Privacy Policy — Xparo

1. Introduction

Xparo (“we,” “our,” “us”) is a multilingual digital platform connecting customers and service providers in multiple sectors including Tourism, Certified Translation, Sports & Nutrition Education, Academic Tutoring, Immigration Services, Psychology & Mental Health, Yoga, Home Maintenance & Cleaning, and Legal Services.

XPARO GLOBAL L.L.C is currently registered under the laws of Georgia, with its operational headquarters in Tbilisi, Georgia. We intend to register our intellectual property in the Republic of Estonia in the future to align with European Union regulations on intellectual property and consumer protection.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our mobile application and related services.

2. Data We Collect

We may collect and process the following types of personal data:

2.1. Personal Information (Mandatory):

• Full name, email, phone number, gender, date of birth, country, city, region of residence.

2.2. Personal Information (Optional):

• Interests, profile picture.

2.3. Vendor KYC Data (Mandatory for Vendors):

• ID/passport copies, proof of address, relevant certifications.

2.4. Usage Data:

• Device type, OS version, IP address, location (approximate or precise if allowed), app interaction logs.

2.5. Transaction Data:

• Bookings, payment details (processed via PCI-DSS compliant providers such as Stripe), invoices.
  Xparo does not store full credit card numbers.

2.6. Communication Data:

• Messages between customers and vendors via in-app chat.

2.7. Optional Data:

• Uploaded documents/photos for service delivery.

3. How We Use Your Data

We use your data to:

• Provide and improve the Xparo platform and services.
• Process bookings, payments, and refunds.
• Verify vendor identities (KYC).
• Communicate service updates, promotions, and support responses.
• Comply with legal obligations.
• Ensure platform security and prevent fraud.

4. Data Sharing

We do not sell personal data. We may share it only with:

• Vendors you book services from.
• Payment processors, KYC providers, hosting, and analytics providers.
• Third-party SDKs and APIs (e.g., Google Maps, Firebase) used for functionality.
• Authorities when required by law or court order (within applicable jurisdictions).

5. Children’s Privacy

• Xparo is available to users aged 13 and above.
• Children under 13 may use the platform only with verified parental consent or via an account created/managed by a parent or guardian.
• Responsibility for supervising underage users lies with the parent or guardian.

6. Data Retention

We retain personal data as long as your account is active or as needed to comply with legal obligations.
You may request deletion via support@xparodise.com.
Some data may be retained as required by applicable law even after deletion requests.

7. Security

We use encryption (TLS in transit, secure storage at rest), access controls, and regular security audits to protect data.

8. Your Rights (GDPR-Compliant)

You have the right to:

• Access and correct your personal data.
• Request deletion of your account/data (subject to legal requirements).
• Withdraw marketing consent at any time.
• Request data portability.
• Restrict or object to certain types of processing.
• File a complaint with the relevant data protection authority in Georgia, Estonia (upon IP registration), or your local supervisory authority.

9. Contact Us

📧 privacy@xparodise.com