Privacy Policy for xlrate.ai

Last Updated: January 22, 2025

1. INTRODUCTION

This Privacy Policy describes how xlrate.ai (“we,” “us,” “our,” or “Company”) collects, uses, processes, and protects your personal information when you use our platform, services, and website (collectively, the “Services”). We are committed to protecting your privacy and ensuring transparency about our data practices.

This Privacy Policy applies to all users of xlrate.ai, including visitors to our website, registered users, and customers who use our Services. By accessing or using xlrate.ai, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

We collect information you voluntarily provide to us, including:

  • Account Information: Name, email address, username, password, and profile information when you create an account
  • Contact Information: Email addresses, phone numbers, and mailing addresses when you contact us or subscribe to our communications
  • Payment Information: Billing details, credit card information, and other financial data necessary for processing payments (processed securely through third-party payment processors)
  • User Content: Any data, files, documents, or other content you upload, submit, or transmit through our Services
  • Communication Data: Messages, feedback, survey responses, and other communications you send to us
  • Professional Information: Job title, company name, industry, and other professional details you choose to provide

2.2 Information We Collect Automatically

When you use xlrate.ai, we automatically collect certain information:

  • Technical Information: IP address, browser type and version, operating system, device identifiers, screen resolution, and other technical specifications
  • Usage Information: Pages visited, features used, time spent on the platform, click patterns, navigation paths, and interaction data
  • Log Data: Server logs, error reports, performance data, and security-related information
  • Location Data: General geographic location based on IP address (not precise location)
  • Cookies and Similar Technologies: Information collected through cookies, web beacons, pixels, and similar tracking technologies

2.3 Information from Third Parties

We may receive information about you from third-party sources:

  • Authentication Services: Information from social media platforms or single sign-on providers when you choose to connect your accounts
  • Business Partners: Data from our partners, integrations, or affiliated services
  • Public Sources: Publicly available information that may be relevant to our Services
  • Data Enrichment Services: Additional business or professional information to enhance our Services

3. HOW WE USE YOUR INFORMATION

We use your information for the following business and commercial purposes:

3.1 Service Provision and Account Management

  • Providing, operating, and maintaining xlrate.ai Services
  • Creating and managing user accounts and profiles
  • Processing transactions and managing billing
  • Authenticating users and preventing unauthorized access
  • Providing customer support and responding to inquiries

3.2 Service Improvement and Analytics

  • Analyzing usage patterns to improve our Services
  • Developing new features and functionalities
  • Conducting research and analytics to enhance user experience
  • Monitoring and analyzing performance, security, and reliability
  • Troubleshooting technical issues and optimizing platform performance

3.3 Communication and Marketing

  • Sending service-related notifications and updates
  • Providing customer support and responding to requests
  • Sending marketing communications and promotional materials (with your consent where required)
  • Conducting surveys and collecting feedback
  • Informing you about new features, updates, or changes to our Services

3.4 Legal and Security Purposes

  • Complying with legal obligations and regulatory requirements
  • Protecting against fraud, unauthorized access, and security threats
  • Enforcing our Terms of Service and other policies
  • Resolving disputes and investigating violations
  • Protecting the rights, property, and safety of xlrate.ai, our users, and others

3.5 Business Operations

  • Managing our business operations and internal administration
  • Conducting due diligence for business transactions
  • Maintaining records and documentation
  • Training and quality assurance purposes

4. HOW WE SHARE YOUR INFORMATION

We may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist us in operating our business:

  • Cloud Infrastructure Providers: For hosting and data storage services
  • Payment Processors: For secure payment processing and billing
  • Analytics Providers: For usage analytics and performance monitoring
  • Customer Support Tools: For providing efficient customer service
  • Marketing and Communication Services: For email delivery and marketing automation
  • Security Services: For fraud prevention and security monitoring

4.2 Business Transfers

In the event of a merger, acquisition, sale of assets, or other business transaction, your information may be transferred to the acquiring entity or successor organization. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information when required by law or when we believe disclosure is necessary to:

  • Comply with legal processes, court orders, or government requests
  • Enforce our Terms of Service or other agreements
  • Protect against fraud, security threats, or illegal activities
  • Protect the rights, property, or safety of xlrate.ai, our users, or the public
  • Respond to emergency situations

4.4 Consent-Based Sharing

We may share your information with your explicit consent or at your direction, such as when you choose to integrate with third-party services or share content with other users.

