merger, acquisition, financing, reorganization, sale of assets, insolvency process, or transfer of all or part of the Carvaly business. Service-provider safeguards We use service providers to run Carvaly. These providers may process personal data only as needed to provide contracted services to us, such as hosting, databases, authentication, payments, email delivery, logging, analytics, support, security, monitoring, and infrastructure operations. Where required or appropriate, we use contractual and operational measures intended to require service providers to protect personal data, process it only for authorized purposes, restrict access, maintain security, assist with retention or deletion, and notify us of relevant security issues. No provider list can be permanently static because infrastructure, tooling, and product needs change. We assess providers based on the nature of the data, processing purpose, security expectations, business need, and legal requirements. Third-party services and links Carvaly may link to or integrate with third-party services, including payment processors, authentication providers, analytics providers, support tools, and communication systems. Those third parties process information under their own terms and privacy notices where they act independently. If you leave Carvaly through a link, authenticate through a third-party provider, pay through a payment processor, or communicate through a third-party support channel, you should review the privacy terms for that third party. Third-party websites may collect information about you directly when you visit them, click external links, or interact with embedded or linked content. Carvaly does not control those third-party privacy practices. Cookies, analytics, and similar technologies We may use cookies, local storage, pixels, software development kits, device identifiers, and similar technologies for necessary service operation, login sessions, fraud prevention, security, routing, language or display preferences, analytics, diagnostics, performance monitoring, and marketing measurement where enabled. Necessary cookies and session technologies are required for login, account security, checkout routing, and workspace access. Optional analytics or marketing technologies may be controlled through browser settings, device settings, consent tools where available, unsubscribe links, or by contacting us. Examples of cookie or storage categories include strictly necessary technologies for authentication and security, preference technologies for remembered settings, analytics technologies for product measurement, and marketing technologies for campaign attribution where used. Browser-level controls may not affect server-side logs, security records, payment processor records, or records that are necessary for contract, legal, or fraud-prevention purposes. International transfers Carvaly is operated by XPO8 Limited and may use service providers, infrastructure, employees, contractors, or support tools in Malaysia, Hong Kong, Singapore, the United States, the European Economic Area, the United Kingdom, or other locations where we or our providers operate. When information is transferred across borders, we use contractual, technical, organizational, and provider due-diligence measures intended to protect information in a manner appropriate to the nature of the data and applicable law. The privacy and data-protection laws in these locations may differ from the laws in your country. By using Carvaly or submitting information to us, you understand that information may be processed in these locations for the purposes described in this policy. Retention We keep information for as long as reasonably needed to provide Carvaly, maintain account and organization history, support saved valuations, preserve billing and financial records, secure the service, resolve disputes, comply with legal obligations, enforce agreements, and maintain backups. Retention periods vary by data type. For example, workspace records may be kept while the organization account remains active, billing records may be kept for statutory accounting and tax periods, security logs may be kept for investigation and abuse-prevention needs, and backup copies may persist for a limited period before deletion cycles complete. If we delete or de-identify information, we may retain aggregated, anonymized, or non-identifying statistics and market signals that no longer identify you or your organization. We may retain records longer where needed for unpaid balances, disputed transactions, fraud investigations, security events, legal holds, tax or accounting obligations, regulatory requests, product integrity, or evidence preservation. Deletion from active systems may not immediately remove information from encrypted backups, logs, archives, payment processor systems, email systems, support systems, or records controlled by your organization. Those systems follow their own retention and deletion cycles. Security We use technical and organizational safeguards intended to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These may include HTTPS, authentication controls, role-based access, logging, provider security controls, least-privilege practices, backup procedures, monitoring, and incident response processes. No online service can guarantee perfect security. You are responsible for using strong passwords, securing your email account, protecting devices, limiting workspace invites, removing former team members, and promptly telling us about suspected unauthorized access. We may review logs, account events, payment events, workspace events, device or network signals, and support records to detect suspicious activity, investigate incidents, prevent abuse, and protect users. If we become aware of a security incident affecting personal data, we will assess the incident and take steps that we consider appropriate under the circumstances, which may include containment, investigation, remediation, provider coordination, user notice, organization notice, or regulatory communication where legally required. Your choices and rights Depending on where you are located and how you use Carvaly, you may have rights to request access to personal data, correction of inaccurate data, deletion, restriction, portability, objection to certain processing, withdrawal of consent, and prevention of processing for direct marketing. We may need to verify your identity and account connection before acting on a request. We may refuse, limit, or delay a request where permitted by law, including where information must be retained for billing, legal, security, fraud-prevention, dispute, backup, organization record, or freedom-of-expression reasons. If your account is controlled by a dealer organization, we may direct some workspace-record requests to an authorized organization contact because that organization controls how its internal records are used. Malaysian users may have rights under the PDPA to be informed whether personal data is processed, access personal data, correct personal data, withdraw consent, prevent processing likely to cause damage or distress, and prevent processing for direct marketing. Hong Kong users may have access and correction rights under the PDPO where it applies. You may also update some information directly in the product, unsubscribe from promotional emails through the email footer, change browser cookie settings, leave an organization subject to product settings, or ask an authorized organization contact to remove or correct organization-controlled records. How we handle privacy requests To make a privacy request, contact privacy@carvaly.com and include the email address linked to your account, your organization name if applicable, the right you want to exercise, and enough detail for us to locate the relevant records. We may ask for additional information to verify your identity, authority, or relationship to an organization. If you are making a request for someone else, we may ask for proof that you are authorized to act for that person. We aim to respond within a reasonable period required by applicable law. Complex requests, organization-controlled records, archived records, legal holds, security investigations, or high-volume requests may take longer where law permits. Marketing communications We may send product updates, onboarding messages, event invitations, research requests, or promotional messages where permitted. You can opt out of promotional emails by using the unsubscribe link or contacting us. Even if you opt out of marketing, we may still send service, account, billing, security, legal, and transactional notices. We do not treat your use of Carvaly as consent to receive third-party marketing from unrelated companies. If we ever ask to use your information for a materially different marketing purpose, we will seek consent where required. If your organization provides your business contact information for account administration or product onboarding, we may contact you about that organization account even if you personally did not complete the first signup step. Children Carvaly is not intended for children or for users under 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data to Carvaly, contact us so we can review and take appropriate action. Public listings, external links, and visibility If Carvaly offers public or shared listings, profile pages, report links, invite links, or externally shareable records, the information made visible through those features may be viewed, copied, indexed, forwarded, or stored by others depending on the feature and settings. You should check visibility settings, recipient details, link permissions, and organization policies before sharing a report, listing, invite, or transaction record. We cannot control how recipients use information after they receive it outside Carvaly. Keeping information accurate Please keep your account, organization, billing, and vehicle information accurate and up to date. Inaccurate vehicle inputs can materially affect valuation output, and inaccurate account or billing information may prevent support, notices, checkout, or account recovery from working correctly. If you believe information published by a third party is inaccurate, you may need to contact that third party directly. Carvaly may be unable to correct third-party data, but we may update, remove, or annotate our own records where appropriate. Business transfers and corporate changes If XPO8 Limited or Carvaly is involved in a merger, acquisition, financing, restructuring, insolvency, sale of assets, joint venture, transfer of shares, or similar transaction, information may be disclosed to advisers, counterparties, auditors, financiers, insurers, regulators, or successor entities as reasonably needed for that transaction. If a transaction results in a material change to how personal data is controlled or used, we will handle notice and choice in accordance with applicable law. Changes to this Privacy Policy We may update this Privacy Policy from time to time to reflect product changes, provider changes, legal requirements, or operational improvements. If changes are material, we may provide notice through the website, product, email, or another reasonable channel. The updated policy applies from the effective date stated in the updated version or, if no date is stated, from publication. Your continued use of Carvaly after an updated policy applies means you acknowledge the updated policy. We may maintain previous versions for internal legal and compliance purposes. The version shown on the website is the current public version unless it states otherwise. Contact for privacy requests Send privacy questions, access requests, correction requests, deletion requests, consent withdrawal requests, and direct marketing objections to privacy@carvaly.com. Include the email address linked to your Carvaly account or dealer organization so we can locate the relevant records. XPO8 Limited, 1603, The L. Plaza, 367-375 Queen's Road Central, Sheung Wan, Hong Kong Island, Hong Kong.

