Privacy Policy

1. Information XIO collects

• Contact and business information you submit, such as name, email, phone, company, website, role, industry, budget, timeline, and service requirements.
• Task-plan selections, assessment responses, workflow descriptions, and other context you choose to provide.
• Account and authentication information if you use a protected client or operator surface.
• Website activity, device information, referral data, campaign attribution, and conversion events collected through configured analytics and advertising measurement tools.
• Payment references and transaction status from Stripe. XIO does not receive or store full payment-card details.
• Project information and approved working materials provided during a paid engagement.

2. How XIO uses information

• Respond to inquiries, assess fit, prepare recommendations, and deliver agreed services.
• Operate, secure, troubleshoot, and improve the website, forms, client surfaces, and workflows.
• Process payments, maintain project records, and communicate about meetings or engagements.
• Measure marketing and conversion activity and understand which public content is useful.
• Meet legal, security, fraud-prevention, and recordkeeping obligations.

3. AI processing and project data

• Public forms do not require sensitive or regulated information, and visitors should not submit it.
• When an engagement requires AI processing, XIO will define approved data, tools, access, review responsibilities, and boundaries in the written scope.
• AI providers and connected tools may process approved content to deliver the agreed workflow. XIO does not promise that third-party AI systems are error-free or appropriate for every data type.
• Consequential outputs require qualified human review before use.

4. Service providers and disclosures

• XIO may use service providers for hosting, databases, email delivery, scheduling, payments, analytics, advertising measurement, security, and approved AI or workflow processing.
• Information is shared only as reasonably necessary to operate the website, respond to you, deliver an engagement, comply with law, or protect XIO and its users.
• XIO does not sell personal information. XIO does not publish client materials or identify clients as case studies without permission.

5. Cookies and measurement

• The website may use essential cookies for sessions and security, plus configured analytics or advertising cookies and identifiers.
• Measurement tools may receive page activity, browser information, referral data, IP address, user agent, campaign identifiers, and hashed contact data where configured and permitted.
• You can control non-essential cookies through your browser or relevant platform settings.

6. Retention and security

• XIO retains information only as long as reasonably needed for the purpose collected, an active engagement, legitimate business records, security, or legal obligations.
• XIO uses reasonable safeguards such as encrypted transport, access controls, secure headers, and restricted administrative surfaces. No transmission or storage method is completely secure.
• Project-specific retention, deletion, security, or data-location requirements must be agreed in writing when needed.

7. International processing

• Service providers may process information in Canada, the United States, or other jurisdictions. Privacy protections and lawful-access rules may differ by location.

8. Your choices and rights

• You may ask to access, correct, or delete personal information held by XIO, subject to applicable law and legitimate recordkeeping requirements.
• You may opt out of marketing communications at any time. Service and project communications may still be required for an active engagement.

9. Contact and updates

XIO may update this policy as services and legal requirements change. Questions or privacy requests can be sent to slavazeph@gmail.com.