4.5 Aggregated and De-identified Data

We may share aggregated, de-identified, or anonymized information that cannot reasonably be used to identify you for research, analytics, marketing, or other business purposes.

5. DATA RETENTION

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention practices include:

  • Account Information: Retained while your account is active and for a reasonable period thereafter
  • Usage Data: Typically retained for 24-36 months for analytics and improvement purposes
  • Communication Records: Retained for customer service and legal compliance purposes
  • Financial Records: Retained as required by applicable accounting and tax laws
  • Legal Hold: Information may be retained longer when subject to legal proceedings or investigations

When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention policies and applicable legal requirements.

6. DATA SECURITY

We implement comprehensive security measures to protect your information:

6.1 Technical Safeguards

  • Encryption of data in transit and at rest using industry-standard protocols
  • Secure network infrastructure and access controls
  • Regular security assessments and vulnerability testing
  • Automated monitoring and threat detection systems
  • Secure backup and disaster recovery procedures

6.2 Administrative Safeguards

  • Employee training on data protection and privacy practices
  • Strict access controls and need-to-know principles
  • Background checks for personnel with access to sensitive data
  • Regular review and updating of security policies and procedures
  • Incident response and breach notification protocols

6.3 Physical Safeguards

  • Secure data centers with restricted access controls
  • Environmental controls and monitoring systems
  • Secure disposal of physical media and equipment
  • Visitor access controls and logging systems

While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we continuously work to maintain and improve our security measures.

7. YOUR RIGHTS AND CHOICES

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

  • Right to access and obtain copies of your personal information
  • Right to receive your data in a structured, commonly used format
  • Right to transfer your data to another service provider

7.2 Correction and Updates

  • Right to correct inaccurate or incomplete personal information
  • Ability to update your account information and preferences
  • Right to request verification of data accuracy

7.3 Deletion and Erasure

  • Right to request deletion of your personal information
  • Right to be forgotten under certain circumstances
  • Ability to delete your account and associated data

7.4 Processing Restrictions

  • Right to restrict or limit the processing of your information
  • Right to object to certain types of processing
  • Right to opt out of marketing communications

7.5 Consent Management

  • Right to withdraw consent for data processing
  • Right to manage cookie preferences and tracking settings
  • Ability to control communication preferences

To exercise these rights, please contact us using the information provided in Section 12. We will respond to your request within the timeframe required by applicable law, typically within 30 days.

8. INTERNATIONAL DATA TRANSFERS

xlrate.ai may process and store information in various countries around the world. When we transfer your information outside your country of residence, we implement appropriate safeguards to protect your data:

  • Adequacy Decisions: Transfers to countries with adequate data protection laws
  • Standard Contractual Clauses: Use of approved contractual terms for international transfers
  • Binding Corporate Rules: Internal policies ensuring consistent data protection standards
  • Certification Programs: Participation in recognized privacy frameworks and certifications

9. THIRD-PARTY SERVICES AND LINKS

Our Services may contain links to third-party websites, applications, or services that are not owned or controlled by xlrate.ai. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with.

9.1 Integrations and APIs

When you choose to integrate xlrate.ai with third-party services, information may be shared according to your preferences and the integration’s functionality. Please review the privacy policies of integrated services.

9.2 Social Media Features

Our Services may include social media features and widgets. These features may collect information about your interaction with them and may set cookies to function properly.

10. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to enhance your experience on xlrate.ai:

10.1 Types of Cookies

  • Essential Cookies: Necessary for basic platform functionality
  • Performance Cookies: Help us understand how users interact with our Services
  • Functional Cookies: Remember your preferences and settings
  • Marketing Cookies: Used for advertising and promotional purposes

10.2 Cookie Management

You can control cookies through your browser settings, though disabling certain cookies may affect the functionality of our Services. Most browsers allow you to:

  • View and delete cookies
  • Block cookies from specific sites
  • Set preferences for cookie acceptance
  • Receive notifications when cookies are set

10.3 Third-Party Tracking

We may use third-party analytics and advertising services that employ tracking technologies. These services have their own privacy policies governing their use of information.