Privasi Dasar privasi. Dikemas kini terakhir: 2 Mei 2026 Dasar Privasi ini menerangkan cara Carvaly mengumpulkan, menggunakan, berkongsi, melindungi, dan menyimpan maklumat untuk laman web awam, aplikasi penilaian yang disahkan, ruang kerja pengedar, aliran bil, sokongan, dan operasi keselamatan. Carvaly dimiliki dan dikendalikan oleh XPO8 Limited. Pihak yang mengawal maklumat anda Carvaly dimiliki dan dikendalikan oleh XPO8 Limited. Dalam Dasar Privasi ini, "Carvaly", "kami", dan "pihak kami" merujuk kepada XPO8 Limited serta laman web Carvaly, aplikasi, ruang kerja pengedar, alat penilaian, aliran bil, saluran sokongan, dan perkhidmatan berkaitan. Dasar ini terpakai kepada carvaly.com, app.carvaly.com, dan perkhidmatan lain yang dikawal oleh Carvaly serta memaut kepada dasar ini. Dasar ini tidak terpakai kepada laman web pihak ketiga, halaman bayaran, penyedia pengesahan, atau perkhidmatan yang mempunyai notis privasi sendiri. Carvaly direka untuk penilaian kereta terpakai Malaysia dan aliran kerja pengedar. Apabila undang-undang perlindungan data peribadi Malaysia terpakai, kami berusaha memproses data peribadi selaras dengan prinsip Akta Perlindungan Data Peribadi 2010 mengenai notis dan pilihan, pendedahan, keselamatan, penyimpanan, integriti data, dan akses. Apabila undang-undang privasi Hong Kong terpakai, kami berusaha mengendalikan data peribadi selaras dengan prinsip Personal Data (Privacy) Ordinance mengenai kutipan yang adil, ketepatan data, penyimpanan, had penggunaan, keselamatan, keterbukaan, serta akses atau pembetulan. Peranan kami dan peranan organisasi anda Untuk pendaftaran akaun, pelawat laman web, pentadbiran bil, keselamatan produk, sokongan, analitik, dan pengurusan hubungan langsung, XPO8 Limited biasanya bertindak sebagai organisasi yang mengawal sebab dan cara data peribadi berkaitan diproses. Untuk rekod ruang kerja pengedar, nota inventori, rekod transaksi dalaman, nota tawaran, dan rekod lain yang dimasukkan oleh organisasi bagi tujuan perniagaannya sendiri, organisasi itu boleh mengawal secara berasingan cara maklumat tersebut digunakan. Dalam keadaan itu, Carvaly menyediakan alat untuk membantu organisasi menyimpan dan memproses rekod. Jika organisasi anda menggunakan Carvaly, organisasi anda bertanggungjawab memberikan notis yang diperlukan kepada kakitangan, kontraktor, pelanggan, penjual, pembeli, dan kenalan perniagaan yang maklumatnya dimasukkan ke ruang kerja. Organisasi anda juga bertanggungjawab menggunakan produk selaras dengan kewajipan privasi, HR, pelanggan, dan pematuhannya sendiri. Skop dasar ini Dasar ini meliputi data peribadi yang boleh mengenal pasti individu yang masih hidup secara langsung atau tidak langsung, termasuk pengecam, butiran hubungan, butiran akaun, nota berkaitan kenderaan yang mengenal pasti seseorang, komunikasi, pengecam teknikal, dan maklumat berkaitan bil. Dasar ini juga menerangkan cara kami mengendalikan maklumat bukan peribadi, agregat, tanpa nama, atau dinyahkenal pasti. Maklumat yang tidak munasabah untuk mengenal pasti anda boleh digunakan untuk analitik produk, kerja kebolehpercayaan, dan perancangan perniagaan. Jika kami menggabungkan maklumat bukan peribadi dengan data peribadi, kami menganggap maklumat gabungan itu sebagai data peribadi selagi ia kekal digabungkan. Maklumat yang kami kumpulkan Maklumat yang kami kumpulkan bergantung pada cara anda menggunakan Carvaly, sama ada anda menggunakan laman web awam, mencipta akaun individu, menyertai organisasi pengedar, menjalankan penilaian, menyimpan kenderaan, membayar kredit, atau menghubungi sokongan. • Maklumat identiti dan hubungan, seperti nama, alamat e-mel, nombor telefon, nama syarikat atau pengedar, peranan, keahlian organisasi, status jemputan, dan pilihan akaun. • Maklumat pengesahan dan akaun, seperti peristiwa log masuk, pengecam sesi, peristiwa tetapan semula kata laluan, pengecam log masuk sosial, tetapan keselamatan, sesi peranti, dan status akaun. • Maklumat kenderaan dan penilaian, seperti jenama, model, tahun, varian, jarak perbatuan, butiran berkaitan pendaftaran yang anda berikan, lokasi, keadaan, sejarah servis, nota pemilikan, nota kemalangan atau pembaikan, foto atau penerangan, permintaan penilaian, keputusan penilaian yang disimpan, dan sejarah penilaian. • Maklumat ruang kerja pengedar, seperti rekod inventori, kos perolehan, margin sasaran, harga jualan, status stok, nota stok berusia, pengguna organisasi, peristiwa audit, dan nota dalaman. • Maklumat bil, seperti pilihan pelan, baki kredit, peristiwa langganan, invois, status bayaran, metadata bayaran, alamat bil jika diberikan, butiran cukai jika diperlukan, dan rujukan pemproses bayaran. Kami tidak menerima atau menyimpan nombor kad penuh apabila pemproses bayaran melakukan tokenisasi instrumen bayaran. • Maklumat sokongan dan komunikasi, seperti mesej, lampiran, nota panggilan, maklum balas, jawapan kaji selidik, laporan pepijat, notis undang-undang, permintaan privasi, dan pilihan pemasaran. • Maklumat teknikal, seperti alamat IP, jenis pelayar, jenis peranti, sistem operasi, lokasi anggaran daripada data rangkaian, URL rujukan, halaman dilihat, ciri digunakan, cap masa, pengecam kuki, peristiwa diagnostik, log ralat, data prestasi, dan log keselamatan. Maklumat sensitif dan berisiko tinggi Carvaly tidak direka untuk mengumpulkan data peribadi sensitif melainkan ciri tertentu memintanya secara jelas atau anda memilih untuk memasukkannya dalam nota, mesej, fail, atau permintaan sokongan. Maklumat sensitif boleh merangkumi pengecam kerajaan, dokumen identiti tepat, butiran akaun kewangan, maklumat kesihatan, maklumat kesalahan jenayah, maklumat biometrik, kepercayaan agama, pandangan politik, atau butiran berisiko tinggi yang serupa. Jangan muat naik dokumen identiti, penyata bank, dokumen pembiayaan, laporan polis, butiran perubatan, atau maklumat sensitif lain melainkan produk secara khusus memintanya dan anda mempunyai asas undang-undang untuk memberikannya. Jika anda memasukkan maklumat sensitif tanpa keperluan, kami boleh memadam, menutup, mengehadkan, atau enggan memprosesnya. Rekod kenderaan kadangkala boleh mendedahkan butiran peribadi secara tidak langsung, seperti identiti penjual, lokasi, sejarah pemilikan, nota pembiayaan, atau konteks kemalangan. Anda harus memasukkan hanya maklumat yang diperlukan untuk penilaian, senaraian, sokongan, atau aliran kerja ruang kerja yang berkaitan. Sumber maklumat Kami mengumpulkan maklumat secara langsung daripada anda apabila anda menyerahkannya, secara automatik apabila anda menggunakan perkhidmatan, daripada pengedar atau organisasi anda apabila ia menjemput atau mengurus anda, daripada penyedia bayaran dan pengesahan, daripada interaksi sokongan, serta daripada maklumat yang tersedia secara awam atau penyedia perkhidmatan apabila itu sah dan perlu untuk mengendalikan perkhidmatan. Kami tidak mengawal ketepatan maklumat yang diterbitkan oleh laman web pihak ketiga atau penyedia perkhidmatan lain yang anda atau kami mungkin temui semasa menggunakan Carvaly. Kami juga boleh menerima maklumat daripada sistem pencegahan penipuan, sistem penghantaran e-mel, alat analitik, log hosting, alat pemantauan ralat, dan penyedia perkhidmatan lain yang membantu kami mengendalikan dan melindungi Carvaly. Jika pengguna atau organisasi lain memberikan maklumat tentang anda, seperti menjemput anda ke ruang kerja, menetapkan peranan anda, memasukkan butiran hubungan anda, menamakan anda dalam nota, atau memasukkan anda dalam rekod transaksi, kami memproses maklumat itu menurut dasar ini dan arahan organisasi berkaitan atau tetapan produk jika berkenaan. Cara kami menggunakan maklumat Kami menggunakan maklumat untuk mengendalikan, melindungi, mengebil, menyokong, menambah baik, dan menerangkan Carvaly. Kami hanya berusaha mengumpulkan dan menggunakan maklumat yang berkaitan secara munasabah dengan perkhidmatan, kewajipan undang-undang, keperluan operasi sah, atau arahan anda. • Menyediakan julat penilaian, keputusan tersimpan, paparan inventori, ciri iklan Carvaly, dan ciri akaun. • Mencipta dan mengurus akaun, mengesahkan pengguna, memproses jemputan, mengekalkan keahlian organisasi, menetapkan peranan, dan menyimpan rekod ruang kerja. • Memproses langganan, kredit, top-up, peristiwa bayaran, invois, status bayaran, rekod cukai, semakan penipuan, pertikaian, dan sokongan bil. • Mengesan, mencegah, menyiasat, dan bertindak balas terhadap insiden keselamatan, penyalahgunaan, spam, penipuan, akses tanpa kebenaran, pengekstrakan data automatik, penyalahgunaan kredit, dan pelanggaran Terma kami. • Menjawab permintaan sokongan, privasi, undang-undang, jualan, persediaan, dan maklum balas produk. • Menganalisis prestasi produk, menyahpepijat ralat, meningkatkan kebolehpercayaan, mengukur penggunaan ciri, memperhalus aliran kerja penilaian, dan membangunkan fungsi produk baharu. • Menghantar notis perkhidmatan, amaran akaun, notis bil, notis keselamatan, kemas kini undang-undang, kemas kini produk, dan komunikasi pemasaran jika dibenarkan. • Mematuhi kewajipan undang-undang, menguatkuasakan perjanjian, melindungi hak, memelihara bukti, menjawab permintaan sah, dan melengkapkan transaksi perniagaan seperti penstrukturan semula atau pemerolehan. Penambahbaikan produk, model, dan analitik Kami boleh menggunakan data penggunaan produk, input kenderaan, isyarat kualiti output, corak ralat, dan maklum balas sokongan untuk menguji, memantau, menambah baik, dan membangunkan Carvaly. Ini boleh termasuk meningkatkan pengalaman pengguna dan mengukur kebolehpercayaan ciri. Jika praktikal, kami menggunakan maklumat agregat, berpseudonim, tanpa nama, atau dinyahkenal pasti untuk analitik. Kami boleh menyimpan isyarat tidak mengenal pasti walaupun selepas rekod akaun atau organisasi dipadam. Kami tidak berniat menjadikan output penilaian sebagai keputusan automatik sepenuhnya yang memberi kesan undang-undang atau kesan penting yang serupa. Output Carvaly menyokong keputusan manusia oleh pembeli, penjual, dan pasukan pengedar, yang kekal bertanggungjawab atas keputusan akhir. Asas undang-undang dan persetujuan Bergantung pada konteks dan undang-undang terpakai, kami boleh memproses data peribadi kerana ia diperlukan untuk melaksanakan kontrak dengan anda, kerana anda memberi persetujuan, kerana kami mempunyai kepentingan sah yang tidak mengatasi hak anda, kerana kami mesti mematuhi kewajipan undang-undang, atau kerana pemprosesan diperlukan untuk mewujudkan, melaksanakan, atau mempertahankan tuntutan undang-undang. Apabila kami bergantung pada persetujuan, anda boleh menarik balik persetujuan jika tersedia di sisi undang-undang. Penarikan balik persetujuan boleh mengehadkan atau menghalang penggunaan ciri yang memerlukan maklumat berkaitan, seperti log masuk, penilaian tersimpan, akses ruang kerja pengedar, bil, semakan keselamatan, atau pemasaran langsung. Kepentingan sah kami boleh termasuk mengendalikan produk, melindungi akaun, mencegah penipuan dan penyalahgunaan, meningkatkan kebolehpercayaan, memahami penggunaan ciri, menyokong pengguna, menguatkuasakan terma, melindungi hak undang-undang, dan mengekalkan rekod perniagaan yang tepat. Apabila undang-undang memerlukan persetujuan nyata untuk pemasaran langsung, data peribadi sensitif, atau tujuan baharu yang tidak serasi dengan tujuan asal, kami akan mendapatkan persetujuan dengan cara yang sesuai dengan konteks tersebut. Data kenderaan, penilaian, dan iklan Data kenderaan yang diserahkan kepada Carvaly digunakan untuk menjana output penilaian, menyimpan sejarah keputusan, membina paparan inventori dan margin, menerbitkan atau mengurus iklan Carvaly apabila anda menggunakan ciri itu, serta meningkatkan kualiti dan kebolehpercayaan perkhidmatan. Output penilaian ialah anggaran maklumat. Ia menyokong keputusan manusia dan tidak dengan sendirinya mewujudkan keputusan pembelian, jualan, pinjaman, insurans, atau undang-undang yang mengikat. Jika anda memasukkan data peribadi orang lain dalam nota kenderaan, rekod transaksi, mesej sokongan, atau bahan yang dimuat naik, anda bertanggungjawab mempunyai asas undang-undang dan kebenaran yang diperlukan untuk memberikan maklumat itu kepada Carvaly. Maklumat kenderaan boleh dipautkan kepada akaun, organisasi, sejarah penilaian, senaraian, tawaran, atau aliran kerja transaksi. Konteks itu membantu mengekalkan kebolehauditan, bil, sokongan, pencegahan penipuan, pengendalian pertikaian, dan kesinambungan ruang kerja. Kami boleh menghasilkan statistik produk yang tidak mengenal pasti daripada maklumat kenderaan dan iklan yang anda atau organisasi anda berikan. Akses organisasi pengedar Apabila anda menyertai organisasi pengedar, wakil organisasi dan ahli yang diberi kuasa boleh melihat maklumat berkaitan organisasi itu. Ini boleh termasuk nama, alamat e-mel, peranan, aktiviti ruang kerja, kenderaan disimpan, penilaian, senaraian, tawaran, status berkaitan bil, dan konteks sokongan yang relevan kepada organisasi. Organisasi anda boleh mengawal atau meminta pemadaman, eksport, atau penyimpanan rekod ruang kerja milik organisasi. Jika anda meninggalkan organisasi, rekod yang anda cipta untuk organisasi itu boleh kekal tersedia kepada organisasi melainkan undang-undang, kontrak, atau tetapan produk memerlukan sebaliknya. Wakil organisasi yang diberi kuasa mungkin boleh menukar peranan anda, menjemput atau membuang pengguna, melihat penggunaan, mengurus bil, menyemak kenderaan disimpan, melihat aktiviti berkaitan rekod dikongsi, dan meminta sokongan untuk rekod organisasi. Anda tidak harus menggunakan ruang kerja organisasi untuk maklumat peribadi yang anda tidak mahu organisasi akses. Jika organisasi meminta kami membantu dengan sokongan, bil, keselamatan, eksport, atau pentadbiran akaun, kami boleh berkongsi maklumat berkaitan dengan wakil organisasi yang diberi kuasa selepas semakan munasabah. Cara kami berkongsi maklumat Kami tidak menjual maklumat peribadi dalam maksud biasa menjual senarai pelanggan untuk wang. Kami berkongsi maklumat hanya apabila perlu untuk mengendalikan Carvaly, mengikuti arahan anda, menyokong aliran kerja organisasi, mematuhi undang-undang, atau melindungi hak dan keselamatan. • Dengan organisasi anda, termasuk wakil yang diberi kuasa, ahli pasukan yang diberi kuasa, dan pengguna jemputan yang memerlukan akses kepada rekod ruang kerja dikongsi. • Dengan penyedia perkhidmatan yang mengehos, melindungi, memproses, menghantar, menganalisis, atau menyokong Carvaly, seperti penyedia hosting awan, pangkalan data, pengesahan, bayaran, e-mel, log, analitik, sokongan pelanggan, dan keselamatan. • Dengan pemproses bayaran seperti Stripe untuk memproses bayaran, langganan, invois, bayaran balik jika berkenaan, semakan penipuan, pertikaian, dan sokongan bil. • Dengan pihak ketiga yang anda pilih untuk berinteraksi melalui Carvaly, seperti pembeli, penjual, pengedar, rakan kongsi, atau saluran sokongan, apabila ciri memerlukan perkongsian atau anda mengarahkan kami berkongsi. • Dengan penasihat profesional, juruaudit, penanggung insurans, bank, pemeroleh, pengawal selia, mahkamah, penguat kuasa undang-undang, atau pihak lain apabila munasabah diperlukan untuk tujuan undang-undang, pematuhan, korporat, keselamatan, atau pertikaian. • Dengan pengganti atau pihak lawan berhubung penggabungan, pemerolehan, pembiayaan, penyusunan semula, penjualan aset, proses insolvensi, atau pemindahan semua atau sebahagian perniagaan Carvaly. Perlindungan penyedia perkhidmatan Kami menggunakan penyedia perkhidmatan untuk menjalankan Carvaly. Penyedia ini boleh memproses data peribadi hanya setakat diperlukan untuk memberikan perkhidmatan berkontrak kepada kami, seperti hosting, pangkalan data, pengesahan, bayaran, penghantaran e-mel, log, analitik, sokongan, keselamatan, pemantauan, dan operasi infrastruktur. Jika diperlukan atau sesuai, kami menggunakan langkah kontrak dan operasi yang bertujuan mewajibkan penyedia perkhidmatan melindungi data peribadi, memprosesnya hanya untuk tujuan dibenarkan, mengehadkan akses, mengekalkan keselamatan, membantu penyimpanan atau pemadaman, dan memaklumkan kami tentang isu keselamatan berkaitan. Tiada senarai penyedia boleh kekal statik kerana infrastruktur, alat, dan keperluan produk berubah. Kami menilai penyedia berdasarkan sifat data, tujuan pemprosesan, jangkaan keselamatan, keperluan perniagaan, dan kehendak undang-undang. Perkhidmatan dan pautan pihak ketiga Carvaly boleh memaut kepada atau berintegrasi dengan perkhidmatan pihak ketiga, termasuk pemproses bayaran, penyedia pengesahan, penyedia analitik, alat sokongan, dan sistem komunikasi. Pihak ketiga itu memproses maklumat di bawah terma dan notis privasi mereka sendiri apabila mereka bertindak secara bebas. Jika anda meninggalkan Carvaly melalui pautan, mengesahkan melalui penyedia pihak ketiga, membayar melalui pemproses bayaran, atau berkomunikasi melalui saluran sokongan pihak ketiga, anda harus menyemak terma privasi pihak ketiga tersebut. Laman web pihak ketiga boleh mengumpulkan maklumat tentang anda secara langsung apabila anda melawatnya, mengklik pautan luaran, atau berinteraksi dengan kandungan terbenam atau terpaut. Carvaly tidak mengawal amalan privasi pihak ketiga itu. Kuki, analitik, dan teknologi serupa Kami boleh menggunakan kuki, storan tempatan, piksel, kit pembangunan perisian, pengecam peranti, dan teknologi serupa untuk operasi perkhidmatan yang diperlukan, sesi log masuk, pencegahan penipuan, keselamatan, penghalaan, pilihan bahasa atau paparan, analitik, diagnostik, pemantauan prestasi, dan ukuran pemasaran jika diaktifkan. Kuki perlu dan teknologi sesi diperlukan untuk log masuk, keselamatan akaun, penghalaan bayaran, dan akses ruang kerja. Teknologi analitik atau pemasaran pilihan boleh dikawal melalui tetapan pelayar, tetapan peranti, alat persetujuan jika tersedia, pautan nyahlanggan, atau dengan menghubungi kami. Contoh kategori kuki atau storan termasuk teknologi yang sangat diperlukan untuk pengesahan dan keselamatan, teknologi pilihan untuk tetapan yang diingati, teknologi analitik untuk pengukuran produk, dan teknologi pemasaran untuk atribusi kempen jika digunakan. Kawalan tahap pelayar mungkin tidak menjejaskan log sisi pelayan, rekod keselamatan, rekod pemproses bayaran, atau rekod yang diperlukan untuk tujuan kontrak, undang-undang, atau pencegahan penipuan. Pemindahan antarabangsa Carvaly dikendalikan oleh XPO8 Limited dan boleh menggunakan penyedia perkhidmatan, infrastruktur, pekerja, kontraktor, atau alat sokongan di Malaysia, Hong Kong, Singapura, Amerika Syarikat, Kawasan Ekonomi Eropah, United Kingdom, atau lokasi lain tempat kami atau penyedia kami beroperasi. Apabila maklumat dipindahkan merentas sempadan, kami menggunakan langkah kontrak, teknikal, organisasi, dan semakan wajar penyedia yang bertujuan melindungi maklumat mengikut sifat data dan undang-undang terpakai. Undang-undang privasi dan perlindungan data di lokasi ini mungkin berbeza daripada undang-undang di negara anda. Dengan menggunakan Carvaly atau menyerahkan maklumat kepada kami, anda memahami bahawa maklumat boleh diproses di lokasi ini bagi tujuan yang diterangkan dalam dasar ini. Penyimpanan Kami menyimpan maklumat selama yang munasabah diperlukan untuk menyediakan Carvaly, mengekalkan sejarah akaun dan organisasi, menyokong penilaian tersimpan, memelihara rekod bil dan kewangan, melindungi perkhidmatan, menyelesaikan pertikaian, mematuhi kewajipan undang-undang, menguatkuasakan perjanjian, dan mengekalkan sandaran. Tempoh penyimpanan berbeza mengikut jenis data. Contohnya, rekod ruang kerja boleh disimpan selagi akaun organisasi aktif, rekod bil boleh disimpan untuk tempoh perakaunan dan cukai berkanun, log keselamatan boleh disimpan untuk keperluan siasatan dan pencegahan penyalahgunaan, dan salinan sandaran boleh kekal untuk tempoh terhad sebelum kitaran pemadaman selesai. Jika kami memadam atau menyahkenal pasti maklumat, kami boleh menyimpan statistik dan isyarat pasaran yang agregat, tanpa nama, atau tidak mengenal pasti anda atau organisasi anda. Kami boleh menyimpan rekod lebih lama jika diperlukan untuk baki belum dibayar, transaksi dipertikaikan, siasatan penipuan, peristiwa keselamatan, pegangan undang-undang, kewajipan cukai atau perakaunan, permintaan pengawal selia, integriti produk, atau pemeliharaan bukti. Pemadaman daripada sistem aktif mungkin tidak serta-merta mengalih keluar maklumat daripada sandaran terenkripsi, log, arkib, sistem pemproses bayaran, sistem e-mel, sistem sokongan, atau rekod yang dikawal oleh organisasi anda. Sistem tersebut mengikut kitaran penyimpanan dan pemadaman masing-masing. Keselamatan Kami menggunakan perlindungan teknikal dan organisasi yang bertujuan melindungi maklumat daripada akses tanpa kebenaran, kehilangan, penyalahgunaan, perubahan, dan pendedahan. Ini boleh termasuk HTTPS, kawalan pengesahan, akses berasaskan peranan, log, kawalan keselamatan penyedia, amalan hak akses minimum, prosedur sandaran, pemantauan, dan proses respons insiden. Tiada perkhidmatan dalam talian boleh menjamin keselamatan sempurna. Anda bertanggungjawab menggunakan kata laluan yang kuat, melindungi akaun e-mel, melindungi peranti, mengehadkan jemputan ruang kerja, membuang bekas ahli pasukan, dan segera memberitahu kami tentang akses tanpa kebenaran yang disyaki. Kami boleh menyemak log, peristiwa akaun, peristiwa bayaran, peristiwa ruang kerja, isyarat peranti atau rangkaian, dan rekod sokongan untuk mengesan aktiviti mencurigakan, menyiasat insiden, mencegah penyalahgunaan, dan melindungi pengguna. Jika kami mengetahui insiden keselamatan yang menjejaskan data peribadi, kami akan menilai insiden itu dan mengambil langkah yang kami anggap sesuai dalam keadaan tersebut, yang boleh termasuk pembendungan, siasatan, pemulihan, penyelarasan penyedia, notis pengguna, notis organisasi, atau komunikasi pengawal selia jika diwajibkan undang-undang. Pilihan dan hak anda Bergantung pada lokasi anda dan cara anda menggunakan Carvaly, anda mungkin mempunyai hak untuk meminta akses kepada data peribadi, pembetulan data tidak tepat, pemadaman, sekatan, mudah alih data, bantahan terhadap pemprosesan tertentu, penarikan balik persetujuan, dan pencegahan pemprosesan untuk pemasaran langsung. Kami mungkin perlu mengesahkan identiti dan hubungan akaun anda sebelum bertindak atas permintaan. Kami boleh menolak, mengehadkan, atau melambatkan permintaan jika dibenarkan undang-undang, termasuk apabila maklumat mesti disimpan untuk sebab bil, undang-undang, keselamatan, pencegahan penipuan, pertikaian, sandaran, rekod organisasi, atau kebebasan bersuara. Jika akaun anda dikawal oleh organisasi pengedar, kami boleh mengarahkan sebahagian permintaan rekod ruang kerja kepada wakil organisasi yang diberi kuasa kerana organisasi itu mengawal cara rekod dalaman digunakan. Pengguna Malaysia mungkin mempunyai hak di bawah PDPA untuk dimaklumkan sama ada data peribadi diproses, mengakses data peribadi, membetulkan data peribadi, menarik balik persetujuan, mencegah pemprosesan yang mungkin menyebabkan kerosakan atau tekanan, dan mencegah pemprosesan untuk pemasaran langsung. Pengguna Hong Kong mungkin mempunyai hak akses dan pembetulan di bawah PDPO jika ia terpakai. Anda juga boleh mengemas kini sebahagian maklumat terus dalam produk, menyahlanggan e-mel promosi melalui footer e-mel, menukar tetapan kuki pelayar, meninggalkan organisasi tertakluk kepada tetapan produk, atau meminta wakil organisasi yang diberi kuasa membuang atau membetulkan rekod yang dikawal organisasi. Cara kami mengendalikan permintaan privasi Untuk membuat permintaan privasi, hubungi privacy@carvaly.com dan sertakan alamat e-mel yang dipautkan kepada akaun anda, nama organisasi anda jika berkenaan, hak yang ingin anda gunakan, dan butiran mencukupi untuk kami mencari rekod berkaitan. Kami boleh meminta maklumat tambahan untuk mengesahkan identiti, kuasa, atau hubungan anda dengan organisasi. Jika anda membuat permintaan bagi pihak orang lain, kami boleh meminta bukti bahawa anda diberi kuasa untuk bertindak bagi orang itu. Kami berusaha menjawab dalam tempoh munasabah yang dikehendaki undang-undang terpakai. Permintaan kompleks, rekod yang dikawal organisasi, rekod arkib, pegangan undang-undang, siasatan keselamatan, atau permintaan berjumlah tinggi boleh mengambil masa lebih lama jika dibenarkan undang-undang. Komunikasi pemasaran Kami boleh menghantar kemas kini produk, mesej persediaan, jemputan acara, permintaan penyelidikan, atau mesej promosi jika dibenarkan. Anda boleh memilih keluar daripada e-mel promosi dengan menggunakan pautan nyahlanggan atau menghubungi kami. Walaupun anda memilih keluar daripada pemasaran, kami masih boleh menghantar notis perkhidmatan, akaun, bil, keselamatan, undang-undang, dan transaksi. Kami tidak menganggap penggunaan Carvaly oleh anda sebagai persetujuan untuk menerima pemasaran pihak ketiga daripada syarikat tidak berkaitan. Jika kami pernah meminta untuk menggunakan maklumat anda bagi tujuan pemasaran yang berbeza secara material, kami akan mendapatkan persetujuan jika diperlukan. Jika organisasi anda memberikan maklumat hubungan perniagaan anda untuk pentadbiran akaun atau persediaan produk, kami boleh menghubungi anda tentang akaun organisasi itu walaupun anda secara peribadi tidak melengkapkan langkah pendaftaran pertama. Kanak-kanak Carvaly tidak ditujukan kepada kanak-kanak atau pengguna bawah 18 tahun. Kami tidak dengan sengaja mengumpulkan data peribadi daripada kanak-kanak. Jika anda percaya seorang kanak-kanak telah memberikan data peribadi kepada Carvaly, hubungi kami supaya kami boleh menyemak dan mengambil tindakan sesuai. Senaraian awam, pautan luaran, dan keterlihatan Jika Carvaly menawarkan senaraian awam atau dikongsi, halaman profil, pautan laporan, pautan jemputan, atau rekod yang boleh dikongsi secara luaran, maklumat yang kelihatan melalui ciri tersebut boleh dilihat, disalin, diindeks, dimajukan, atau disimpan oleh pihak lain bergantung pada ciri dan tetapan. Anda harus menyemak tetapan keterlihatan, butiran penerima, kebenaran pautan, dan dasar organisasi sebelum berkongsi laporan, senaraian, jemputan, atau rekod transaksi. Kami tidak boleh mengawal cara penerima menggunakan maklumat selepas mereka menerimanya di luar Carvaly. Memastikan maklumat tepat Sila pastikan maklumat akaun, organisasi, bil, dan kenderaan anda tepat dan terkini. Input kenderaan yang tidak tepat boleh menjejaskan output penilaian secara material, dan maklumat akaun atau bil yang tidak tepat boleh menghalang sokongan, notis, bayaran, atau pemulihan akaun daripada berfungsi dengan betul. Jika anda percaya maklumat yang diterbitkan oleh pihak ketiga tidak tepat, anda mungkin perlu menghubungi pihak ketiga itu secara langsung. Carvaly mungkin tidak dapat membetulkan data pihak ketiga, tetapi kami boleh mengemas kini, membuang, atau menanda rekod kami sendiri jika sesuai. Pemindahan perniagaan dan perubahan korporat Jika XPO8 Limited atau Carvaly terlibat dalam penggabungan, pemerolehan, pembiayaan, penstrukturan semula, insolvensi, penjualan aset, usaha sama, pemindahan saham, atau transaksi serupa, maklumat boleh didedahkan kepada penasihat, pihak lawan, juruaudit, pembiaya, penanggung insurans, pengawal selia, atau entiti pengganti setakat munasabah diperlukan untuk transaksi itu. Jika transaksi menyebabkan perubahan material kepada cara data peribadi dikawal atau digunakan, kami akan mengendalikan notis dan pilihan menurut undang-undang terpakai. Perubahan kepada Dasar Privasi ini Kami boleh mengemas kini Dasar Privasi ini dari semasa ke semasa untuk mencerminkan perubahan produk, perubahan penyedia, kehendak undang-undang, atau penambahbaikan operasi. Jika perubahan adalah material, kami boleh memberikan notis melalui laman web, produk, e-mel, atau saluran munasabah lain. Dasar yang dikemas kini terpakai dari tarikh kuat kuasa yang dinyatakan dalam versi dikemas kini atau, jika tiada tarikh dinyatakan, dari tarikh penerbitan. Penggunaan berterusan Carvaly selepas dasar dikemas kini terpakai bermaksud anda mengakui dasar yang dikemas kini. Kami boleh mengekalkan versi terdahulu untuk tujuan undang-undang dan pematuhan dalaman. Versi yang dipaparkan di laman web ialah versi awam semasa melainkan ia menyatakan sebaliknya. Hubungan untuk permintaan privasi Hantar soalan privasi, permintaan akses, permintaan pembetulan, permintaan pemadaman, permintaan penarikan balik persetujuan, dan bantahan pemasaran langsung kepada privacy@carvaly.com. Sertakan alamat e-mel yang dipautkan kepada akaun Carvaly atau organisasi pengedar anda supaya kami boleh mencari rekod berkaitan. XPO8 Limited, 1603, The L. Plaza, 367-375 Queen's Road Central, Sheung Wan, Hong Kong Island, Hong Kong. Soalan? Perlukan sokongan? Hubungi sokongan

