Privacy Policy

1. Introduction

XpediOo ("XpediOo", "we", "us", or "our") operates the XpediOo enterprise AI platform and the website located at https://xpedioo.ai (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard information about you when you visit our website, request a demonstration, or use any component of the XpediOo platform.

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you voluntarily provide when you:

• Fill in a contact or demo request form on our website (name, work email address, company name, job title, and message content).
• Register as a partner through our Partner Registration programme (company details, business information, contact details).
• Sign in to the XpediOo platform using credentials issued by your organisation.
• Communicate with us by email, telephone, or other means.
• Subscribe to newsletters or marketing communications (email address).

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical information including:

• Log data: IP address, browser type and version, operating system, referring URLs, pages viewed, and the date and time of your visit.
• Usage data: Information about how you navigate and interact with our website (page views, click paths, session duration).
• Device information: Device type, unique device identifiers, and mobile network information.
• Cookies and similar tracking technologies: See Section 7 for details.

2.3 Information from Third Parties

We may receive information about you from third-party sources such as business data providers, analytics vendors, and social media platforms, which we combine with information we already hold about you.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To operate, maintain, and improve the XpediOo platform and our website.
• Communications: To respond to inquiries, send demo confirmations, and provide platform updates and support.
• Marketing: To send promotional content, product updates, and event invitations where you have consented or where we have a legitimate interest. You may opt out at any time.
• Analytics: To understand how visitors interact with our website and to improve the user experience.
• Security: To detect, prevent, and address fraud, abuse, and other harmful activities.
• Legal compliance: To comply with applicable laws, regulations, legal processes, and governmental requests.
• Business operations: To fulfil partner agreements, process transactions, and manage our business relationships.

4. Legal Bases for Processing (EEA / UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

• Contractual necessity: Processing required to perform a contract with you or take pre-contractual steps at your request.
• Legitimate interests: Processing for our legitimate business interests (e.g., analytics, marketing to business prospects), provided those interests are not overridden by your rights.
• Consent: Where we have asked for and you have provided consent (e.g., marketing emails). You may withdraw consent at any time.
• Legal obligation: Processing required to comply with applicable law.

5. How We Share Your Information

We do not sell your personal data. We may share information with:

• Service providers: Third-party vendors that process data on our behalf under data processing agreements (e.g., cloud hosting, email delivery, analytics platforms).
• Business partners: Authorised XpediOo channel partners, where necessary to fulfil a transaction or provide a service you have requested.
• Legal authorities: Law enforcement, regulatory bodies, or courts when required by applicable law or to protect our legal rights.
• Business transfers: In connection with a merger, acquisition, asset sale, or similar corporate transaction, subject to confidentiality obligations.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required by law. When data is no longer needed, we securely delete or anonymise it. Platform customer data is retained in accordance with the terms of the applicable enterprise agreement.

7. Cookies

Our website uses cookies and similar tracking technologies to enhance your experience. We use:

• Strictly necessary cookies: Required for the website to function (e.g., session management, security). These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with our website. These may be set by us or third-party analytics providers.
• Preference cookies: Used to remember your settings (e.g., theme preference).

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the website.

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The XpediOo platform is architected to meet enterprise-grade security requirements including encryption in transit (TLS 1.2+) and at rest, access control, audit logging, and support for 100+ global GRC frameworks.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. If you discover a security vulnerability, please report it to [email protected].

9. International Data Transfers

Your information may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your country. When we transfer data from the EEA or UK to third countries, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner's Office.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: The right to request a copy of the personal data we hold about you.
• Rectification: The right to request correction of inaccurate or incomplete data.
• Erasure: The right to request deletion of your personal data in certain circumstances.
• Restriction: The right to request that we restrict processing of your data in certain circumstances.
• Portability: The right to receive your data in a structured, machine-readable format.
• Objection: The right to object to processing based on our legitimate interests.
• Withdraw consent: The right to withdraw consent at any time where processing is based on consent.

To exercise these rights, please contact us at [email protected]. We will respond within the timeframe required by applicable law.

11. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected personal data from a child, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or prominent notice on our website. Your continued use of the Service after the effective date of any change constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us at: