This Privacy Policy describes how XenoDATA LLC, doing business as XenoDATA™ ("XenoDATA," "we," "us," or "our"), collects, uses, discloses, and protects your personal information when you use our website at xenodata.com, our Data Workbench platform, and any related services (collectively, the "Services").
By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Services.
Questions? Contact us at support@xenodata.com.
1. Information We Collect
Information You Provide Directly
We collect information you voluntarily provide when you:
- Create an account or register for the Data Workbench platform
- Fill out a contact form, request a consultation, or subscribe to communications
- Participate in surveys, webinars, or events
- Communicate with us via email, phone, or other channels
- Upload files or enter data into the platform
This may include your name, email address, phone number, company name, job title, billing information, and any other information you choose to provide.
Information Collected Automatically
When you access our Services, we automatically collect certain technical information, including:
- IP address, browser type, operating system, and device identifiers
- Pages visited, time spent on pages, click patterns, and referring URLs
- Log data, access times, and error reports
- Information collected through cookies, pixels, and similar technologies
Sensitive Personal Information
We do not intentionally collect sensitive personal information such as Social Security numbers, financial account numbers, health data, or biometric identifiers.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our Services, including the Data Workbench platform
- Create and manage your account, authenticate users, and enforce tenant-level data isolation
- Process transactions and send related billing or account notifications
- Respond to your inquiries, comments, and support requests
- Send marketing and promotional communications (with your consent, where required)
- Analyze usage patterns to improve the functionality, performance, and security of our Services
- Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity
- Comply with legal obligations and enforce our Terms of Service
3. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect information about your browsing activity and to improve your experience. These include:
- Essential cookies: Required for basic site functionality, authentication, and security. These cannot be disabled.
- Analytics cookies: Help us understand how visitors interact with our website so we can improve our Services.
- Marketing cookies: Used to deliver relevant advertisements and track campaign effectiveness across platforms.
Most web browsers allow you to manage cookie preferences through browser settings. Please note that disabling certain cookies may affect the functionality of our Services.
4. Third-Party Services
We use the following third-party services that may collect information about you:
-
Google Analytics & Google Tag Manager: We use Google Analytics to analyze website traffic and user behavior. Google may collect data such as your IP address, browser type, and pages visited. For more information, see Google's Privacy Policy. You can opt out using the Google Analytics Opt-Out Browser Add-on.
-
LinkedIn Insight Tag: We use LinkedIn's tracking pixel to measure ad performance and enable retargeting. LinkedIn may collect data about your visit. See LinkedIn's Privacy Policy.
-
HubSpot: We use HubSpot for customer relationship management, marketing automation, and email communications. HubSpot may place cookies and collect information about your interactions with our website and emails. See HubSpot's Privacy Policy.
-
Google reCAPTCHA: We use reCAPTCHA to protect our forms from automated abuse. This service may collect hardware and software information. See Google's Privacy Policy.
These third-party services operate under their own privacy policies. We encourage you to review their practices directly.
5. When We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service providers: With vendors who perform services on our behalf (e.g., hosting, analytics, email delivery, payment processing), subject to contractual obligations to protect your data.
- Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
- Legal compliance: When required by law, regulation, legal process, or governmental request.
- Protection of rights: To enforce our agreements, protect our rights, property, or safety, or the rights, property, or safety of our users or others.
- With your consent: In any other situation where you have given us explicit consent to share your information.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our Services. We may also retain information as necessary to:
- Comply with legal, regulatory, or contractual obligations
- Resolve disputes and enforce our agreements
- Maintain business records as required by applicable law
When your information is no longer needed for these purposes, we will securely delete or anonymize it in accordance with our data retention policies.
7. Data Security
We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Multi-tenant data isolation ensuring each customer's data is segregated
- Access controls and authentication mechanisms
- Regular security monitoring and vulnerability assessments
- Malware scanning on uploaded files
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.
8. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request that we correct inaccurate or incomplete personal information.
- Deletion: Request that we delete your personal information, subject to certain legal exceptions.
- Portability: Request a copy of your data in a structured, commonly used, and machine-readable format.
- Opt-out of marketing: Unsubscribe from marketing emails at any time using the link in our emails or by contacting us.
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at support@xenodata.com. We will respond to verified requests within the timeframes required by applicable law.
9. California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights regarding your personal information:
- Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected, the sources of collection, the business purposes, and the categories of third parties with whom we share it.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to Correct: You may request correction of inaccurate personal information.
- Right to Opt-Out of Sale or Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To submit a verifiable consumer request, please email support@xenodata.com. You may also designate an authorized agent to make a request on your behalf.
10. Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we may have collected information from a child, please contact us at support@xenodata.com.
11. International Data Transfers
XenoDATA™ is based in the United States and our Services are hosted on infrastructure located in the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your jurisdiction. By using our Services, you consent to such transfer, storage, and processing.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where required by law, provide additional notice (such as by email or through a prominent notice on our website). We encourage you to review this Privacy Policy periodically.