Privacy Policy Statement Last Updated: 01/04/2026 1. Introduction XPO8 Limited ("Company", "we", "us", or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Tezzelo community platform at tezzelo.com. This Policy is prepared in accordance with the Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong). By creating an account or using our services, you agree to the collection and use of information in accordance with this Policy. 2. Information We Collect 2.1 Personal Data When you register or subscribe, we may collect: • Identity Data: Your full name. • Contact Data: Email address. • Account Data: Username and encrypted password. • Transaction Data: Payment details processed by Stripe. We do not store full credit card information. 2.2 Usage Data We automatically collect data on how you interact with the platform, including technical data such as IP address, browser type, and operating system. 3. How We Use Your Data • Service Provision: To provide community features, process registration, and manage your account. • Payment Processing: To process subscription fees via Stripe. • Communication: To send service-related notifications and, with consent, marketing emails. • Improvement: To analyze usage trends and improve the platform. • Legal Compliance: To comply with applicable laws. 4. Data Security We implement appropriate technical and organizational measures to protect your personal data. We use SSL encryption for data in transit and restrict access to authorized personnel only. 5. Your Rights You have the right to access, correct, or request deletion of your personal data. Contact us at contact@tezzelo.com to exercise your rights. 6. Contact Us XPO8 Limited UNIT 1603, 16TH FLOOR, THE L. PLAZA 367 - 375 QUEEN'S ROAD CENTRAL SHEUNG WAN HK, Hong Kong, 999077 contact@tezzelo.com

Privacy Policy Last Updated: 4 August 2026 Support: enquiry@xpo8.com 1 Introduction XPO8 Limited ("we," "us," "the Company") operates uniexamfocus.com ("the Platform") and is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect information obtained from users of the Platform. This policy applies to all services offered through the Platform, including exam preparation materials, question banks, test simulations, community features, leaderboards, and all related services across every exam route we support. This policy follows Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486). By creating an account or using the Platform, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree, you must stop using the Platform immediately. 2 Products and Services Covered This Privacy Policy covers all products and services offered on the Platform. Each product operates as an independent exam preparation community with its own question bank, test simulations, performance analytics, community channels, leaderboard, and subscription access: • Bocconi Test Prep — question bank, test simulations, and community for Bocconi University admissions (English) • Bocconi Italia Test Prep — Italian-language preparation for Bocconi University admissions • CEnT-S Test Prep — preparation for the English CISIA general entrance test covering mathematics, text/data reasoning, biology, chemistry, and physics • TOLC-I Test Prep — engineering and technical-science admissions covering math, logic, science, and verbal comprehension • TOLC-E Test Prep — economics and management admissions covering logic, verbal comprehension, and mathematics • TOLC-B Test Prep — biology and related science admissions covering basic mathematics, biology, physics, and chemistry • TOLC-F Test Prep — pharmacy and related science admissions covering biology, chemistry, mathematics, physics, and logic • TOLC-S Test Prep — general science admissions covering mathematics, reasoning, biology, chemistry, physics, and earth sciences • TOLC-SU Test Prep — humanities and cultural-study admissions covering reading comprehension, acquired knowledge, and logical reasoning • TOLC-AV Test Prep — agraria and veterinary admissions covering core sciences, mathematics, logic, and verbal comprehension • TOLC-LP Test Prep — professional and applied-degree admissions covering logic, verbal comprehension, and mathematics • TOLC-PSI Test Prep — psychology admissions covering reading comprehension, basic mathematics, verbal reasoning, numerical reasoning, and biology Your data within each exam route (scores, question bank progress, community posts, leaderboard rankings) is kept separate per community. Purchasing access to one exam route does not share your data with another. 3 Information We Collect 3.1 Personal Data You Provide When you register for an account or purchase a subscription, we collect: • Identity Data: Your full name and username • Contact Data: Your email address • Authentication Data: Encrypted password (we never store passwords in plain text) • Payment Data: Transaction information, billing details, and purchase history. We do not store your full credit card number, CVV, or bank account details — all payment processing is handled by our third-party payment processor, Stripe, which maintains PCI-DSS compliance. • Profile Data: Any optional profile information you choose to provide 3.2 Usage and Performance Data The Platform automatically captures data related to your use of our exam preparation services. This data is essential for delivering personalised study analytics and is collected across every exam route you subscribe to: • Test Performance: Test simulation scores, individual answer selections, time spent per question, section-level breakdowns, and historical score trends • Question Bank Activity: Questions attempted, accuracy rates by topic and difficulty level, practice session history, and completion progress • Leaderboard Data: Ranking position, points earned, and comparative performance metrics • Community Activity: Threads created, comments posted, reactions given, and participation frequency in discussion channels • Calendar and Meetup Data: Events created, RSVPs, and scheduling preferences 3.3 Technical Data We automatically collect certain technical information when you access the Platform: • Device Information: IP address, browser type and version, operating system, and device type • Access Data: Timezone settings, login timestamps, session duration, and pages visited • Referral Data: How you arrived at the Platform (search engine, direct link, referral) 3.4 Product Analytics Data We use PostHog to understand how users move through key Platform workflows, such as account creation, login, checkout, subscription status, and test simulation usage. Product analytics events may include your internal account identifier, exam community slug, pricing plan identifier, checkout status, subscription renewal status, test attempt identifier, score summaries, answer counts, time spent, and similar usage metrics. We do not intentionally send PostHog your password, full payment card details, Stripe client secrets, raw answer text, question text, passages, explanations, private community post bodies, or full profile records. 3.5 Google Advertising Measurement We use Google Tag Manager and Google Ads to measure how advertising contributes to visits, account registrations, checkout starts, purchases, and selected learning milestones. Events may include the exam product, pricing plan, billing interval, transaction value and currency, and a unique transaction identifier used to prevent duplicate purchase reporting. Where enhanced conversions are enabled, your normalised email address is transformed in your browser using SHA-256 before it is made available to Google tags. We do not put your raw email address, password, payment-card details, answers, question text, or community messages into the advertising data layer. Google may use advertising data for conversion measurement, attribution, modelling, and audience features under Google's applicable terms. 3.6 Cookies and Tracking Technologies The Platform uses cookies and similar technologies for the following purposes: • Essential Cookies: Required for login functionality, session management, and security. These cannot be disabled. • Analytical Cookies and Local Storage: Used to monitor visitor behaviour, measure Platform performance, retain content attribution, and identify areas for improvement. • Advertising Cookies and Local Storage: Used to associate ad interactions with conversions and create or suppress relevant advertising audiences. • Preference Cookies: Store your settings and preferences (such as exam route selection) to provide a more personalised experience. Product analytics and advertising measurement are currently enabled by default. We may store the first and most recent guide involved in a conversion journey for up to 90 days. This attribution contains page paths and article identifiers only; it does not include search queries, form contents, answers, question text, passwords, or payment-card data. You can manage cookies and local storage through your browser settings. Disabling essential storage may prevent you from using the Platform. 4 How We Use Your Information 4.1 Service Delivery • Delivering exam preparation services including question banks, test simulations, and community features across all supported exam routes • Generating and storing test results, scores, and performance analytics • Operating leaderboards and ranking systems within each exam community • Displaying your profile and contributions within community discussion channels • Providing personalised study recommendations based on your performance data 4.2 Payments and Subscriptions • Processing payments and managing subscriptions for individual exam routes • Sending transaction confirmations and billing notifications • Administering the Score Improvement Guarantee programme and processing eligible refund requests 4.3 Communication • Responding to customer support enquiries and resolving technical issues • Sending essential service notifications (password resets, subscription changes, security alerts) • With your consent, sending newsletters and updates about new exam routes, features, and promotions 4.4 Platform Improvement • Analysing usage patterns to improve question quality and Platform features • Identifying and fixing bugs, errors, and performance issues • Developing new features and exam route offerings • Conducting aggregate statistical analysis, including through PostHog product analytics, to understand conversion, subscription, and study engagement trends 4.5 Legal and Security • Complying with applicable laws, regulations, and legal processes • Detecting, preventing, and addressing fraud, abuse, and security issues • Enforcing our Terms and Conditions, including account sharing prohibitions 5 Disclosure of Your Information We do not sell your personal data to third parties. We may share your information only in the following circumstances: 5.1 Service Providers We share data with trusted third-party service providers who assist in operating the Platform, solely for the purposes described in this policy. These providers are contractually obligated to protect your data and may only use it for the specific services they provide to us. 5.2 Payment Processors Payment information is shared with Stripe for transaction processing. Stripe operates under its own privacy policy and maintains PCI-DSS compliance. We do not have access to your full card details. 5.3 Analytics and Advertising Providers Product analytics information may be processed by PostHog, which helps us measure Platform usage, checkout performance, subscription events, and study engagement. PostHog processes this information as our service provider and may use cookies or local storage depending on your browser settings. Google may process conversion events, advertising identifiers, transaction information, and SHA-256 transformed customer data through Google Tag Manager and Google Ads. These services help us measure campaign performance, reduce duplicate conversions, improve advertising attribution, and manage audiences. 5.4 Legal Requirements We may disclose your information when required to: • Comply with a legal obligation, court order, or government request • Protect the rights, property, or safety of XPO8 Limited, our users, or the public • Investigate potential violations of our Terms and Conditions 5.5 Business Transfers In the event of a merger, acquisition, reorganisation, or sale of assets, your personal data may be transferred to the successor entity. You will be notified of any such change and your choices regarding your data. 6 Direct Marketing With your explicit consent, we may send you newsletters and updates about new exam routes, Platform features, study tips, and promotional offers. You can opt out of marketing communications at any time by: • Clicking the unsubscribe link included in every marketing email • Contacting us at enquiry@xpo8.com Opting out of marketing does not affect essential service communications (such as subscription confirmations, security alerts, or Terms updates). 7 Data Security We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it: • Encryption in Transit: We use Secure Socket Layer (SSL) / TLS technology to encrypt all data transmitted between your browser and our servers. • Encryption at Rest: All passwords are stored using industry-standard cryptographic hashing. Sensitive data is encrypted in our database. • Access Controls: Access to personal data is restricted to authorised personnel with a legitimate business need. All access is logged and audited. • Infrastructure Security: Our infrastructure is hosted on Supabase, which provides enterprise-grade security, including network isolation, regular security audits, and automated backups. While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we continuously review and improve our security practices. 8 Data Retention 8.1 Active Accounts Your data is retained for as long as your account remains active. This includes all test results, question bank progress, community contributions, and leaderboard history across every exam route you have subscribed to. 8.2 Inactive Accounts Accounts that have been inactive for an extended period (approximately 2 years) may be scheduled for deletion. We will attempt to notify you via email before deleting an inactive account, giving you the opportunity to reactivate it. 8.3 Account Deletion Requests You may request deletion of your account and associated data at any time by contacting enquiry@xpo8.com. Upon receiving a valid deletion request, we will: • Delete your personal data within 30 days • Remove your community posts and leaderboard entries • Retain anonymised, aggregate data that can no longer be linked to you (for statistical purposes) • Retain transaction records as required by applicable accounting and tax laws 9 Your Legal Rights Under Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486), you have the following rights regarding your personal data: • Right of Access: You may request a copy of the personal data we hold about you. • Right of Correction: You may request correction of any inaccurate or incomplete personal data. • Right to Opt Out: You may opt out of receiving direct marketing communications at any time. • Right to Deletion: You may request deletion of your account and personal data, subject to our legal retention obligations. To exercise any of these rights, contact our Data Protection Officer at enquiry@xpo8.com. We will respond to your request within 40 days as required by the Ordinance. Reasonable administrative fees may apply for data access requests. 10 Children's Privacy The Platform is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you are under 16, you may only use the Platform with the consent and supervision of a parent or legal guardian who agrees to be bound by our Terms and this Privacy Policy. If we become aware that we have collected personal data from a child under 16 without parental consent, we will delete that data promptly. 11 International Data Transfers XPO8 Limited is incorporated in Hong Kong. Your data may be processed and stored in jurisdictions outside your country of residence, including jurisdictions that may have different data protection standards. By using the Platform, you consent to the transfer of your data to Hong Kong and other jurisdictions where our service providers operate. We take steps to ensure your data receives an adequate level of protection wherever it is processed. 12 Third-Party Links The Platform may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit. 13 Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. For material changes, we will attempt to provide at least 30 days' notice before the updated policy takes effect, either via email or a prominent notice on the Platform. Your continued use of the Platform after changes take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically. 14 Contact Information For questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at: XPO8 Limited Data Protection Officer Unit 1603, 16th Floor The L. Plaza 367-375 Queen's Road Central Sheung Wan HK, Hong Kong, 999077 enquiry@xpo8.com Copyright © 2026 XPO8 Limited — All rights reserved.

Privacy Policy Last updated: 9 September 2026 This Privacy Policy explains how Vayfora collects, uses, shares, protects, and retains information when you use our public website, free website scan, account dashboard, migration service, managed hosting, forms, analytics, billing, and support services. Vayfora is owned and operated by XPO8 Limited. Who controls your information In this policy, “Vayfora,” “we,” “us,” and “our” refer to XPO8 Limited. We normally control the personal data used to manage accounts, billing, security, support, our public website, and our direct relationship with you. When we host a customer website, the website owner normally decides why and how visitor information is collected through that website. This includes contact-form submissions and visitor analytics. For that information, the website owner is responsible for its privacy notice and lawful basis, and we act as its service provider or processor to the extent required by applicable law. We may still process limited information for our own billing, security, fraud-prevention, and legal purposes. Scope This policy applies to vayfora.com and other Vayfora services that link to it. It also explains our role when we process information for websites hosted by Vayfora. It does not govern an independent customer website owner, a source website before migration, or a third-party service operating under its own privacy notice. Personal data means information that identifies, relates to, or can reasonably be linked to a person. Aggregated or de-identified information that cannot reasonably identify a person is not personal data. If we combine it with personal data, we treat the combined information as personal data while it remains combined. Information we collect The information we collect depends on how you use the service: • Account information: name, email address, account status, preferences, and the websites connected to your account. • Email preference and delivery information: Your current marketing choice, consent wording and history, delivery and click events, unsubscribes, and hashed-address suppression records for hard bounces or spam complaints. • Authentication and security information: login and password-recovery events, session identifiers, security records, and hashed network identifiers used for access control, ownership records, and rate limiting. • Website scan information: the URL and domain you submit, publicly available pages, text, metadata, links, code, images and other assets, screenshots, detected technologies, performance results, migration compatibility, and hosting estimates. Public pages may contain information about people published by the source website. • Migration and hosting information: ownership authorizations, source snapshots, converted website files, quality-assurance evidence, repair history, deployment records, domain and DNS configuration, SSL status, form configuration, uptime checks, incidents, and service logs. • Hosted form information: the text a visitor submits through a supported form, such as a name, email address, and message, together with submission time, spam status, and a hashed network identifier. Where photo uploads are enabled, we also store the submitted photo and its filename, file type and size. Photos are private and available through the site owner’s authenticated inbox. Form submissions and their photos are retained for up to 90 days. • Hosted-site usage information: page path, time, referring hostname, country code, broad device type, and coarse browser family. We use these events to measure traffic, show website analytics, and apply the correct hosting plan. Query strings are removed before page paths are recorded for this purpose. • Billing information: plan, billing interval, subscription and invoice status, billing contact details, tax information where required, and payment-processor references. Stripe processes payment instruments; we do not receive or store full card numbers. • Communications: support requests, feedback, legal and privacy requests, notification preferences, and messages we send about the service. • Technical information: browser and device details, IP-derived request information, timestamps, error reports, and diagnostic, fraud-prevention, and security logs. Anonymous website scans and protected hosted forms may use Cloudflare Turnstile. Cloudflare may receive network, browser, device, and interaction signals needed to determine whether the request is automated and return a verification result to us. Sensitive information Vayfora is not designed to collect identity documents, payment-card details in form messages, bank or financing records, medical information, government identifiers, biometric data, or other sensitive information. Do not place this information in website forms, support messages, or source pages provided for migration unless it is genuinely necessary and you have a lawful right to provide it. We may delete, mask, restrict, or decline to process sensitive information submitted unnecessarily. Where information comes from We receive information directly from you, automatically when you use the service, from visitors to websites we host for you, from the public website you ask us to scan or migrate, and from providers that support authentication, payments, email, analytics, security, and infrastructure. We do not intentionally access password-protected areas of a source website as part of the public scan or migration workflow. How we use information We use information to: • scan public websites, prepare reports, assess eligibility, and estimate migration and hosting requirements; • reproduce, repair, test, preview, deploy, host, secure, and monitor customer websites; • operate accounts, authenticate users, manage domains, deliver form submissions, and send service notifications; • process subscriptions, taxes, invoices, refunds, traffic-based plan changes, and billing support; • measure hosted-site traffic, provide customer analytics, diagnose errors, and improve reliability and product quality; • prevent spam, abuse, fraud, unauthorized access, and security incidents, and enforce our Terms of Service; and • comply with law, respond to lawful requests, resolve disputes, protect rights, and preserve records where required. AI-assisted migration If automated migration does not pass our quality checks, we may send public source-website material and limited technical or visual quality evidence to an AI service through OpenRouter to help repair or reconstruct the migrated website. This workflow is used to generate website code and migration fixes. We do not send account passwords, full payment-card data, or hosted-form submissions through this repair workflow. AI output is tested before it is selected for a preview, and you review the migrated preview before moving your domain. Legal bases Depending on the context and law that applies, we process personal data because it is necessary to perform a contract, you have given consent, we or a customer have a legitimate interest that is not overridden by individual rights, or we must comply with a legal obligation. Legitimate interests may include operating and improving the service, securing accounts, preventing abuse, measuring billable use, supporting customers, and protecting legal rights. A customer using Vayfora forms or analytics is responsible for identifying and communicating the lawful basis that applies to its own website visitors. Where consent is legally required, the responsible party must obtain it before the relevant processing begins. How we share information We do not sell personal data. We disclose information only as reasonably needed for the purposes described in this policy: • With the website owner: hosted-form submissions, website analytics, migration records, and other information connected to its website are available to its authorized account. • With service providers: providers supporting database and authentication services, application and worker hosting, storage, content delivery, website acquisition, payments, email, analytics, AI-assisted repair, logging, and security. Current functionality may use Supabase, Vercel, Google Cloud, Cloudflare, ScrapingBee, Stripe, PostHog, OpenRouter and model providers available through it, and Resend or SendGrid. • At your direction: with recipients you configure for notifications, a registrar or DNS provider you use, or another party you ask us to involve. • For legal and safety reasons: with advisers, auditors, insurers, regulators, courts, law enforcement, or other parties where reasonably necessary to comply with law, protect rights and security, or resolve a dispute. • For a business transaction: with relevant advisers, counterparties, and successors during a merger, financing, restructuring, acquisition, insolvency, or sale of all or part of the business. Providers may change as the service evolves. Where appropriate, we use contracts and operational controls intended to limit a provider to authorized processing and require suitable security. Third-party services may also process information independently under their own terms and privacy notices. Cookies and similar technologies We use cookies and comparable storage needed for authentication, password recovery, scan access, security, and routing. Local account-session and scan-access cookies may remain for up to seven days unless they expire or are removed earlier; an external authentication provider may apply its own session period. Stripe and other linked services may set their own technologies when you visit them. With your permission, we use a first-party analytics preference cookie for up to 180 days and a random visitor identifier for up to 30 days. These help us understand the Vayfora signup and migration journey through PostHog. We do not send email addresses, submitted website URLs, form content, exact hosting costs, payment-provider identifiers, or raw error messages, and we do not use session replay or advertising profiles. Withdrawing permission prevents future optional browser events and removes the visitor identifier. Traffic measurement for websites hosted by Vayfora is generated from server-side delivery events and does not require us to create an advertising profile of the visitor. Browser controls may not affect server records required for security, billing, or delivery of the service. International transfers XPO8 Limited is based in Hong Kong, and our providers may process information in Hong Kong, the United States, the European Economic Area, and other locations where they operate. Data-protection laws may differ between those places. Where required, we use contractual, technical, and organizational measures intended to protect information transferred across borders. Retention We keep information only for as long as reasonably needed for the service, the purpose for which it was collected, and legal, accounting, security, dispute, and enforcement requirements. In particular: • hosted-form submissions are normally removed after 90 days; • processed pageview-event details are normally removed after 90 days, while monthly totals may remain for billing, accounting, service history, and dispute handling; • source snapshots, migration files, deployments, and recovery material may remain while a website is hosted and for a limited operational or backup period afterward; and • ownership authorizations, invoices, refunds, audit records, and security records may remain for the period required to comply with law, prevent fraud, establish rights, or resolve a dispute. Deletion from active systems may not immediately remove limited copies from encrypted backups, provider systems, legal holds, or immutable security and billing records. Those copies follow their own deletion cycles and are not used for unrelated purposes. We may retain aggregated or de-identified information that no longer reasonably identifies a person. Security We use technical and organizational measures intended to protect information, including encrypted transport, access controls, tenant isolation, restricted credentials, logging, provider security controls, backups, monitoring, and incident-response procedures. No online service can guarantee perfect security. You are responsible for protecting your account, email, devices, registrar, and DNS access and for telling us promptly about suspected unauthorized access. Your choices and rights Depending on where you live and the law that applies, you may have rights to request access, correction, deletion, restriction, portability, or information about how personal data is used; to object to certain processing; to withdraw consent; or to opt out of direct marketing. You may also have a right to complain to a data-protection authority. We may ask you to verify your identity, account, or authority before acting. A request may be limited or refused where the law permits, including when information must be kept for billing, security, legal claims, fraud prevention, or another person’s rights. If your request concerns a hosted website, we may direct you to the website owner or work with that owner because it controls the relevant visitor information. Communications We may send account, migration, billing, security, domain, uptime, form, legal, and other service messages. You cannot opt out of messages necessary to operate an active service. Optional marketing email is sent only after an affirmative choice. You may withdraw that choice immediately through the one-click link in any marketing message or from dashboard settings. Withdrawing marketing consent does not stop service messages. Children Vayfora is not intended for anyone under 18, and we do not knowingly collect personal data directly from children. Contact us if you believe a child has provided personal data so we can review it and take appropriate action. Public websites and external links A migrated website is public once its owner makes it live. Public content can be viewed, copied, indexed, or shared by others. Source websites and migrated websites may link to services we do not control. Review those services’ privacy terms before providing information to them. Changes to this policy We may update this policy to reflect changes to the service, providers, operations, or law. If a change is material, we may give notice through the website, product, or email. The date at the top identifies the current public version. Contact us Send privacy requests, questions, corrections, deletion requests, and complaints to contact@xpo8.com. Include the email address connected to your account and the relevant website or domain so we can locate the record. XPO8 Limited 1603, The L. Plaza, 367–375 Queen’s Road Central, Sheung Wan, Hong Kong Island, Hong Kong

Privacy Policy

Last updated: May 6, 2026

This Privacy Policy describes how Xpo8 Limited ("we", "us", "our", or "the Company") collects, uses, shares, retains, and protects information when you use the VeniceXplorer website at https://venicexplorer.com and the VeniceXplorer mobile application for iOS and Android (collectively, the "Service"). It also tells you about your privacy rights and how the law protects you.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

1. Interpretation and Definitions

Interpretation

Words with capitalized initials have the meanings defined below. Definitions apply equally in singular and plural form.

