Privacy Policy

Effective Date: 12 September 2025.

We at Xzibit B.V. (“Xzibit”, “we”, “us”, or “our”) respect your privacy and are committed to protecting your personal data.

This Privacy Policy describes how we collect, use, share, and safeguard your information when you interact with our mobile app, website, QR codes, NFC tags, beacons, and other services (collectively, the “Services”).

1. Introduction

This Privacy Policy explains how Xzibit processes your data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

The data controller is Xzibit B.V., Korenmolen 7 1622JA Hoorn, The Netherlands.

For questions about this policy, contact us at

[email protected]

(we aim to respond within 72 hours).

2. Data We Collect

We collect the following categories of data to provide and improve our Services:

• Account Information: Name, email address, billing/shipping addresses, payment details, login credentials, contact preferences.
• Usage Information: Audio interactions (voice queries/questions), QR or beacon scans, feature usage metrics, language or voice preferences, location data triggered by beacons (if enabled), any content or metadata you upload (e.g., text, audio files).
• Technical Data: Device type, operating system, browser, IP address, device identifiers, language settings, diagnostic and crash data for security and fraud prevention.
• Enterprise Data: For team or business accounts: team names, permissions, billing relationships.
• Beta/TestFlight Data: During public beta phases (e.g., TestFlight), we may collect additional technical data (crash logs, error reports) and voluntary feedback (which may include email, screenshots, or voice samples).

3. Legal Basis

We rely on the following legal bases to process your data:

• Contract: To deliver the services you sign up for (e.g., voice interactions, content delivery, QR/beacon kit orders).
• Consent: For optional features such as marketing emails, non-essential cookies, or location access.
• Legitimate Interest: To monitor security, prevent abuse, debug, and improve our products (including analyzing feedback during beta testing).
• Legal Obligation: To comply with tax, regulatory, and consumer protection requirements.

4. How We Use Your Data

We use your data to:

• Convert your content into audio via our AI voicebots and TTS/STT partners.
• Manage accounts, subscriptions, billing, and fulfill orders.
• Provide customer support and resolve technical issues.
• Improve and personalize the Services (e.g., select language/voice, contextual content).
• Analyze aggregated statistics and optimize our products.
• Send marketing communications, only if you have opted in.
• Debug and enhance the app during beta/testing.

5. Sharing & Third Parties

We do not sell your personal data. We only share data with trusted third parties under strict Data Processing Agreements (DPAs) for the following purposes:

• Payments: Stripe, Mollie, or similar providers (incl. fraud prevention)
• Cloud Hosting/Storage: Primarily within the EU or with equivalent protections
• AI Processing: When text or audio is processed via third-party AI (e.g., speech-to-text or text-to-speech services), this is done solely for service delivery, under GDPR-compliant contracts.
• Email/Notifications: For transactional or marketing communications (opt-in only)
• Logistics: Shipping QR kits or beacons
• Support/Analytics: Crash reporting, diagnostics, or user feedback systems

All partners are contractually bound to process data only on our instructions and in compliance with GDPR.

6. International Transfers

If data is transferred outside the European Economic Area (EEA), we use an EU-first approach and implement Standard Contractual Clauses (SCCs) or equivalent safeguards for such transfers.

7. Data Retention

• Account data: Kept as long as you maintain an account. Deleted within a reasonable period after closure.
• Usage data: Aggregated or anonymized after 12 months for analytics/statistics.
• Marketing data: Retained until you unsubscribe or withdraw consent.
• Audio files & transcripts: Retained only as long as necessary to provide the service, debug, or comply with legal obligations; generally deleted within 90 days unless otherwise required by law.
• Support/Feedback: Retained for up to 12 months for quality assurance, unless deletion is requested.

8. Your Rights

Under GDPR and similar laws, you have the right to:

• Access, correct, or delete your personal data.
• Object to or restrict certain processing activities (e.g., marketing, analytics, beta feedback).
• Request data portability (structured copy of your data).
• Withdraw consent for optional data uses at any time.
• Request deletion of feedback/support data provided during beta.
• File a complaint with your local Data Protection Authority.

9. Cookies

We use cookies and similar technologies for:

• Essential functions: login, security, navigation
• Analytics: anonymized or pseudonymized usage statistics (opt-out available)
• Marketing: only if you consent

You can control cookie preferences via browser settings or our cookie management tool.

10. Security Measures

We implement a multi-layer security framework, including:

• End-to-end encryption (TLS 1.3, AES-256) for data in transit and at rest
• Multi-factor authentication for admin accounts
• Regular security audits and penetration testing
• 24/7 monitoring for unauthorized access and breaches

We strive for robust security, but no system is 100% secure.

11. Children’s Privacy

Our services are not directed to children under 16.

We do not knowingly collect personal data from minors, and take measures to prevent underage registration.

If you believe a child has provided us with personal information, contact us immediately.

12. Updates

We may update this Privacy Policy occasionally. For significant changes, we will notify you via email or in-app messages. Please review this policy periodically for updates.13. Contact

For privacy inquiries or to exercise your rights, contact us at:

Email:

[email protected]

Address: Xzibit B.V., Korenmolen 7 1622JA Hoorn, The Netherlands

We aim to respond within 72 hours.