Privacy Policy

This Privacy Policy explains how Xebora collects, uses, discloses, retains, and protects personal information for users in the United States.

Xebora provides local marketing automation, Google Business Profile workflows, review reply support, social content planning, messaging approvals, analytics, and related account services.

We may collect account information such as name, email address, business name, phone number, authentication data, billing status, subscription choices, support requests, and preferences.

We may collect business and platform information from connected services, including Google Business Profile data, Facebook Page data, Instagram Business data, reviews, comments, posts, media, profile fields, insights, access tokens, and permission metadata.

We may collect usage, device, log, cookie, analytics, and security information such as IP address, browser, device identifiers, pages viewed, events, timestamps, errors, and approximate location derived from technical signals.

We use personal information to provide and secure the service, authenticate users, operate integrations, prepare content, generate reports, process payments, provide support, communicate with you, improve product quality, prevent abuse, comply with legal obligations, and manage subscriptions.

We may use business context and connected-platform data to generate drafts, review replies, recommendations, scheduling suggestions, profile suggestions, and quality diagnostics.

Xebora uses AI systems and supporting infrastructure to help draft content, classify requests, analyze business context, suggest improvements, and automate operational workflows.

You should review AI-generated content before relying on it for customer-facing, regulated, promotional, legal, medical, financial, or professional statements.

We may disclose personal information to vendors and service providers that help us host, secure, analyze, support, bill, message, and operate the service. These providers may include cloud hosting, payment processors, email providers, analytics providers, AI infrastructure providers, monitoring services, and customer support tools.

When you connect third-party platforms, we disclose and receive information as needed to provide the integration. Those platforms process information under their own terms and privacy policies.

Payments are processed by Stripe or another payment processor. We do not store full payment card numbers. Billing information, invoices, subscription status, and transaction metadata may be retained for accounting, tax, fraud prevention, and customer support purposes.

If you provide a phone number and consent to receive messages, we may send service updates, approval prompts, account notices, product updates, or support messages by SMS, WhatsApp, or another selected channel. Message and data rates may apply.

For SMS, reply STOP to opt out and HELP for help where supported. You may also update communication preferences in the product or contact support.

We may use cookies, pixels, local storage, analytics tags, and similar technologies to keep you signed in, remember preferences, measure usage, diagnose issues, improve product flows, and understand marketing performance.

Where required, we provide controls for non-essential tracking. Browser settings may also allow you to block or delete cookies.

Depending on your state, you may have rights to request access, correction, deletion, portability, restriction, or opt-out of certain processing of personal information. California residents may also have rights under the CCPA/CPRA.

We do not sell personal information for money. Some analytics or advertising technologies may be considered a "share" or targeted advertising activity under certain state laws. You can contact us to exercise applicable rights or ask about opt-out options.

We retain personal information for as long as needed to provide the service, maintain security, comply with legal obligations, resolve disputes, enforce agreements, operate backups, and support legitimate business needs.

You can request deletion of account or platform data through the product or by using the Data Deletion page. Some records may be retained where required for billing, security, compliance, or dispute purposes.

We use administrative, technical, and organizational safeguards designed to protect personal information. No system is perfectly secure, and we cannot guarantee absolute security.

Xebora is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

To ask questions or exercise privacy rights, contact support@xebora.com. We may need to verify your identity and authority before fulfilling certain requests.