Definitions

For the purposes of this Privacy Policy: Account means the unique account created for you to access the Service or parts of it. Application or App means the VeniceXplorer mobile application provided for iOS and Android. Company (referred to as "the Company", "We", "Us", or "Our") refers to Xpo8 Limited, the operator of the VeniceXplorer Service. Cookies are small files placed on your computer, mobile device, or any other device by a website. Country refers to Italy, the principal country in which the Service operates and to whose users it is primarily directed. Device means any device that can access the Service, including a computer, smartphone, or tablet. Personal Data is any information that relates to an identified or identifiable individual. Service refers collectively to the Website and the Application. Service Provider (also referred to as a Processor) means any natural or legal person who processes data on behalf of the Company to facilitate the Service, perform Service-related functions, or assist us in analyzing how the Service is used. Service Providers process Personal Data only on our documented instructions. Travel-Fulfillment Partner means a third party that you book travel products or services through using checkout flows embedded in the Service. These partners are independent controllers of the booking they fulfill on your behalf and are identified in Section 6 below. Usage Data refers to data collected automatically, either generated by your use of the Service or from the Service infrastructure itself. Website refers to VeniceXplorer, accessible from https://venicexplorer.com. You means the individual accessing or using the Service, or the company or other legal entity on whose behalf such individual is accessing or using the Service.

2. Information We Collect

2.1 Information You Provide Directly

When you create an Account, contact us, or use certain features, we may ask you to provide: Identity and contact information: first name, last name, email address, and (where you choose to provide it) phone number. Account credentials: password (stored as a salted hash by our identity provider; we do not have access to your plaintext password). Profile information: optional preferences, language, and any content you voluntarily add to your profile. Saved items and favorites: places, tours, experiences, and itineraries you save in the App (see Section 9). Support requests: the content of any message you send to us, including diagnostic details you choose to include. 2.2 Information Collected Automatically (Usage Data)

When you use the Service, we automatically collect certain technical information, including: Device and connection data: IP address, device type and model, mobile device identifiers (such as the iOS IDFV or Android Advertising ID where you have allowed it), operating system and version, browser type and version, app version, and language settings. Service interaction data: pages or screens viewed, features used, time and date of access, time spent on screens, referring URL, and similar diagnostic data. Crash, performance, and error logs: stack traces, breadcrumbs (recent in-app actions leading up to an event), and performance metrics when the App encounters an error or slow operation. See Section 8. 2.3 Information Collected via Mobile App Permissions

The App requests certain device permissions only when needed for a specific feature. Permissions are described in Section 3.

2.4 Tracking Technologies and Cookies (Website)

We use Cookies and similar tracking technologies on the Website to track activity and store certain information. Cookies or Browser Cookies. A cookie is a small file placed on your Device. You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. If you do not accept Cookies, you may not be able to use some parts of the Website. Web Beacons. Certain sections of the Website and our emails may contain small electronic files (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email. We use both Session and Persistent Cookies for the following purposes: Necessary / Essential Cookies (Session, administered by us) — required to authenticate users, maintain your session, and prevent fraudulent use of accounts. Cookie Notice Acceptance Cookies (Persistent, administered by us) — record whether you have accepted our cookie notice. Functionality Cookies (Persistent, administered by us) — remember choices you make, such as your language preference or login state. The mobile App does not use browser Cookies. It uses local secure storage to retain your sign-in session and preferences on the device.

3. Mobile App Permissions

The App requests device permissions only when they are needed to provide a feature you have asked for. You can revoke any permission at any time through your operating system settings.

3.1 Location (Foreground Only)

The App uses location only while it is open and on screen ("foreground" or "while in use"). It does not track your location in the background, when the App is closed, or when your device is locked.

What is collected Approximate (coarse) location — used to position the map near you when you first open it and to surface results that are broadly relevant to where you are. Precise (fine) location — used only when you have explicitly granted "Precise Location" and you actively use a feature that requires it. How we use it

Foreground location is used solely for the following purposes: Map positioning — centering the map on your current position so you can orient yourself in Venice. Turn-by-turn navigation — guiding you between points of interest you have selected. Rerouting — recalculating your route if you deviate from the suggested path. Location-aware search — surfacing nearby tours, experiences, restaurants, and points of interest in response to a search you initiate. Your control Location access is optional. The App will work without it; only features that depend on your real-world position will be limited or unavailable. The App will not request location until you tap a feature that needs it (for example, the "use my location" button on the map or the navigation control). You can turn location off at any time in iOS Settings → VeniceXplorer → Location or Android Settings → Apps → VeniceXplorer → Permissions → Location. We do not store a continuous history of your locations on our servers. Location is processed on-device for the active feature; only the minimum data needed to fulfill a search or routing request is sent to our service providers (for example, a single coordinate sent to a map tile or routing API to retrieve directions). 3.2 Other Permissions

The App may request the following permissions only when you use the relevant feature: Camera and Photo Library — only if you choose to upload a profile photo or share an image with support. We do not access your photo library otherwise. Notifications — only if you opt in. Used to deliver booking confirmations, itinerary reminders, and service updates. You can disable notifications at any time in your device settings. We do not request access to your contacts, microphone, calendar, SMS, call logs, or files outside of the directly used feature.

4. How We Use Your Personal Data

We use your Personal Data for the following purposes, on the legal bases noted in Section 14: To provide and maintain the Service, including monitoring its usage and ensuring it functions correctly on your device. To manage your Account — to register and authenticate you and to give you access to features available to registered users. To fulfill bookings and contracts — to facilitate purchases of tours, experiences, hotel stays, transportation, and other travel services through our Travel-Fulfillment Partners (see Section 6). To contact you — by email, phone, SMS, or in-app push notifications regarding bookings, account matters, security updates, or service-related communications. To provide news, special offers, and information about goods, services, and events similar to those you have purchased or enquired about, unless you have opted out. To manage your requests — to attend to and resolve support enquiries. For analytics and product improvement — to understand how the Service is used and to improve features, performance, and reliability (see Section 8). For security, fraud prevention, and to protect rights — to detect and prevent abuse, unauthorized access, and other harmful activity. For business transfers — in connection with a merger, acquisition, restructuring, or sale of assets, in which case we will provide notice as described in Section 12. To comply with legal obligations — including tax, accounting, anti-money-laundering, and consumer-protection requirements applicable to bookings made through the Service.

5. Service Providers (Processors)

We rely on a small number of trusted Service Providers (also called Processors) to operate the Service. These providers process Personal Data only on our documented instructions and under contractual confidentiality and security obligations. They are not permitted to use your data for their own purposes.

5.1 AWS Amplify and Amazon Cognito (Identity, Hosting, and Backend) Provider: Amazon Web Services, Inc. Role: Service Provider / Processor What is processed: account identifiers (user ID), email address, hashed credentials, sign-in tokens, and backend API request metadata. Purpose: account registration and authentication, session management, password reset, and hosting of backend services that power the App. Data location: AWS regions used to host the Service. Data may be processed in the European Union and other AWS regions where the Service is hosted. 5.2 Sentry (Crash, Performance, and Diagnostic Monitoring) Provider: Functional Software, Inc. d/b/a Sentry Role: Service Provider / Processor What is processed: crash reports, error stack traces, breadcrumbs, performance traces, app version, OS version, device model, and a pseudonymous user identifier where the App is signed in. Purpose: to detect, diagnose, and fix crashes, errors, and performance regressions in the App and Website. Retention: Sentry retains event data according to its own retention schedule (typically 30 to 90 days for events on standard plans). We configure retention to the shortest period that allows us to investigate recurring issues. Aggregated, non-identifying metrics may be retained longer. See Section 8 for more on diagnostics. 5.3 PostHog (Product Analytics) Provider: PostHog Inc. Role: Service Provider / Processor What is processed: pseudonymous user identifier, app version, OS version, device type, screen views, feature interactions (button taps, search submissions, booking-flow stages), and similar product-usage events. We do not send PostHog the contents of your messages, payment details, or precise location. Purpose: to understand which features are used, where users encounter friction, and how to improve the Service. See Section 8 for more on analytics. 5.4 Map, Routing, and Communications Providers

The Service uses standard map, routing, and transactional email/SMS providers (for example, to render map tiles, compute directions, and send booking confirmations). These providers receive only the data necessary to fulfill the requested function (for example, a single coordinate for a routing query, or your email address to send a confirmation).

6. Travel-Fulfillment Partners

When you book a tour, ticket, hotel, transfer, or other travel product through the App or Website, that booking is fulfilled by a third-party travel partner. These are Travel-Fulfillment Partners, not generic third-party data recipients: their role is to fulfill the specific booking you have requested, on your behalf.

We do not sell your data to these partners, and we do not share your data with them for their own marketing.

6.1 Viator and TripAdvisor Media Group ("TAMG") — Tours, Activities, and Experiences Role: independent controller for the booking it fulfills. What is shared at checkout: information necessary to complete the booking, which typically includes: First and last name Email address Phone number Billing address, country, and postal code Payment information (card details or equivalent) The selected tour, date, time, traveler count, and any traveler-specific information required by the supplier (for example, hotel pickup location or dietary preference where requested) How it is shared: the checkout experience is presented within the App via Viator/TAMG's hosted booking flow. Payment information is collected and processed by Viator/TAMG and their payment processors; we do not store full card numbers on our servers. Purpose: to fulfill the booking, issue tickets/vouchers, communicate with you about the booking, and meet the supplier's operational requirements. Their privacy practices: Viator/TAMG processes the data it receives under its own privacy policy, which we encourage you to review. 6.2 Xeni — Hotel and Car Search and Booking Role: travel-fulfillment platform that returns inventory and processes bookings for hotels and rental cars. What is shared at the search stage: search parameters only — for example, destination, check-in / check-out dates, number of guests, room or vehicle type. No personal identifiers are sent at the search stage beyond what is necessary for a stateless query. What is shared at the booking stage: information necessary to complete the booking, which typically includes: First and last name (and additional traveler names where applicable) Email address Phone number Billing address, country, and postal code Payment information Booking-specific details such as room preferences, driver's license details for car rentals (where required by the supplier), and arrival information Purpose: to confirm availability, place the reservation with the underlying supplier (hotel chain, car rental company, etc.), issue confirmations, and facilitate any modifications or cancellations. Their privacy practices: Xeni and its underlying suppliers process the data they receive under their own privacy policies and the supplier's terms. 6.3 What this means for your data We share with Travel-Fulfillment Partners only what is needed to fulfill your booking. The booking confirmation, cancellation, and any post-booking customer service for hotel and tour bookings are handled by the partner or its supplier; you may receive communications directly from them. A record of your booking (such as confirmation number, date, supplier, and amount) is retained by us so we can support you and meet our legal obligations (see Section 11).

7. Payments and Billing No Google Play Billing or Apple In-App Purchase. The App does not sell digital goods through Google Play Billing or Apple's In-App Purchase. Items purchased in the App are real-world travel services (tours, tickets, hotel stays, transfers, experiences, concierge services) supplied by Travel-Fulfillment Partners and their underlying suppliers. Payment processing. Payments for these real-world travel services are processed by the Travel-Fulfillment Partner and its payment processors at checkout. We do not store full payment card numbers on our own systems. Concierge and direct services. For services billed directly by VeniceXplorer (such as concierge bookings handled by us), payment is processed by a PCI-compliant payment processor. We retain only the limited transaction metadata (such as last four digits of the card, transaction ID, amount, and date) needed to identify the transaction and meet our legal obligations.

8. Analytics and Diagnostics

We use product analytics and diagnostic tools to keep the App reliable and to make it better. These tools are provided by the Service Providers identified in Section 5.

8.1 PostHog — Product Analytics When it is active: PostHog is configured for the App. If product analytics are disabled in your build or by configuration, no events are sent. What events are collected: screen views, feature interactions (such as taps on map controls, search submissions, and booking-flow stages), session start/stop, and a pseudonymous user identifier. What is not collected: the contents of your support messages, payment details, the precise text of free-form fields containing personal data, or precise location. Identifier reset on sign-out and account deletion: when you sign out of the App or delete your Account, the App resets its analytics identifier so that subsequent activity from the device is not associated with your former Account. 8.2 Sentry — Crash, Performance, and Error Diagnostics When it is active: Sentry is enabled by default in production builds to detect crashes, exceptions, and performance regressions. Diagnostic collection happens automatically when an error or performance event occurs. What is collected: crash and error events, stack traces, breadcrumbs (a short trail of recent in-app actions), performance traces, app version, OS version, device model, and — when you are signed in — a pseudonymous user identifier so we can confirm an issue is fixed for affected users. What is not collected: payment details and precise location are not sent to Sentry. Vendor retention: Sentry retains event data on its platform according to its retention configuration. We configure event retention to the shortest period that lets us investigate recurring issues — typically up to 90 days for individual error events, after which only aggregated metrics may remain. Your control: you can disable diagnostic reporting from the App's Settings screen on supported builds.

9. Saved Items, Favorites, and Account Identifiers

9.1 Saved items and favorites When you are signed in, the places, tours, experiences, and itineraries you save are synced to your Account on our backend so you can access them across devices. When you are not signed in, saved items are stored locally on your device only and are not transmitted to our servers. They will be lost if you uninstall the App or clear its data. On account deletion, server-synced saved items are removed as part of Account deletion (see Section 11). Locally stored saved items remain on your device until you uninstall the App or clear its storage. 9.2 Account identifiers and user IDs

We assign each Account a pseudonymous internal identifier (a "user ID") which we use to: authenticate you and link your sessions on the backend, associate your bookings, saved items, and preferences with your Account, correlate diagnostic and analytics events with your Account so we can investigate issues you report. This identifier is not derived from your name or email and is not shared with Travel-Fulfillment Partners.

10. Support Requests

If you contact us for support — typically by tapping a "Contact Support" link in the App that opens your device's email client — your message is delivered to our support mailbox. What we receive: whatever you choose to include in the email — typically your name, email address, a description of the issue, screenshots you choose to attach, and any diagnostic information you include. How it is handled: support correspondence is stored in our support mailbox and any associated ticketing system, where access is restricted to the staff who handle support and the standard mailbox retention policy applies. Retention: support correspondence is retained for the period needed to resolve the issue and to evidence resolution if the matter recurs, and otherwise as required by law. In-App Concierge Messaging

The Venicexplorer mobile app includes an in-app concierge chat that lets you exchange text messages with VeniceXplorer concierge staff about your trip, bookings, and on-the-ground requests.

What we collect The text content of messages you send. Metadata about each message (timestamp, the request thread the message belongs to, your account identifier). How we use it To provide concierge support, fulfill your requests, and maintain a record of the conversation for quality and dispute-resolution purposes. Where it is stored Messages are transmitted over HTTPS to concierge.venicexplorer.com and stored on VeniceXplorer's backend systems. They are not shared with third parties except where necessary to fulfill a booking — for example, forwarding the relevant text to a partner such as Viator or Xeni when a booking depends on it (see §6 for partner data flows). What the chat is not The chat is staff-mediated only. There is no peer-to-peer messaging between users, no public posting, and no discoverable user-generated content. In the current version of the app you cannot upload photos or videos in chat. Concierge staff may send you file attachments such as invoices or calendar items; those are downloads from us to you, not uploads from you to us. Retention While your account is active, your concierge chat threads are retained indefinitely so that you and our staff can refer back to past conversations about your trip. When you delete your account (in-app via Profile > Delete Account, or by emailing privacy@venicexplorer.com), all account-linked chat threads are deleted from our backend within 30 calendar days. Records linked to a confirmed booking, payment, or legal request may be retained for the applicable retention periods listed in §11.3.

11. Account Deletion

You can delete your Account at any time and through more than one path.

11.1 In-app deletion (recommended)

In the App: Open Profile. Tap Delete Account. Confirm the deletion. The App will issue a cleanup request to our backend. On receipt, the backend: removes your profile, server-synced saved items, preferences, and analytics identifier mapping; disables your sign-in credentials so the Account can no longer be accessed; queues your booking and transactional records for the limited retention described in Section 11.3. 11.2 Email deletion

If you cannot use the in-app path, you can email privacy@venicexplorer.com from the email address associated with your Account and request deletion. We undertake to perform the deletion within one calendar month (30 days) and will send you a confirmation when it is complete. Where possible, we aim to complete the request earlier.

