Mobile Privacy Policy – XTIX Documents

Effective Date: 2025-03-19

XTIX LIMITED ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share information about you when you visit our website, xtix.ai, and use our services.

1. Data Controller

The data controller responsible for your personal data is:

XTIX LIMITED
12 Agias Zonis, Office 404, Limassol 3027, Cyprus
Email: support@xtix.ai

2. Information We Collect

We may collect and process the following types of personal data:

Personal Identification Information: Name, email address, phone number, etc.
Payment Information: Payment method details (such as credit card information) for the processing of transactions.
Usage Data: Information regarding how you use our website and services, including your IP address, browser type, device, and pages visited.
Marketing Data: Preferences regarding receiving communications from us.

3. How We Use Your Information

We use the information we collect in the following ways:

To provide and improve our services.
To process transactions and manage your account.
To communicate with you, including sending you updates, newsletters, or promotional offers (where applicable).
To analyze usage patterns and improve our website and services.
To comply with legal obligations and enforce our terms of service.

4. Legal Basis for Processing Personal Data

We process your personal data under the following legal grounds:

Performance of a contract: To fulfill our contractual obligations to you.
Legitimate interest: To improve our services, ensure security, and analyze trends.
Consent: Where you have given us explicit consent to process your personal data for specific purposes.
Legal obligations: To comply with applicable laws and regulations, including those under the European Union's General Data Protection Regulation (GDPR), Russian Data Protection Law, and Indonesian data protection laws.

5. Sharing Your Information

We may share your personal data with third parties only in the following circumstances:

Service Providers: Third-party companies who assist us in operating our business, such as payment processors and hosting providers.
Legal Compliance: If required by law, to comply with legal obligations or in response to lawful requests from public authorities (including requests from the European Union, Russian, or Indonesian authorities).
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets.

6. Data Security

We take reasonable precautions to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law, including under the GDPR, Russian laws, and Indonesian regulations.

8. Your Rights

Depending on your jurisdiction, including under the GDPR, Russian, and Indonesian laws, you may have the following rights regarding your personal data:

Access: You have the right to request copies of your personal data.
Rectification: You have the right to request corrections to any inaccurate or incomplete data.
Erasure: You may request the deletion of your personal data, subject to certain conditions.
Objection to Processing: You have the right to object to the processing of your data under certain circumstances.
Data Portability: You may request that we transfer your data to another organization in a structured, commonly used, and machine-readable format.
Withdraw Consent: If we rely on your consent to process your data, you have the right to withdraw it at any time.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain situations.

To exercise any of these rights, please contact us at support@xtix.ai.

9. International Transfers

Your personal data may be transferred to, and processed in, countries other than your country of residence, including Cyprus, where our servers are located. We ensure that any such transfers comply with applicable data protection laws, including the GDPR, Russian data protection law, and Indonesian regulations, by implementing adequate safeguards such as Standard Contractual Clauses or Privacy Shield (for EU-US transfers).

10. Children's Privacy

Our services are not intended for children under the age of 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal data from children. If we discover that we have inadvertently collected personal data from a child, we will take steps to delete such information.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the updated Privacy Policy on our website.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: