Privacy Policy

This Privacy Policy applies to the Xloont website at xloont.com, including its public pages, contact and support interactions, account registration and sign-in, and the client portal available through the website.

The website is operated by Xloont Inovations. Separate Xloont products, applications, or services may have additional privacy notices that describe their specific data practices. If a service-specific notice applies, it should be read together with this policy.

For privacy questions or requests, contact us at xloont@gmail.com.

Depending on how you use the website, we may process account information such as your name, email address, profile image, and authentication details handled by our identity provider; business profile details that you choose to enter; and information you submit through contact, support, or portal forms.

If you upload content, such as a business logo or other material for a website feature, we process that content to provide the feature you requested. Please do not upload information you are not authorized to share.

We and our service providers may also receive technical and usage information needed to deliver, secure, and troubleshoot the website, such as browser and device information, request timestamps, and diagnostic records.

We use information to operate the website and client portal, create and protect accounts, provide requested features, respond to inquiries, provide support, maintain security, prevent misuse, troubleshoot issues, and meet legal obligations.

Where applicable, processing is based on providing a service you request, taking steps at your request, complying with legal obligations, our legitimate interests in operating and protecting the website, or your consent where consent is required. You may withdraw consent where processing relies on it; this does not affect processing that took place before withdrawal.

When you sign in with Google or another available method, the identity provider processes authentication information under its own privacy terms. Xloont receives account information needed to identify you and provide the requested account features.

The website and its providers may use essential cookies, browser storage, or similar technologies to keep sign-in sessions working, protect accounts, remember necessary settings, and support website functionality. You can manage cookies through your browser, but disabling essential technologies may affect some features.

Information you provide for a business profile, AI assistant, campaign, calendar connection, or another client-portal feature is used to provide and support that feature. When a client uses Xloont to process information about their own customers or contacts, the client is responsible for providing appropriate notices and instructions. Depending on the service and applicable law, the client may act as controller and Xloont as processor for that customer information.

If you connect a third-party account through an available Xloont feature, we access only the information and permissions needed for that feature. You can disconnect the integration through the relevant portal controls where available.

We may share information with service providers that help us host, secure, authenticate, store, communicate through, or support the website and services you request. Depending on the feature used, these providers may include cloud hosting and database providers, identity providers, security and network providers, generative AI providers, messaging platforms, and payment providers.

We share only information reasonably needed for the relevant purpose. We do not sell personal information. We may also disclose information where required by law, to protect people or services, or in connection with a corporate transaction, subject to applicable law.

Some website features may link to or later include a checkout. Where a third-party payment provider processes a transaction, that provider handles payment details under its own terms and privacy notice. Xloont may receive transaction details such as payment status and a reference needed to manage the related account or service. The information collected depends on the checkout and provider actually used.

Xloont operates in Brazil and may use service providers that process information in other countries. Where information is transferred internationally, we use measures and safeguards appropriate to the applicable legal requirements and the service involved.

We keep information for as long as needed to provide the website or requested service, maintain account and security records, resolve issues, and meet legal obligations. Retention periods vary by information type and purpose.

When an account or service is closed, we begin deleting or de-identifying associated operational information when it is no longer needed. Copies in backups may remain for up to 30 days as part of ordinary recovery processes, unless a longer period is required or permitted by law. Some records may be retained where necessary for legal compliance, security, dispute resolution, or fraud prevention.

We use reasonable technical and organizational measures designed to protect information, including access controls and protected data transmission where supported. No website, network, or storage system can be guaranteed completely secure.

Depending on your location and applicable law, you may have rights to request confirmation of processing, access, correction, deletion, anonymization, portability, information about sharing, or to object to or withdraw consent for certain processing.

To submit a request, email xloont@gmail.com from the address associated with your account where possible. We may ask for reasonable information to verify your identity and will respond as required by applicable law. You may also contact your local data protection authority.

The website and client portal are intended for people able to use them under applicable law and are not knowingly directed to young children. If you believe a child has provided personal information to us, contact xloont@gmail.com so we can review the matter.

We may update this policy as the website, services, or applicable requirements change. The latest version will be published at this URL with its updated date.