11.3 Records that may be retained after deletion

Some records are retained, even after Account deletion, to the extent we are required or permitted by law. These include: Booking records — confirmation number, supplier, date, traveler name(s), and amount, retained to evidence the contract, support post-trip enquiries (such as refund or chargeback disputes), and meet consumer-protection obligations. Payment and accounting records — the limited transaction metadata required by tax, accounting, anti-money-laundering, and similar laws in the jurisdictions in which we operate (typically up to 10 years under Italian and EU tax law). Support correspondence — retained as described in Section 10 for the period needed to evidence resolution and meet legal obligations. Backups — your data may persist in routine encrypted backups for a short rotational period before backups are overwritten in the ordinary course; such data is not used for any active processing. Records required by law or legal process — any data we are required to preserve in response to a valid legal request. Apart from these limited categories, deleted Account data is removed from our active systems and cannot be recovered.

12. How We Share Your Personal Data

We share Personal Data only as described in this Policy. Specifically: With Service Providers (Processors) — see Section 5. They process data only on our instructions. With Travel-Fulfillment Partners — see Section 6. They receive only what is needed to fulfill your booking. With affiliates — including our parent company and any subsidiaries, who are required to honor this Privacy Policy. With other users — when you choose to interact in public areas of the Service, the content you post may be visible to others. For business transfers — your information may be transferred in connection with a merger, acquisition, financing, restructuring, or sale of assets, in which case we will give notice and the new owner will be bound by terms at least as protective as this Policy. For legal reasons — to comply with a legal obligation, respond to valid requests by public authorities, protect our rights or property, prevent or investigate possible wrongdoing, protect the personal safety of users or the public, or protect against legal liability. With your consent — for any other purpose disclosed to you at the time we ask for your consent. 12.1 We do not sell your Personal Data

We do not sell your Personal Data. We do not rent it, and we do not share it with third parties for their own independent advertising or marketing purposes.

13. Security of Your Personal Data

The security of your Personal Data is important to us. Encryption in transit. All communication between the App, the Website, our backend, our Service Providers, and our Travel-Fulfillment Partners is encrypted in transit using HTTPS / TLS. The App enforces HTTPS-only connections and does not permit cleartext (HTTP) traffic to our endpoints, in line with modern Android Network Security Configuration and Apple App Transport Security requirements. Encryption at rest. Account data and backups are stored on infrastructure that encrypts data at rest. Access controls. Access to Personal Data within the Company is restricted to staff who need it to perform their role and is logged. Credentials. Passwords are stored as salted hashes by our identity provider; we do not have access to plaintext passwords. Limits. No method of transmission over the Internet or method of electronic storage is 100% secure. While we use commercially reasonable measures to protect your Personal Data, we cannot guarantee absolute security.

14. Legal Bases for Processing (EEA / UK Users)

If you are in the European Economic Area or the United Kingdom, we process your Personal Data on the following legal bases: Performance of a contract — to provide the Service, manage your Account, and fulfill bookings you have requested. Consent — for optional features such as location access, notifications, and any marketing communications you opt in to. You can withdraw consent at any time. Legal obligation — to meet tax, accounting, consumer-protection, and other applicable legal obligations. Legitimate interests — to keep the Service secure, prevent fraud, improve the Service through analytics and diagnostics, and communicate with you about your use of the Service, where these interests are not overridden by your rights.

15. Your Rights

Depending on where you live, you may have the right to: access the Personal Data we hold about you, request correction of inaccurate data, request deletion of your data (see Section 11), request restriction of, or object to, certain processing, request a portable copy of certain data, withdraw consent for processing based on consent, lodge a complaint with your local data protection authority — for users in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it). To exercise these rights, contact us at privacy@venicexplorer.com. We may need to verify your identity before fulfilling certain requests.

16. Retention of Your Personal Data

We retain Personal Data only for as long as necessary to provide the Service and meet the purposes described in this Policy. Account data — for as long as your Account is active, and as needed to comply with legal obligations or resolve disputes after closure. Booking and transaction records — for the periods described in Section 11.3, including up to 10 years for tax and accounting records under Italian and EU law where applicable. Support correspondence — as described in Section 10. Diagnostic data (Sentry) — for the configured retention period on the Sentry platform, typically up to 90 days for individual events. Product analytics data (PostHog) — for the configured retention period for raw events; aggregated non-identifying metrics may be retained longer. Backups — for the rotational backup period and then overwritten.

17. Transfer of Your Personal Data

The Service is operated by Xpo8 Limited and is hosted on infrastructure that may be located in the European Union and other regions where our Service Providers operate. Travel-Fulfillment Partners may process booking data in the jurisdictions in which they operate.

When data is transferred outside your country of residence, we take steps to ensure it is treated securely and in accordance with this Privacy Policy, including, where required, using appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

By using the Service, you understand that your information may be transferred to and processed in countries other than your own.

18. Disclosure of Your Personal Data

18.1 Business transactions

If the Company is involved in a merger, acquisition, financing, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

18.2 Law enforcement

The Company may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (such as a court or government agency).

18.3 Other legal requirements

The Company may disclose your Personal Data in good faith where necessary to: comply with a legal obligation, protect and defend the rights or property of the Company, prevent or investigate possible wrongdoing in connection with the Service, protect the personal safety of users of the Service or the public, protect against legal liability.

19. Children's Privacy

The Service is not directed to children under the age of 18, and we do not knowingly collect Personal Data from children under 18. If you are a parent or guardian and you believe your child has provided us with Personal Data, please contact us at privacy@venicexplorer.com and we will take steps to delete it.

If we need to rely on consent as a legal basis for processing your information and your country requires consent from a parent, we may require your parent's consent before we collect and use that information.

20. Links to Other Websites

The Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and, where appropriate, by email and/or a prominent notice within the Service before the change becomes effective. We will also update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.

22. Contact Us

If you have any questions about this Privacy Policy, or to exercise your privacy rights: By email: privacy@venicexplorer.com In the App: tap Profile → Help & Support → Contact Privacy Team.

This Privacy Policy is provided in English. Where translations exist, the English version prevails in the event of any conflict.

Privacy policy

How padelduels handles information

What we store about players, centres, coaches and bookings, who can see it, how long it is kept, and your rights. Last updated 16 October 2026.

1. Who controls your information

padelduels is owned and operated by XPO8 Limited (“XPO8”, “we”, “us”), a company incorporated in Hong Kong, of 1603, The L. Plaza, 367–375 Queen's Road Central, Sheung Wan, Hong Kong Island, Hong Kong. XPO8 is the controller of the personal data described in this policy, and the data user under Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486). You can contact us about privacy at contact@padelduels.com.

This policy sits alongside the terms of service and the community rules.

2. Scope

This policy covers the padelduels website and apps, and the emails and notifications we send. It applies to visitors, players, hosts, coaches, centre owners and staff, and people whose details a centre records for a booking made at its desk.

It does not cover centres' or coaches' own websites, or Stripe's and Google's services, which have their own privacy policies.

3. The role of centres, coaches and Stripe

Centres. When you book a court, the centre receives your username, the email address on your account and the booking details so it can run your booking. Centres also record the name, email and phone number of customers who book at their desk. Each centre is responsible for how it uses these details in its own systems, under its own privacy notice.

Coaches. When you request a lesson, the coach sees your username, the service and time you chose, and your note. Coaches are responsible for how they use lesson details outside padelduels.

Stripe. Online payments are taken by Stripe on behalf of the centre or coach, who is the seller. Stripe receives your email address and payment details, shares them with the centre or coach in their Stripe account, and handles the identity checks that centres and coaches complete to accept payments. Stripe does this under the Stripe privacy policy. padelduels never sees your full card details.

4. Information we collect

Account: your email address and password, which our authentication provider stores in hashed form. If you sign in with Google, Google shares your email address and basic profile with us.

Profile: username, home city and country, skill level, league, optional recurring availability, and a private search area.

Playing: games you host or join, invitations, results, attendance cases, ratings, standings, friends and blocks.

Messages and reviews: direct, game, coach and centre messages, reports, appeals, and coach reviews.

Bookings and lessons: court or service, time, price, currency, payment method, payment and refund status, your lesson note, and Stripe payment references.

Centres: business and contact details, address and map location, description, facilities, photos, courts, prices, opening hours, owner and staff email addresses, Stripe account status, and the customer details staff enter for desk bookings.

Coaches: headline, description, qualifications, services and prices, venues, contact details, photos and Stripe account status.

Technical: IP address, browser and device information and request logs kept by our providers, your device's timezone, and an approximate location, as explained below.

5. Sensitive information

We do not ask for health information, ethnic origin, religious or political beliefs, or other sensitive categories of data. Please do not put them in your profile, messages, notes or reviews. A report may need to describe an incident, such as an injury or abusive behaviour; include only what is needed for the review. We may remove sensitive information that is not needed.

6. Where information comes from

From you, when you create an account, set up a profile, listing or centre, play, book, message or report.

From other players, when they invite you, record a result, report an attendance case, message you or review a coach.

From centres and coaches, when they accept, change or cancel a booking or lesson, reply to you, or record a desk booking.

From Stripe, about payments, refunds and disputes, and whether a centre's or coach's account can accept payments.

From Google, when you sign in with Google, search for a place, or allow device location.

From our hosting provider, which can supply an approximate city based on your IP address.

7. How we use information

To run padelduels: accounts, game discovery and matching, results, ratings and leaderboards, bookings, lessons, messages, notifications and reminders.

To handle payments: starting Stripe Checkout, confirming payments, recording refunds and calculating platform fees.

To keep people safe: reviewing reports and appeals, enforcing the community rules, and preventing fraud, spam and abuse.

To keep the Service secure and reliable, fix problems, and understand how it is used in aggregate.

To comply with the law, respond to lawful requests, and establish or defend legal claims.

Skill ratings, leagues and standings are calculated automatically from finalised results. A late withdrawal or late host cancellation automatically triggers the participation restriction described in the community rules; a no-show needs confirmation from another participant or an administrator. You can appeal attendance decisions in Settings, and an administrator reviews them.

We do not sell personal data, show advertising, or build advertising profiles.

8. Legal bases

Where laws such as the EU or UK General Data Protection Regulation apply, we rely on:

Contract: to provide your account, games, bookings, lessons, messages and notifications.

Legitimate interests: to keep padelduels safe and fair, including moderation, fraud prevention, security logs and keeping pseudonymous match history after an account closes; to suggest nearby games and courts from an approximate location; and to improve the Service. You can object to this processing.

Consent: to use your device location. You can withdraw it at any time in your browser settings.

Legal obligation and legal claims: to meet legal requirements and to establish, exercise or defend claims.

9. Location

When our hosting provider supplies an approximate city based on your IP address, we use it to suggest nearby games and courts. This estimate can be wrong, especially when using a VPN or mobile network. You can choose another city or show all areas. We do not save this inferred location in your account or application database. Provider access logs follow the retention periods below.

On your first landing-page visit we show an approximate IP-based area where supported and ask your browser for location permission. If you grant it, we use device coordinates to find nearby listings and send the coordinates to Google Geocoding to identify your city. If permission is declined or location is unavailable, we keep the approximate area. An area you explicitly choose takes priority. You can also use “Use my location” to try again.

We do not save these device coordinates in your account during public browsing. Public search links can include the coordinates you selected; anyone you share that link with can read them. Choose a city instead when you prefer to share only a general area.

The search area you set in your profile is private and used only to find games and players near you. For games we retain the Google place ID, venue name, formatted address, coordinates and IANA timezone. Profiles retain city, country and an optional place ID; raw autocomplete responses are not stored.

10. What other people can see

Anyone, including signed-out visitors: centre pages; approved coach pages, including the coach's username, photos, headline, description, qualifications, services, prices, venues, contact details, home city, skill rating and league; coach reviews with the reviewer's username, rating and comment; the monthly leaderboards, which show each player with a ranked result that month by username, leaderboard city (the city of their most recently played ranked game, or their home city before their first), league, league points, season wins and skill rating; and, for upcoming public games, the venue, time, format, level band, price and places left. Never the street address, host or participants of a game, or invite-only games.

Signed-in members: your username, home city, skill, league, availability and match history. Your search area and precise coordinates are private. Upcoming invite-only games, invitations and game chat remain limited to authorised participants; completed private matches still show participants and winner in profile history.

Centres: the username, email and booking details of people who book their courts, and centre chat messages. Centres see bookings for their own courts only.

Coaches: the username, lesson details and note of players who request lessons, and coach chat messages.

Blocking someone stops new direct contact, invitations and friend requests between you.

11. How we share information

With other users, centres and coaches, as described above.

With service providers that process data for us under contract: Vercel (website hosting), Google Cloud (application hosting and file storage), Supabase (authentication, database, realtime and scheduled work), SendGrid (email notifications), Sentry (error reports, stored in the EU, without IP addresses, cookies or account details), PostHog (product analytics, stored in the US: the pages you visit, recorded without cookies or any storage on your device, and actions such as joining a game or booking a court, including checkout outcomes, cancellations, payment and refund amounts, currencies, fees and transaction identifiers. Account activity is linked to your account's internal identifier; guest transactions use an anonymous booking identifier. Analytics never includes your name, email, messages or card details), Google Maps Platform (place search and geocoding) and OpenFreeMap (map tiles, which your browser requests directly). Providers may change as the Service evolves.

With Stripe, for online payments, as described above.

With authorities, courts or advisers, when the law requires it or when needed to protect someone's safety or rights.

With a buyer or successor, if XPO8 or padelduels is involved in a merger, acquisition or reorganisation. This policy continues to protect your information.

12. Cookies and similar technologies

padelduels uses only the cookies it needs to work. We do not use analytics or advertising cookies.

Sign-in cookies keep you signed in until you sign out or the session expires.

signup_email remembers the address you signed up with for one hour, so we can send the confirmation link again.

tz stores your device's timezone for one year, so times show correctly.

owner_setup_later remembers for seven days that a centre owner chose to finish setup later.

Stripe Checkout and Google sign-in run on their own pages and set their own cookies under their policies.

13. International transfers

XPO8 is based in Hong Kong. The padelduels website, application and database run in Ohio, in the United States, on Vercel, Google Cloud and Supabase. Photos and other uploaded files are stored in Google Cloud's Frankfurt region. Our other providers may process data in the European Union, the United States, Hong Kong and other countries. Where the law requires safeguards for these transfers, we rely on measures such as the European Commission's standard contractual clauses, which our main providers include in their data processing terms.

14. Retention

Account and profile data: while your account is open.

Delivery logs: 30 days.

Provider access logs: no more than 90 days, configured with the provider.

Resolved moderation evidence: 12 months; open cases remain until resolved.

Inactive direct and game chat: 12 months, measured from the conversation or game chat's latest activity.

Booking, lesson and payment records: kept after an account closes under a pseudonymous identifier, so centres, coaches and we can handle refunds, disputes and accounts. The username and email on a court booking stay in the centre's records.

Backups containing deleted data: removed within 35 days under the production backup policy.

Stripe keeps payment records under its own retention rules.

15. Closing your account

Closing your account in Settings hides the profile and disables access immediately. Future games you host are cancelled and places in other future games reopen without attendance penalties. Your coach listing and its photos are removed. Direct identifiers are pseudonymized within 30 days. Competition and administrative history remains under a pseudonymous identifier so standings, corrections and safety decisions stay auditable.

16. Security

We use encryption in transit, access rules enforced by the database on every request, audited administrator actions that each require a reason, and managed storage for secrets. Card details are handled by Stripe and never reach our servers. No method of transmission or storage is completely secure, so keep your password safe and tell us at contact@padelduels.com if you think your account has been misused. Report security vulnerabilities to the same address.

17. Your choices and rights

You can update your profile, availability and search area, block players, and close your account in Settings. You can see your reports and attendance appeals there too.

Depending on where you live, you may also have the right to access your personal data, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent. Under Hong Kong law you can request access to and correction of your data.

You can complain to Hong Kong's Privacy Commissioner for Personal Data or the data protection authority where you live or work. We would appreciate the chance to resolve your concern first.

18. How we handle privacy requests

Email contact@padelduels.com from the address on your account, saying what you would like us to do.

We may ask you to confirm your identity, or your authority if you are acting for someone else.

We reply within one month. If a request is complex, we will tell you if we need longer and why.

