1. Overview

This Privacy Policy describes how XOLeap (“we”, “our”, “us”) collects, uses, and safeguards information when you use the Service. By accessing the platform you consent to the practices outlined below.

2. Data We Collect

Account Data: Organization details, user profiles, billing contacts.
Operational Data: Inventory, orders, shipments, and other records you import or create.
Usage & Diagnostics: Log files, device information, and performance metrics gathered to maintain the Service.
Integrations: Tokens or configuration data required to connect to third-party systems (e.g., Shopify, WooCommerce, BigCommerce, Amazon, ShipStation).

3. How We Use Data

We process data to deliver the Service, provide support, improve functionality, and meet legal or contractual obligations. We do not sell Customer Data. Aggregated or anonymized insights may be used to enhance product features without identifying any tenant.

4. Sharing & Disclosure

We share data only with subprocessors necessary to operate the platform (hosting, analytics, payment processing) and only under agreements that mirror our security and confidentiality requirements. We may disclose data if required by law or to prevent fraud or abuse.

5. Security

We implement encryption in transit and at rest, network segmentation, tenant isolation, least-privilege access controls, and continuous monitoring. See our Security Overview for more detail. Customers must maintain strong passwords and enable MFA where available.

6. Data Retention

Customer Data is retained for the life of the subscription and deleted within 60 days of termination unless otherwise requested or legally required. Audit logs may be retained longer for compliance purposes.

7. Your Rights

Depending on your jurisdiction, you may request access, correction, export, or deletion of personal data. To exercise these rights, contact us at privacy@xoleap.com. We will respond within 30 days where feasible.

8. Subprocessors

A current list of critical infrastructure and subprocessors (hosting, analytics, communications) is available upon request. We vet each vendor and require contractual commitments for security and confidentiality.

9. Changes

We may update this policy periodically. Material changes will be communicated through the application or email prior to taking effect.