Privacy Policy

XJ1 customers use the platform to store and manage information relating to their business operations.

Customer Data may include business information such as:

• customer relationship records;
• projects and tasks;
• financial information;
• employee and team information;
• operational records;
• documents and files;
• internal notes;
• business performance information.

Customer Data belongs to the Customer.

XJ1 does not obtain ownership rights over Customer Data. Customers retain all rights, ownership, and control over the information they store within their Workspace.

XJ1 processes Customer Data only as necessary to:

• provide the Services;
• maintain and improve platform functionality;
• provide customer support;
• maintain security and reliability;
• prevent misuse of the Services; and
• comply with applicable legal obligations.

XJ1 does not sell Customer Data.

XJ1 does not rent Customer Data.

XJ1 does not trade Customer Data.

XJ1 does not use Customer Data to create advertising profiles, marketing audiences, or for unrelated commercial purposes.

In certain circumstances, XJ1 acts as a controller of Personal Data.

This applies where XJ1 collects information directly from individuals, including:

• website visitors;
• account administrators;
• prospective customers;
• customers contacting support;
• individuals communicating directly with XJ1.

Examples of Personal Data collected directly by XJ1 may include:

• name;
• email address;
• company information;
• job title;
• account information;
• communication records;
• subscription information.

XJ1 uses this information to operate its business, provide Services, communicate with customers, maintain security, improve the platform, and comply with legal obligations.

When creating an account, subscribing to the Services, contacting XJ1, or using the platform, you may provide information including:

• your name;
• business email address;
• company or organisation details;
• job title or role;
• account credentials;
• profile information;
• billing and subscription information;
• information contained in communications with XJ1.

We use this information to create accounts, manage access, provide support, process subscriptions, and deliver the Services.

Customers may voluntarily provide information into their XJ1 Workspace.

This information is controlled by the Customer and may include business records, customer information, employee information, operational information, financial information, and other content required to operate their business.

XJ1 processes this information only according to the Customer's instructions and the requirements necessary to provide the Services.

When you access XJ1, we may automatically collect technical information required to operate, secure, and improve the platform.

This may include:

• IP address;
• browser type;
• device information;
• operating system;
• login activity;
• authentication events;
• application performance information;
• error reports;
• security-related information.

This information helps us maintain platform reliability, identify technical issues, prevent abuse, and improve user experience.

XJ1 uses information to provide access to the platform and enable customers and users to use available features and functionality.

This includes:

• creating and managing customer accounts;
• authenticating users;
• managing workspace access;
• enabling collaboration between authorised users;
• providing platform functionality;
• maintaining service availability.

XJ1 may use information to respond to customer enquiries, provide technical support, investigate issues, and communicate important information relating to the Services.

This may include:

• responding to support requests;
• providing assistance with platform functionality;
• notifying customers about service updates;
• communicating security or operational notices;
• providing information relating to accounts or subscriptions.

XJ1 does not use Customer Data to send marketing communications to individuals unrelated to the Customer's use of the Services.

XJ1 uses information necessary to maintain the security, integrity, and reliability of the platform.

This includes activities such as:

• detecting and preventing unauthorised access;
• identifying suspicious activity;
• investigating potential security incidents;
• enforcing access controls;
• protecting customers and users from misuse of the Services.

XJ1 may analyse technical information and usage patterns to improve the performance, reliability, and functionality of the Services.

This may include:

• identifying technical issues;
• improving user experience;
• developing new features;
• understanding general platform performance.

Where analytics or service improvement activities are performed, XJ1 does not use Customer Data for advertising purposes or sell information to third parties.

XJ1 may process information where necessary to comply with applicable laws, regulations, legal processes, or lawful requests from authorities.

This may include responding to legal requests, protecting legal rights, enforcing agreements, and preventing fraud or unlawful activity.

XJ1 relies on cloud infrastructure providers to host and operate the platform.