Some information may be kept where we need it, such as pseudonymous competition history, safety records, or records needed for refunds, disputes or legal claims. We will explain what we keep and why.

For records a centre or coach holds in its own systems, we may refer you to them or pass your request on.

19. Communications

We send in-app notifications and emails that are part of the Service: invitations, join decisions, removals and cancellations, result submissions and disputes, attendance cases, restriction changes, booking and lesson updates, and a reminder 24 hours before a game, with another in the app 2 hours before. Sign-in and password emails come from our authentication provider. We do not send marketing email; if that changes, we will ask first where the law requires it, and every message will include a way to unsubscribe.

20. Children

padelduels is for people aged 16 and over. We do not knowingly collect personal data from anyone younger. If you believe someone under 16 has created an account, contact us at contact@padelduels.com and we will close it.

21. Changes to this policy

We may update this policy, and the date at the top shows when it last changed. For material changes, we tell you in advance by email or in the Service.

22. Contact us

XPO8 Limited 1603, The L. Plaza, 367–375 Queen's Road Central Sheung Wan, Hong Kong Island, Hong Kong contact@padelduels.com

Include your account email so we can find your records quickly.

See also the terms of service and the help and community rules.

ENTREGRAPH · LEGAL Privacy Policy

Effective and last updated: 1 October 2026 · Version 1.0

This policy explains what Entregraph collects, why it is used, who can see it, how connected business accounts are handled, and the choices and rights available to you.

Contents

1. Who we are and how to contact us

Entregraph is owned and operated by XPO8 Limited, a company based in Hong Kong. In this policy, “Entregraph”, “we”, “us” and “our” mean XPO8 Limited. For personal data for which we determine the purposes and means of processing, XPO8 Limited is the data user under Hong Kong law and the controller where that term is used under applicable data protection law. XPO8 Limited 1603, L. Plaza 367–375 Queen’s Road Central Sheung Wan, Hong Kong Island Hong Kong Send privacy questions, access or correction requests, objections, deletion requests and complaints to contact@xpo8.com, with “Entregraph privacy” in the subject line. You may also write to the address above. Include the email associated with your account and enough information to identify your request. Do not send passwords, API keys, full payment card details or unnecessary identity documents.

2. Scope and important distinctions

This policy covers the Entregraph website, account and profile features, startup pages, workspaces, communities, feeds, map discovery, rankings, messaging, connected-account reporting, uploads, notifications and our related support communications, together the “Service”. It applies to visitors, account holders, community participants, startup owners, people contacting us and individuals whose information is lawfully supplied through these features.

“Personal data” means information relating to an identified or identifiable living individual, as defined by the law that applies. Business information, customer identifiers, transaction records and public usernames can be personal data when they identify, or can be linked to, an individual. Aggregation or removing a name does not automatically make information anonymous.

This policy describes our practices; it does not turn your use of the Service into consent for every processing activity. Where consent is legally required, we must obtain it separately. The Terms of Service govern your use of Entregraph. Third-party websites, connected providers and independently administered communities may also have their own notices and responsibilities.

Features and integrations may be unavailable, limited or enabled gradually. Describing an optional feature here does not mean it is active for every user.

3. Our role and startup customer data

We ordinarily act as controller for your Entregraph account, our relationship with you, platform safety, support, service administration and the visibility features you use. Startup owners and organizations remain responsible for their own customers, subscribers, users and connected provider accounts.

Where we import and calculate business metrics from customer records solely on an organization’s documented instructions, we may act as its processor or service provider for those records. That role is distinct from our controller role for operating Entregraph. Applicable contractual data processing terms govern that processing; this notice alone is not a substitute for a required data processing agreement or international transfer agreement.

If you are a customer of a startup using Entregraph, normally contact that startup first about its billing, account, analytics or imported customer records. It decides whether to connect its business accounts and what it is entitled to share. We will assist the responsible organization as applicable, and you may contact us directly about processing for which we are controller or if you cannot identify the responsible organization.

4. Information you provide

Account and authentication: email address, account identifier, sign-in method, authentication credentials and recovery information. Password authentication is handled by our identity provider; credentials must never be posted in profiles, messages or support requests.

Profile: name, handle, biography, profile image, social account links and other information you choose to make part of your identity on the Service.

Location and availability: a city you select, whether it is visible, your willingness to meet, travel cities and travel date ranges.

Startup information: business name, description, website, category, images, ownership association, audience, attribution, profile inclusion, selected communities and metric disclosure settings.

Content and participation: posts, replies, images, links, startup requests, votes, reactions, follows, memberships, community submissions and related timestamps and identifiers.

Messages: opening requests, message text, conversation participants, attachments where supported, delivery and read information, and your messaging preferences.

Preferences and safety: notification choices, blocks, mutes, reports, report explanations and other settings.

Support and legal correspondence: messages, contact details, diagnostic information you supply, evidence of an issue and records needed to handle rights requests, disputes or complaints.

Some information is required to create or secure an account or provide a feature you request. Optional profile content, travel entries, public disclosures and connected accounts are your choices. If you decline information required for a particular feature, that feature may not work; you may still be able to use public areas.

5. Technical and interaction information

When you access the Service, our application and infrastructure providers process network and request information needed to deliver it. Depending on the request and infrastructure configuration, this can include IP address, browser and device characteristics, operating system, requested URLs, referring information, timestamps, response status, session or account identifiers, error information and security-related events.

The Service also records information created by your interactions, such as membership changes, content timestamps, message read cursors, notification delivery state, connection health, synchronization outcomes and moderation actions. We use these records to make features work, investigate failures, prevent misuse and maintain reliable operations.

We do not ask you to provide access to your device contacts, microphone or continuous device location to use the current website. Selecting a file to upload gives us the selected file, rather than general access to your photo library or filesystem. Avoid putting secrets or sensitive information in URLs, filenames or error reports, because request and diagnostic records may include them.

6. Cities, travel and map requests

Entregraph’s location features use the home and travel cities you choose. They do not use your device’s GPS location or track your movement in the background. City coordinates describe the selected city, rather than your street address or precise position.

Depending on your settings and the relevant feature, your selected city, meeting availability and travel information can affect your profile, map discovery, city directories and community discovery. A travel city may appear during the dates you select. Review both home-city and travel settings before sharing: hiding one item should not be assumed to erase another item you have separately published.

Detailed map views may request tiles directly from OpenFreeMap or another configured map host. That host receives ordinary connection and request information, such as your IP address and the map tiles requested. Tile coordinates identify the map area being viewed and are not evidence that your device is physically there. GeoNames and OpenStreetMap-derived information supply geographic reference data.

7. Connected accounts, credentials and imported records

If you connect a provider account, we process the authorization or API credential you submit, the provider and account or project identifier, relevant permissions, connection status, synchronization settings, timestamps, errors and data returned by the authorized provider. Depending on availability, providers may include Stripe, RevenueCat, Paddle, Polar, Dodo Payments, Lemon Squeezy, PostHog, Google Analytics, X and GitHub. An integration being described does not guarantee it is enabled.

Financial imports can include provider transaction and customer identifiers, subscription and product identifiers, prices, currencies, billing intervals, quantities, subscription status, charges, refunds, discounts, taxes, dispute adjustments and related dates. Analytics imports can include aggregate reporting periods, pageviews, user or session counts and other supported usage measures. We derive reporting values such as recurring revenue, net collections, paying customer counts and growth.

For connected GitHub repositories, we read repository metadata, commit dates and source files to calculate aggregate activity and current codebase size. Stored reporting facts contain daily commit totals and file-revision line counts; source contents, file paths, commit messages and author identities are not retained in these reports. Repository identity stays private to the owner, and aggregate company-page sharing is optional.

Our financial normalization is designed to retain calculation fields and stable identifiers while excluding unnecessary customer names, emails, addresses, arbitrary metadata and payment card details from stored normalized facts. A provider response can nevertheless contain additional information while it is being received and normalized. Stable identifiers and financial facts may still be personal data. We do not claim that connecting a provider involves no processing of your customers’ data.

Provider credentials are handled through a separate server-side connection service and credential vault using Google Cloud Secret Manager. They are not part of public metric displays or the account export. Access is restricted to systems that need it to establish, refresh, synchronize or clean up a connection.

Use the least privileged credential your provider supports and review the connection instructions. Some providers cannot issue a key restricted exclusively to reads; a broader key may require an explicit acknowledgement. Entregraph’s supported metric import is intended to read reporting information, but you should not infer that every supplied key is technically incapable of writes.

Only connect accounts you control or are authorized to administer. You are responsible for lawful collection, notices and any permissions needed for your customers’ records. Disconnecting stops future synchronization as the revocation and cleanup process takes effect; it does not automatically erase every previously imported record, derived metric or copy already shared. Revoke the credential with the original provider as well if you need to prevent further use of that credential immediately.

8. Social links and audience history

When you attach social accounts, we store their platform, handle, URL, association with your profile or startup and relevant settings. Where tracking is enabled and supported, we may obtain public account identifiers, follower or subscriber counts, observation dates, freshness and collection status through a social data provider such as Scrape Creators. Collection may be disabled or unavailable for a platform.

Supported audience-history collection concerns linked public X, Instagram, TikTok and YouTube accounts, and personal LinkedIn profiles linked to a builder profile. LinkedIn company pages, LinkedIn links on startup pages and GitHub links do not by themselves enable the same audience-history collection. We do not require your social account password for a public link.

Social audience history is a separate feature from financial metric disclosures. Exact, range, growth and hidden financial settings should not be assumed to control social history. Where the linked profile or startup is visible, its linked social account and available history may also be visible. A shared social account can have observations collected before you attached it, so displayed history does not necessarily begin on the attachment date. Removing a link or disabling future tracking does not necessarily delete shared historical observations.

9. Public visibility and disclosure controls

Public means publicly accessible. Information you publish can be read by people without an Entregraph account, found through discovery features, copied by others and indexed by search engines. A later setting change cannot retrieve screenshots, exports or other copies someone has already made.

Profiles, public posts, public startup pages, selected social links, visible cities, community information and disclosed metrics may appear in feeds, directories, map results, rankings, profile summaries and other discovery surfaces. Community membership and participation may also be visible in the relevant context.

Every startup page is public. A founder can present a startup in stealth, which masks selected identity fields. Metrics imported from a connected source are shown as exact values with their history unless the owner hides them or shows a range instead; the owner can change this for each metric at any time. Attribution and profile inclusion are separate controls. A private workspace is not the same as a public startup page.

A “stealth” startup masks selected business identity fields on public displays; it is not a guarantee of anonymity. Disclosed metrics, associated people, posts, timing and other information can identify the business indirectly. Selected-community information is shared with eligible members, who may copy it; community visibility is not a confidentiality agreement.

For revenue-based message eligibility, the Service may evaluate private verified metrics without showing the underlying startup name or amount to the other person. Eligibility, ranking and aggregate results can still reveal limited information or allow inferences. We apply the relevant display rules rather than treating every internal metric as publicly shareable.

10. Messages, uploads and moderation

Messages and message requests are stored to provide conversations, participant access, delivery, read state and abuse reporting. Private messaging is not advertised as end-to-end encrypted. Authorized service systems, necessary service providers and personnel handling a lawful request, support issue or safety investigation may process relevant information with appropriate restrictions. Community conversations may be accessible to eligible community participants.

Recipients can retain, quote, forward or screenshot what you send. Message deletion, membership changes or account closure cannot make another person forget or erase a copy they control. Do not use Entregraph messages to transmit credentials, highly sensitive records or information requiring a specialized secure communication channel.

Uploaded images are processed for validation, resizing and delivery. The image pipeline re-encodes delivered images and is designed to remove source metadata such as EXIF. That does not mean the original file was never received, that every temporary or backup copy has already been deleted, or that visible text and other identifying details inside an image are removed.

We process reports, reported content, identifiers, reasons and moderation decisions to investigate misuse and enforce our terms. Reports may require review of the relevant message or content. We may disclose enough information to an affected person or competent authority to address a complaint, comply with law or allow a fair response, while limiting unnecessary disclosure of the reporter’s identity. We do not promise universal proactive monitoring or absolute reporter confidentiality.

11. Sponsor ads

If you advertise, we keep your sponsor card (name, website, pitch, colour and logo), its review history and any note our reviewers write, your booking and waitlist state, and the Stripe references for your payments. Our team reviews every ad before it shows. We email you about the review, a spot opening and any price change.

Sponsor cards are plain links to the advertiser’s website. We don’t count clicks or views of ads, and ads add no cookies, pixels or other tracking. Following a link takes you to the advertiser’s site, where its own privacy policy applies.

12. Why we use personal data

Register and authenticate accounts, recover access and maintain sessions.

Operate profiles, workspaces, startup reporting, communities, posts, messaging, discovery, rankings and the sharing choices you request.

Establish provider connections, synchronize authorized records, calculate metrics and explain their source, freshness and completeness.

Apply message eligibility, privacy controls, blocks, mutes and notification preferences.

Deliver service emails, security notices and support; investigate technical problems and improve usability and reliability.

Prevent fraud, spam, unauthorized access, manipulated metrics and other misuse; handle reports and protect people and the Service.

Respond to rights requests, legal process and regulatory obligations, maintain appropriate records, and establish, exercise or defend legal claims.

Evaluate and carry out a lawful business reorganization or transfer with appropriate confidentiality and privacy safeguards.

We do not use private messages or imported customer records to sell advertising audiences or train a general-purpose AI model as part of the current Service. We do not sell personal data or share it for cross-context behavioral advertising. We do not give other XPO8 products unrestricted access to Entregraph personal data merely because they have the same owner.

13. Legal bases and compatible use

Hong Kong’s Personal Data (Privacy) Ordinance, Cap. 486 (“PDPO”), and its Data Protection Principles apply where relevant. We collect information for lawful purposes directly related to our activities, seek information that is adequate but not excessive, explain required information and relevant uses, and do not treat publication or an account relationship as permission for unrelated uses. A new purpose that requires prescribed consent must be addressed before the information is used for that purpose.

Where the EU GDPR, UK GDPR or another law requiring an identified legal basis applies, the basis depends on the activity:

Principal processing purposes and bases where applicablePurposeLegal basisAccount administration and features you requestPerformance of our contract with you or steps you request before a contract.Security, proportionate diagnostics, support, prevention of abuse and legal claimsLegitimate interests in operating and protecting the Service, balanced against your rights; legal obligation where applicable.Required regulatory records and responses to binding lawful requestsCompliance with a legal obligation applicable to us.Error monitoring and product analyticsLegitimate interests in keeping the Service reliable and understanding its use, balanced against your rights. You can turn analytics off with the button in the cookies section.Any optional activity for which the law requires an opt-in, including qualifying marketingYour specific consent, which can be withdrawn prospectively.Imported customer data processed for a startupThe startup determines its lawful basis; we process according to its lawful instructions and applicable processing terms.

We do not rely on contractual necessity simply because an activity is mentioned in these documents. Where we rely on legitimate interests, you may object as provided by applicable law. Withdrawing consent does not invalidate processing that was lawful before withdrawal and does not prevent processing that has a separate lawful basis.

14. Who receives information

We disclose information where necessary for the purposes described above to the following categories of recipients:

People and audiences you choose: the public, selected community participants, message recipients and other authorized users, according to the relevant visibility settings.

Service providers: authentication, databases, hosting, storage, credential management, background processing, communications and other providers needed to operate the Service, with access appropriate to their task.

Connected providers: the provider whose account you connect, including identifiers, authorization and requests needed to access that account.

Authorized personnel and advisers: people supporting the Service and professional advisers, insurers or auditors where needed and subject to appropriate confidentiality duties.

Authorities and relevant parties: where disclosure is required by law, a valid order or legal process, or is otherwise lawfully necessary to investigate wrongdoing, protect rights or address a serious safety or security issue.

Business successors: in a proposed or completed merger, acquisition, restructuring or asset transfer, with disclosure limited to what is appropriate and subject to applicable restrictions.

We evaluate legal requests rather than assuming any request entitles a person to your data. Where lawful and appropriate, we may notify you of a compulsory disclosure. A provider can have its own controller responsibilities for matters such as its account relationship with you, legally required records and its own service security.

