Privacy Policy

This Privacy Policy explains how Xeliport (“Xeliport,” “we,” “us”) collects, uses, and protects information you provide or that is collected automatically when you visit www.xeliport.comor interact with our services (the “Site”). It also describes your rights and how to exercise them.

1. Information we collect

1.1 Information you give us

When you apply for early access, request to become a partner, or otherwise contact us, we collect the information you provide, which may include:

• Brand or company name
• Your name (when provided)
• Email address
• Phone number
• Website, Instagram, or LinkedIn URL
• Business category and approximate monthly order volume
• Target corridor (UAE, UK, Singapore, US)
• Any free-text message you include

1.2 Information collected automatically

When you use the Site, we (and our service providers) may collect technical information automatically, including:

• IP address and approximate location (country / region)
• Browser type, device type, operating system
• Pages visited, referring URLs, time on site
• Cookies and similar identifiers (see Cookie Notice)

Analytics and marketing tracking only operate where you have granted consent via our cookie banner. Essential operations (delivering the page, handling forms, recording your consent choice) work regardless.

2. How we use your information

We use the information for the following purposes:

• Lead processing. Reviewing your early-access or partner application and contacting you about it.
• Service delivery. Communicating with you about Xeliport's offering.
• Analytics. Understanding how the Site is used so we can improve it (only with your consent).
• Advertising measurement. Measuring the performance of our paid campaigns (Meta) and showing relevant ads (only with your consent).
• Security and legal. Protecting the Site against abuse, complying with applicable law, and asserting or defending legal claims.

3. Legal bases (UK / EU visitors)

If you are in the UK or EEA, we rely on the following legal bases under UK GDPR / EU GDPR:

• Consent — for analytics and marketing cookies / pixels, and for processing your form submission to the extent required.
• Legitimate interests — for responding to your enquiry, maintaining site security, and basic operations of the Site. You can object to processing based on legitimate interests at any time.
• Legal obligation — where we must retain or disclose information to comply with law.

4. Who we share your information with

We do not sell your personal information. We share it with the following categories of recipients only as necessary to operate the Site and our services:

We may also disclose information when required by law, court order, or to protect the rights, safety, or property of Xeliport, our users, or others.

5. International transfers

Xeliport is based in India. Some of our sub-processors are located in the United States or other jurisdictions. Where personal data of UK / EEA residents is transferred outside the UK / EEA, we rely on appropriate safeguards including the relevant data-transfer mechanisms (such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or recognised adequacy decisions).

6. How long we keep your information

• Form submissions — up to 24 months from receipt, then deleted, unless we have an active relationship with you.
• Analytics (GA4) — up to 14 months (GA4 default).
• Meta Pixel / CAPI events — retained by Meta in accordance with their policies (currently ~60 days for raw events; aggregated insights longer).
• Consent choices — up to 12 months, after which we re-prompt.

You can request earlier deletion at any time (see Section 8).

7. Cookies and tracking

We use cookies and similar technologies to operate the Site, measure analytics, and improve marketing campaigns. Non-essential cookies (analytics, marketing) are only set after you grant consent via our cookie banner. See our Cookie Notice for the full list and durations.

8. Your rights

Depending on your location, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — request that we erase your data, subject to legal retention requirements.
• Restriction or objection — limit how we process your data, or object to certain processing.
• Withdraw consent — at any time, where processing is based on consent. Withdrawal does not affect prior lawful processing.
• Portability — receive your data in a structured, machine-readable format (UK / EEA only).
• Complain — to a supervisory authority. In the UK, that is the Information Commissioner's Office (ICO). In India, the Data Protection Board of India, once operational.

To exercise any right, email privacy@xeliport.com. We will respond within 30 days (UK GDPR) or such other period as required by applicable law.

9. Children

The Site is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Security

We use commercially reasonable technical and organisational measures to protect your information, including TLS / HTTPS for all traffic, scoped access tokens for third-party integrations, and limiting access to personal data to people who need it. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be highlighted on the Site.

12. Contact us