11. CHILDREN’S PRIVACY

xlrate.ai is not intended for use by children under the age of 13 (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without proper consent, we will take steps to delete such information promptly.

Parents and guardians who believe their child has provided information to xlrate.ai should contact us immediately so we can remove such information.

12. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

12.1 Categories of Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

  • Identifiers: Names, email addresses, IP addresses, and account identifiers
  • Commercial Information: Purchase history, billing information, and transaction records
  • Internet Activity: Website usage, interaction data, and browsing behavior
  • Professional Information: Job titles, company names, and industry information
  • Inferences: Preferences, characteristics, and behavioral insights

12.2 Sources of Information

We collect information from:

  • Directly from you when you use our Services
  • Automatically through your use of xlrate.ai
  • Third-party service providers and business partners
  • Public sources and data enrichment services

12.3 Business Purposes for Processing

We process information for the purposes described in Section 3 of this Privacy Policy.

12.4 Your California Rights

  • Right to Know: Request information about our data collection and sharing practices
  • Right to Delete: Request deletion of your personal information
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out: Opt out of the sale or sharing of personal information
  • Right to Limit: Limit the use of sensitive personal information
  • Right to Non-Discrimination: Not be discriminated against for exercising your rights

12.5 Sales and Sharing

We do not sell personal information in the traditional sense. However, some data sharing for advertising purposes may constitute “selling” or “sharing” under California law. You can opt out of such activities by contacting us.

To exercise your California privacy rights, please contact us at privacy@xlrate.ai or use our online request form.

13. EUROPEAN PRIVACY RIGHTS (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

13.1 Legal Basis for Processing

We process your information based on the following legal grounds:

  • Consent: When you provide explicit consent for specific processing activities
  • Contract Performance: To fulfill our contractual obligations and provide Services
  • Legitimate Interests: For our legitimate business interests, balanced against your rights
  • Legal Compliance: To comply with applicable laws and regulations
  • Vital Interests: To protect life, health, or safety in emergency situations

13.2 Your GDPR Rights

  • Right of Access: Obtain confirmation and copies of your personal data
  • Right to Rectification: Correct inaccurate or incomplete information
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Limit how we process your information
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to certain types of processing
  • Right to Withdraw Consent: Withdraw consent at any time
  • Right to Lodge Complaints: File complaints with supervisory authorities

13.3 Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at reachus@xlrate.ai.

14. UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the “Last Updated” date at the top of this Privacy Policy
  • Provide notice through our Services or by email
  • Obtain your consent where required by applicable law
  • Allow a reasonable period for you to review the changes

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of xlrate.ai after any changes indicates your acceptance of the updated Privacy Policy.

15. CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: reachus@xlrate.ai
Subject Line: Privacy Policy Inquiry

Data Protection Officer: reachus@xlrate.ai

Mailing Address:
xlrate.ai Privacy Team
Monimo LLP, FLOOR-2,PLOT-264/265, VASWANI CHAMBERS, Dr Annie Besant Road,Cabin HD-524, Worli

We will respond to your inquiry within a reasonable timeframe, typically within 30 days of receipt.

16. ADDITIONAL JURISDICTIONAL PROVISIONS

16.1 Brazil (LGPD)

For Brazilian residents, we process personal data in compliance with the Lei Geral de Proteção de Dados (LGPD). You have rights similar to those described in the GDPR section, including the right to confirmation of processing, access, correction, anonymization, deletion, portability, and the right to withdraw consent.

16.2 Canada (PIPEDA)

For Canadian residents, we handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

16.3 Australia (Privacy Act)

For Australian residents, we comply with the Privacy Act 1988 and the Australian Privacy Principles (APPs).


This Privacy Policy is effective as of the date listed above and governs your use of xlrate.ai from that date forward.