Privacy Policy

Our Beginning

We – referred to as “We” or “Our” – are committed to protecting your personal data and your privacy.

This Privacy Policy is designed to explain how we collect, store, process, and use the information you provide in connection with the website Xonata-AI (hereinafter the “Website”).

We are committed to adhering to the following principles:

Transparency in the collection and processing of your personal data:

We ensure that you are always well informed so that you can make conscious decisions about how your data is used on the Website or when interacting with third-party platforms. We use various methods to provide you with accurate and timely information regarding the processing of your data.

If we are required to provide you with specific information, we ensure it is delivered at the appropriate time and place.

We are also available to answer questions or provide clarification, in accordance with applicable law. You may contact us by email at: [email protected]

Processing personal data only for the purposes stated in this Policy:

We may process your information to make the Website available, connect you with third-party trading platforms (“Services”), enhance the user experience, develop the platform, protect our rights, perform administrative processes, and comply with legal requirements.

We also process information to better understand your needs and preferences.

Resources to safeguard your rights:

We allocate significant resources to ensure that you can exercise your rights as a data subject. You may at any time request access to, correction of, deletion of, or restriction of your data, or request data portability. We will respond in accordance with applicable legislation.

Protection of your personal data:

Although we cannot guarantee absolute security, we implement modern security measures and safeguards to protect your information and will continue to improve these protections.

Our Complete Privacy Policy

1. Scope

This Policy describes the types of data we collect, how we process it, share it with third parties, and the security measures we apply.

“Personal Data” means any information that relates to an identified or identifiable individual. “Processing” means any operation performed on data, such as collection, storage, use, sharing, modification, or deletion.

Our services are intended for a general audience and are not directed at individuals under 18 years of age. We do not knowingly collect data from minors. If we become aware that such information has been recorded, we will delete it promptly.

2. When do we collect information?

We collect data when you use our services, visit the Website, or interact with our channels. Some information is provided directly by you, while other data is collected automatically through analysis of your activity or via third-party partners.

3. No obligation to provide data – but consequences may apply

You are not required to provide us with information. However, without certain data, we may not be able to offer you all our services or provide full access to the Website.

4. What types of information do we collect?

This may include activity logs, IP addresses, timestamps, language preferences, browser type, device information, and error logs. Some of this data may not directly identify you and therefore may not be considered Personal Data.

Information you provide directly: name, phone number, and email address when you contact us or use the platform.

5. Purpose of Processing and Legal Basis

Xonata-AI processes information only when we have a lawful basis to do so, such as to provide services, improve user experience, protect your data, or comply with legal obligations.

• You have given consent to the processing of your personal data for specific purposes. This applies when you knowingly share information via the Website so that we may forward it to a third-party trading platform.
• Processing is necessary for the legitimate interests pursued by Xonata-AI or a third party. For example, this may include improving our services or handling legal claims.
• Processing is necessary to comply with a legal obligation to which Xonata-AI is subject.

If you would like further clarification on how the processing of your personal data serves the legitimate interests of Xonata-AI or a third party, you may contact us by email at any time.

Below is an overview of why we may process your information, together with the applicable legal bases:

6. Transfer of Personal Data to Third Parties

Xonata-AI may share your information with third-party service providers that assist with storage, hosting, IP data, user experience analytics, research, and other technical or diagnostic services.

If you request it, we may also transfer certain information to third-party trading platforms. In such cases, those parties will process your data in accordance with their own privacy policies. We may share information with multiple trading platforms where relevant.

Xonata-AI may also share information with affiliated companies and business partners that help improve the quality of our services.

We may disclose information to public authorities if necessary to protect our interests, rights, or property, or those of third parties, including in connection with legal proceedings.

Information may also be shared with potential buyers, investors, or lenders in connection with a merger, acquisition, reorganization, or insolvency process.

7. Cookies and Third-Party Services

We use certain third-party services, such as analytics and advertising providers. These services may use cookies or similar technologies governed by their own policies.

A cookie is a small text file stored on your device when you visit a website. It may collect information about usage patterns, preferences, and technical data, and is used to improve your experience, remember settings, and deliver more relevant content.

We may use both session cookies (which are deleted when you close your browser) and persistent cookies (which remain on your device until they expire or are manually deleted).

Types of Cookies:

Blocking and Deleting Cookies

You can modify your browser settings to block or delete cookies. Below are links to instructions for commonly used browsers:

• Firefox
• Microsoft Edge
• Google Chrome
• Safari

Please note that certain features of the Website may stop functioning properly if you block cookies.

ONLINE TRACKING NOTICE

This service currently does not respond to “Do Not Track” signals.

8. Retention of Personal Data

Xonata-AI will retain your information for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable laws, regulations, or authorities.

If you have provided consent, we may share information with third-party trading platforms for up to 12 months, with the possibility of extension based on renewed consent.