15. Principal providers and external services

Providers used or supported for the relevant featureProvider or serviceFunction and relevant informationSupabaseAuthentication, account and application database, authorized realtime updates and storage where configured; account information, content, messages, preferences and reporting records.VercelWebsite hosting and application delivery; request and network metadata, and information processed by hosted application functions.PostHog (US Cloud)Product analytics: pages viewed, clicks on interface elements (without their text), browser and device type, and approximate location derived from IP address, which is then discarded. If you are signed in, your account identifier.Sentry (EU region)Error monitoring for the website and background services: error messages, stack traces, page path without query string, browser and device type, and release version. Cookies, request headers and bodies, and IP addresses are not stored.Google CloudBackground processing, media storage, task delivery and Secret Manager; relevant files, job metadata, provider responses and connection credentials.Stripe, if you advertiseBilling for sponsor ads on Entregraph’s own Stripe account: your email, card and billing details, which you enter on Stripe’s checkout page, and your payments, refunds, invoices and subscription status. We keep Stripe’s customer, subscription and payment references, never card details.Twilio SendGrid, where email delivery is enabledService email delivery; recipient email, message template, delivery identifiers and delivery status. Authentication email may use a separately configured delivery route.Scrape Creators, where social collection is enabledRequests for linked public social account information and supported audience counts; platform and account identifiers.OpenFreeMap or the configured map tile hostBrowser map tile requests and ordinary connection metadata. Geographic reference datasets do not receive your account records simply by being used.Your connected financial, analytics or social providerAuthorized connection and reporting requests, account or project identifiers, permissions and provider data described in this policy.Google sign-in, if enabled and chosenAuthentication information and approved identity attributes from your Google account; Google also processes the sign-in under its own terms.

Connecting your own PostHog or Google Analytics account to a startup is separate from the analytics we run on Entregraph itself. Data from a connected account is used only for the reporting described in this policy, not to analyse how you use Entregraph.

Providers may change as the Service evolves. Contact us for information relevant to your processing or a business processing agreement. A listing is not a claim that every provider is enabled, that every provider has the same legal role, or that processing is confined to one country.

16. Cookies and browser storage

The current website uses authentication and session cookies through Supabase so it can recognize a signed-in session, refresh authentication and apply access permissions. These are necessary for authenticated features. Cookies may persist for the session or their configured lifetime and can be refreshed while you use the Service.

The website and its libraries may also use browser storage for session-related or feature state. Clearing cookies or storage can sign you out or reset local state. You can control stored cookies through your browser; blocking necessary cookies can prevent account and private features from working.

The website also uses analytics cookies. PostHog stores first-party cookies and browser storage entries (names beginning ph_; the cookies last up to a year) to recognise your browser across visits and, when you are signed in, to link activity to your account identifier. You can turn analytics off with the button below; PostHog then records nothing from this browser and keeps only your choice in browser storage. We do not operate advertising cookies, cross-site advertising pixels or session-replay recording.

Browser privacy signals do not currently alter our necessary session processing. Where a law requires recognition of an opt-out preference signal, we will honor it for the processing to which it applies. Because we do not currently sell data or share it for cross-context behavioral advertising, such a signal does not need to turn off an existing advertising sale or sharing program.

17. Emails and direct marketing

We may send account, welcome, recovery, security and other service communications. Where message emails are enabled, their purpose is to tell you that there is a new message. The current new-message template does not include the sender’s identity or the message body. Email providers still process the destination email, template and delivery metadata.

You can control optional message emails through notification settings and the unsubscribe options provided. An unsubscribe action does not delete your account or stop every necessary security, recovery, legal or requested support message. The current SendGrid service-email implementation disables open and click tracking; visiting a link can still create ordinary website request records.

We do not treat consent to these terms or the presence of a public email as consent to promotional messages. If we introduce direct marketing, we will give the required notice about the intended use, data and marketing classes, obtain consent where required under the PDPO or other applicable law, and provide a way to withdraw it without charge. We do not transfer your personal data to another party for that party’s direct marketing without the consent and disclosures required by law.

18. International processing and transfers

XPO8 Limited is based in Hong Kong. Our current deployment documentation places principal database and background infrastructure in the United Kingdom, but our hosting, email, connected-account and other providers can process data in Hong Kong, the United Kingdom, the United States, the EEA and other places where they or their authorized subprocessors operate. A regional hosting setting does not guarantee that all support access, delivery, backups and provider processing remain in that region.

Privacy laws and available remedies can differ between countries. Where a transfer is restricted by applicable law, an appropriate lawful transfer mechanism and safeguards are required. Depending on the law and destination, these may include an adequacy decision, applicable standard contractual clauses, a UK addendum or international data transfer agreement, and supplementary technical or organizational measures. A limited statutory exception may apply in a specific case.

We do not rely on your general use of the Service as blanket consent to a restricted transfer. This notice does not itself execute standard contractual clauses or certify a provider under a transfer framework. You may ask contact@xpo8.com about destinations and safeguards applicable to your data, and request relevant information or a copy subject to lawful confidentiality restrictions and necessary redactions.

19. Retention and deletion

We retain personal data for as long as reasonably necessary for the purpose for which it was collected, subject to applicable law, legitimate recordkeeping and legal holds. We consider whether the account or connection remains active, the nature of the data, what is needed to provide the feature, security and complaint needs, applicable limitation periods and whether deletion or anonymization is feasible without impairing other people’s rights.

Account and settings records: retained while needed to administer the account and handle closure, security, support and legal obligations.

Published and community content: retained while needed for the content feature and relevant participation history, subject to valid removal or erasure requests and other participants’ rights.

Messages: retained for conversations, participant access and proportionate safety or dispute purposes. Another participant’s lawful need for a conversation can affect what can be erased from a shared record.

Imported facts, metrics and social observations: retained for reporting, reconciliation and the relevant processing instructions. Disconnecting a source stops future collection but is not an automatic instruction to erase all prior observations.

Credentials: retained while needed for an authorized connection, with revocation and cleanup when it is disconnected, replaced or no longer required.

Uploads, logs, delivery records and backups: retained for delivery, operational recovery and proportionate investigation needs. Temporary files and residual backup copies can require separate cleanup or rotation.

Legal and rights-request records: retained as necessary to demonstrate our response, comply with law or establish, exercise or defend claims.

We do not state a universal fixed deletion period because different records and providers require different treatment. Removing something from a display, signing out, disabling an email or disconnecting a provider is not the same as complete erasure. Data subject to a lawful hold is restricted to the relevant purpose, and truly anonymized statistics may be retained without being treated as identifiable personal data.

Full automated account closure and coordinated deletion across all stores are not currently offered as a completed self-service workflow. Send a deletion or account-closure request to contact@xpo8.com. We will assess and act on it under the applicable law, explain any lawful limits or necessary steps, and do not promise instant deletion from every backup. Where backup copies cannot immediately be selectively removed, they must remain protected and not be restored to ordinary use without applying the relevant deletion restrictions.

20. Security and incident response

We use technical and organizational controls appropriate to the Service, including authenticated access, database access policies, restricted server-side credential handling, access checks for private content and controlled infrastructure permissions. Delivered images are re-encoded as described above. These measures reduce risk but cannot guarantee that a system, credential, communication or third-party service is never compromised.

You are responsible for a strong unique password, your email account and the devices you use. Review connected-account permissions, revoke compromised keys with their provider and tell us promptly if you suspect unauthorized access. Never send a working API key or password to the privacy mailbox.

We assess suspected incidents, take appropriate containment and investigation steps, and make notifications to affected people, responsible business customers and regulators when required by applicable law. The content and timing depend on the incident, risk and legal requirements. A public message feature or ordinary email is not a specialized system for storing highly sensitive information.

21. Automated calculations and eligibility

The Service automatically calculates metrics, growth, rankings, discovery groupings and certain message-request eligibility. These functions may use provider facts, disclosed metric values, current membership, following relationships, a chosen revenue threshold and freshness or completeness checks. A connection or verified label is a limited statement about source and calculation status; it is not an independent audit of an entire business.

These features are intended for reporting and social discovery, rather than decisions about credit, employment, housing, insurance or another legally significant entitlement. We do not represent that the current Service makes decisions producing legal or similarly significant effects solely through automated processing. If a particular use falls within special automated-decision rules, the relevant rights and safeguards must be addressed.

You can change settings within the available controls and contact us to question a calculation or eligibility outcome. For information that originates with a provider, correction may also require correcting the source account. We do not guarantee access to another person’s private metric values simply because those values contributed to a threshold check.

22. Your choices and privacy rights

You can edit supported profile information, home and travel entries, social links, notification and messaging preferences, startup audiences and metric disclosures through the Service. You can also ask us to address information not covered by those controls. The rights available depend on the applicable law, our role and the circumstances.

Hong Kong

Under the PDPO, you may request confirmation of whether we hold your personal data, access to that data and correction of inaccurate data, subject to statutory exceptions. For a qualifying data access or correction request, the statutory response period is generally 40 days. We may ask you to use the prescribed data access request form where applicable. Any permitted access fee must not be excessive; we will explain a fee or a lawful refusal and the relevant reasons as required. You can object to direct marketing and withdraw relevant consent.

EEA, United Kingdom and equivalent laws

Where these laws apply, you may have rights to access, rectify, erase, restrict processing, object to processing based on legitimate interests, receive certain data in a portable form, withdraw consent and obtain applicable safeguards for qualifying automated decisions. An objection to direct marketing must be respected. Requests under the GDPR or UK GDPR are generally answered within one month; where legally permitted, an extension of up to two further months may be needed for complexity or number of requests, with notice and reasons within the initial month.

California and other jurisdictions

Where the CCPA/CPRA or another local privacy law applies to us and your request, rights may include knowing the categories and specific information collected, its sources, purposes and recipient categories; access, correction, deletion and portability; and opting out of a sale, qualifying sharing or certain uses of sensitive personal information. We do not currently sell or share personal information for cross-context behavioral advertising or use sensitive information for an advertising profile. We do not offer a financial incentive program for personal data. Covered California requests are generally answered within 45 days, with a permitted further 45-day extension explained when needed. Other local deadlines and appeal rights apply where legally required.

We do not discriminate against you for exercising an applicable right. A request can nevertheless affect a feature that requires the data you ask us to remove. Rights are not absolute: legal obligations, proportionate security needs, third-party rights, confidentiality, legal claims and statutory exemptions may limit a request.

23. How to make a request and export information

Email contact@xpo8.com or write to the address in section 1. Identify the account, the information or processing concerned and the action you request. We may need reasonable verification to avoid giving your data to an unauthorized person, but should not request more identifying information than necessary. An authorized agent may act where the law permits and appropriate authority and identity checks are satisfied.

Signed-in users can request an account JSON export. It contains records currently accessible to that account, including available profile, content, message, metric and connection metadata. It excludes provider credentials and media file binaries. Content retained in communities you have left and additional information needed for a legally complete access or portability request may require a separate request. The convenience export does not narrow your statutory rights.

Where we act as processor for a startup, we may refer a request about its customer dataset to that startup and assist it under the processing terms. We will not use that referral to avoid our duties for data we control ourselves. If we cannot fulfill a request, we will explain the applicable reason and any available review, complaint or appeal route.

24. Sensitive information and children

Entregraph is intended for adults aged 18 or over and is not directed to children. Do not create an account if you are under 18. We do not knowingly solicit children’s personal data; if you believe a child has supplied information, contact us so we can assess and take appropriate action.

Do not submit government identity numbers, payment card security codes, health records, biometric identifiers, political or religious information, sexual-life information or other highly sensitive data unless we expressly request specific information for a lawful and necessary purpose through an appropriate channel. Business financial records can be confidential even where they are not a special category under a particular privacy law.

Public posts and free-text fields can reveal sensitive details voluntarily. Choosing to publish information does not remove applicable protections or give us unrestricted permission to use it for a different purpose. If you accidentally share sensitive information, restrict or remove it where possible and contact us for assistance.

25. ZeroToBuilders reporting

If you join Entregraph through ZeroToBuilders, we use its invitation to prefill your name and biography and link your accounts after you authenticate, verify your email and finish your profile. Accepting the invitation requires you to authorize the private reporting described below.

When you accept, you authorize ZeroToBuilders to read your profile, selected city even when hidden, availability and follower counts, and all current and future startups you own. This includes unpublished drafts, private or community-only startups, real stealth identities, exact stored metrics and reporting history even when public disclosure is hidden, and limited provider connection health. This permission does not change your public visibility settings. It excludes messages, provider credentials, raw customer or payment records, images, social audience history and travel itineraries.

ZeroToBuilders uses authorized reports to identify connected companies for its Company XP feature. You cannot link your accounts or join the community through an invitation without this permission. You can disconnect reporting later in Settings; this stops future authorized reads without deleting your accounts or community membership. Leaving a community alone does not withdraw a separately accepted reporting grant. Programme revocation, account deletion or disabling the partner also stops reporting access.

ZeroToBuilders may retain reports it already received under its own disclosed retention policy. Disconnecting future access does not automatically delete those copies; contact ZeroToBuilders about them. New categories of shared data require renewed consent.

26. External links and independent communities

Startup websites, social profiles, embedded or linked resources and other external destinations are operated independently. Following a link can disclose ordinary connection and referring information to the destination. Its privacy notice applies to what it collects directly; this policy does not control its practices.

Community organizers may separately collect information through their own events, websites or communications. An organizer does not become authorized to receive your credentials, private imported facts or unrelated account records simply by creating a community on Entregraph. Contact that organizer about independent collection, and contact us about Entregraph’s own processing.

27. Complaints and supervisory authorities

If you have a concern, contact contact@xpo8.com and describe the relevant processing and outcome you seek. We will consider the concern and respond as appropriate. Contacting us first does not prevent you from exercising a statutory complaint or court right.

In Hong Kong, you can contact the Privacy Commissioner for Personal Data. Where the GDPR applies, you can complain to an appropriate supervisory authority, including one in your habitual residence, place of work or the place of the alleged infringement. Where the UK GDPR applies, you can contact the Information Commissioner’s Office. Other competent regulators or appeal mechanisms may be available under your local law.

28. Changes to this policy

We may update this policy to reflect changes to the Service, providers, processing or law. The effective date and version are shown at the top. For material changes, we will provide appropriate notice, such as a prominent website notice or an email where suitable, before the change takes effect where required.

An updated notice does not by itself authorize a new incompatible purpose or replace consent where consent is required. We will obtain any necessary permission and apply required safeguards before the affected processing. You can ask the privacy contact for clarification about a change or the policy applicable to a particular period.

Privacy and monitoring

ZeroToBuilders uses Sentry for operational error monitoring and, with your permission, PostHog for product analytics. Both services are hosted in the United States.

Error monitoring

Sentry receives error types, code locations, release versions, and limited request information to help us keep the app reliable. Signed-in errors may include your account identifier. We remove error text, request bodies, credentials, sensitive URL parameters, and private content before sending reports. Monitoring is independent of optional analytics.

Optional analytics

If you accept analytics, PostHog receives visits and completed actions such as onboarding, linking Entregraph, viewing workspace sections, and completing roadmap tasks. Signed-in activity uses your account identifier. This identifier is personal data, even though we do not send your name or email. Analytics can use browser storage to recognize a consenting session.

We do not use session recording or automatic click capture, and do not send messages, private roadmap answers, bios, files, company reports, or payment details to these services.

Roadmap videos

Some roadmap tasks include YouTube videos. Nothing loads from YouTube until you press play; the video then plays from youtube-nocookie.com, and YouTube’s own privacy policy applies to it. Other roadmap resources open on their own sites in a new tab.

Your choices

Use “Privacy choices” to decline or withdraw analytics at any time. Declining does not limit membership or app features. Withdrawal stops future analytics and clears analytics identity/storage on this browser; it does not erase previously collected vendor data. Clearing browser storage resets your choice. Entregraph reporting and club-sharing choices are separate.

For questions about retention, access, or deletion of previously collected data, email contact@xpo8.com. Vendor retention and international data-transfer arrangements must be maintained by the operator.

Return to ZeroToBuilders