These providers may process information necessary to:

• store data securely;
• provide computing infrastructure;
• maintain platform availability;
• support backups and reliability.

Where customers or users choose to use third-party authentication services, such as external login providers, certain account information may be processed by those providers to authenticate users.

These providers operate under their own privacy policies and terms.

XJ1 may use third-party providers to deliver communications such as:

• account verification emails;
• password reset messages;
• service notifications;
• customer communications.

These providers only process information necessary to deliver these communications.

Where paid subscriptions are available, payment transactions may be processed by third-party payment providers.

XJ1 does not store complete payment card information. Payment information is handled by the applicable payment provider according to its own security and privacy practices.

XJ1 may disclose information where reasonably necessary to:

• comply with applicable laws or regulations;
• respond to valid legal requests;
• protect the rights, property, or safety of XJ1, customers, users, or others;
• investigate fraud, security issues, or misuse of the Services.

Where legally permitted, XJ1 will seek to provide reasonable notice before disclosing Customer Data in response to legal requests.

These cookies are required for the operation of the Services, including authentication, security, and maintaining user sessions.

These cookies allow XJ1 to remember user preferences and settings.

These cookies help XJ1 understand how users interact with the platform, identify performance issues, and improve functionality.

Customer Data stored within a Customer Workspace is retained according to the Customer's account status and instructions.

Customers may request the deletion of their Workspace and associated Customer Data, subject to any applicable legal obligations or legitimate business requirements requiring retention.

Following termination or deletion of an account, XJ1 may retain limited information where necessary for:

• legal compliance;
• accounting and financial records;
• security investigations;
• fraud prevention;
• enforcement of agreements.

Where Customer Data is scheduled for deletion, XJ1 takes reasonable steps to remove or anonymise such information within applicable operational timeframes.

XJ1 may retain account-related information after account closure where necessary to maintain records relating to:

• subscriptions;
• payments;
• customer support interactions;
• legal obligations;
• security matters.

Customers must ensure that they have appropriate rights, permissions, and lawful grounds to collect, store, and process any information uploaded into their XJ1 Workspace.

This includes information relating to:

• employees;
• customers;
• suppliers;
• contractors;
• business contacts;
• other individuals.

Customers are responsible for managing access to their Workspace, including:

• creating and managing user accounts;
• assigning appropriate permissions;
• removing access when users no longer require it;
• ensuring users maintain confidentiality of account credentials.

XJ1 provides permission and access management tools; however, Customers remain responsible for configuring access appropriately for their organisation.

Customers are responsible for ensuring that information entered into XJ1 is accurate, lawful, and appropriate for their intended use.

Customers are responsible for maintaining the confidentiality of login credentials and protecting access to their accounts.

Customers should notify XJ1 promptly if they suspect unauthorised access, misuse, or a security incident involving their Workspace.

Individuals may request information about whether XJ1 processes their Personal Data and request access to applicable information.

Individuals may request correction of inaccurate or incomplete Personal Data.

Individuals may request deletion of Personal Data where applicable legal requirements allow.

Individuals may request that processing of their Personal Data is limited in certain circumstances.

Individuals may object to certain types of processing where applicable law provides this right.

Where applicable, individuals may request their Personal Data in a structured, commonly used format.

Where applicable, XJ1 processes Personal Data in accordance with principles established under applicable European privacy laws, including the General Data Protection Regulation ("GDPR") and United Kingdom GDPR.

Where XJ1 processes Personal Data subject to GDPR requirements, processing may be based on lawful grounds including:

• performance of a contract;
• legitimate interests;
• compliance with legal obligations;
• consent where required.

Individuals located in applicable jurisdictions may have additional rights relating to their Personal Data, including the right to lodge a complaint with a relevant supervisory authority.

Where applicable, XJ1 processes Personal Data in accordance with applicable UAE privacy requirements, including the UAE Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data.

Customers operating in the UAE remain responsible for ensuring that their collection and use of personal information through XJ1 complies with applicable legal requirements.