We periodically review stored information to ensure it is not retained longer than necessary.

9. Transfer of Personal Data to Third Countries or International Organizations

Your personal data may be transferred to a third country (outside the EEA) or to international organizations. In such cases, Xonata-AI will implement appropriate safeguards to ensure that your data is protected and that you retain your rights and effective legal remedies.

If you are located in the EEA (European Economic Area), such safeguards will apply where one of the following conditions is met:

• The transfer is made to a third country or international organization that the European Commission has recognized as providing an adequate level of data protection in accordance with Article 45(3) of the GDPR.
• The transfer is carried out on the basis of a legally binding and enforceable agreement between public authorities or bodies pursuant to Article 46(2)(a) of the GDPR.
• The transfer is based on Standard Contractual Clauses adopted by the European Commission pursuant to Article 46(2)(c) of the GDPR. These clauses are available on the European Commission’s website.

If you would like more information about the safeguards we apply when transferring personal data, you may contact us by email at: [email protected]

10. Protection of Personal Data

We implement technical and organizational security measures to protect personal data against unauthorized access, alteration, loss, or destruction. These measures are tailored to the risks associated with the processing activities.

We cannot guarantee absolute security for data transmitted over the internet. Xonata-AI disclaims liability for indirect or incidental damages arising from data loss or unauthorized access beyond our reasonable control.

In certain cases, we may be legally required to share information with public authorities. In such situations, our ability to control the protection of that information may be limited.

11. Links to Third-Party Websites

The Website may contain links to external websites or applications operated by third parties. Xonata-AI does not control these platforms and is not responsible for their processing of personal data. We recommend that you review their privacy policies before providing any personal information.

12. Your Rights Regarding Personal Data

You have the right to request access to the information we process about you, request correction of inaccurate data, request deletion of data that is no longer necessary, and restrict or withdraw consent for certain processing activities.

Right of Access

You have the right to obtain confirmation as to whether Xonata-AI processes personal data concerning you. If we do, you have the right to access that data as well as receive information about: the purposes of processing, the categories of data involved, recipients (including in third countries), retention periods, your rights, complaint procedures, and the safeguards applied in case of data transfers.

You may receive a copy of the personal data being processed. If you request additional copies, we may charge a reasonable fee. If the request is submitted electronically, the data will generally be provided in a commonly used electronic format.

The right of access must not adversely affect the rights and freedoms of others. If this occurs, we may restrict access or refuse the request.

Right to Rectification

You may request that Xonata-AI correct inaccurate or incomplete personal data concerning you. Where necessary, you may supplement the information with a clarifying statement.

Right to Erasure (“Right to be Forgotten”)

You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was processed, when you withdraw consent, or when the processing is unlawful. We will act in accordance with applicable law.

Right to Erasure (“Right to be Forgotten”)

This right applies if: (a) the personal data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; (c) you object to processing based on our or a third party’s legitimate interests and there are no overriding legitimate grounds; (d) you object to processing for direct marketing purposes; (e) the data has been processed unlawfully; or (f) the data must be erased to comply with a legal obligation under EU or applicable law.

The right does not apply where processing is necessary (a) to comply with a legal obligation, or (b) for the establishment, exercise, or defense of legal claims.

Right to Restrict Processing

You may request that we restrict the processing of your personal data if: (a) you contest its accuracy, for a period enabling us to verify it; (b) the processing is unlawful but you prefer restriction over deletion; (c) we no longer need the data, but you require it for legal claims; (d) you have objected to processing pending verification of our legitimate grounds; (e) the data is processed for direct marketing purposes, including profiling.

Where processing is restricted, the data may only be processed with your consent, for legal claims, to protect the rights of others, or for important public interest reasons.

Right to Data Portability

You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format. You may also request that the data be transmitted directly to another controller, where technically feasible, if the processing is based on consent or a contract and carried out by automated means.

Right to Withdraw Consent

You may withdraw your consent to processing at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

Right to Object

You may object to the processing of your personal data where the processing is based on legitimate interests. This also applies to profiling. In such cases, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims.

You may also object at any time to the processing of your personal data for direct marketing purposes, including profiling related to such marketing.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority within the EEA if you believe that the processing of your personal data violates the GDPR.

We will respond to requests concerning the exercise of your rights within one month of receipt. If necessary, this period may be extended by up to two additional months depending on the complexity and number of requests. You will be informed of any such delay and the reasons for it.

Information provided in connection with the exercise of your rights is free of charge, unless the request is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee or refuse the request.

Xonata-AI may request additional information to verify your identity where we have reasonable doubts.

13. Updates to This Policy

We reserve the right to update this Privacy Policy. Changes will be published on the Website, and material updates will be communicated in a clear manner. Unless otherwise stated, changes take effect upon publication of the updated Policy.