Privacy Policy
This policy explains how XERA FZCO collects, uses, shares and protects personal data through this website and our services. We have written it to be read rather than to be defensible.
Last updated:
This document is a template prepared in good faith and should be reviewed by qualified legal counsel in the UAE, and in any other jurisdiction where you operate, before publication.
Who we are
XERA FZCO is a company based in the DMCC Free Zone, Dubai, United Arab Emirates, with its office at Unit UT-12-CO-119, DMCC Business Centre, Level 12, Uptown Tower, Jumeirah Lakes Towers, Dubai. For any privacy question or request, contact us at info@xeraapp.com or on +971 55 845 5890.
What we collect
We collect only what a specific purpose requires.
- Contact details you submit through an enquiry, waitlist or application form — name, email address, company, country, telephone number and the content of your message.
- Technical data generated when you visit the site, such as IP address, browser and device type, referring page and pages viewed.
- Analytics and preference data collected only where you have given consent through our cookie banner.
Why we use it
We process personal data to respond to your enquiry or application, to provide and improve our services, to keep our systems secure, to comply with legal obligations, and — where you have consented — to send you product updates. We do not use enquiry data for unrelated marketing and we do not sell personal data to anyone.
Lawful basis
Where the EU or UK GDPR applies, we rely on your consent for optional cookies and marketing communications, on the performance of a contract or steps preparatory to one for enquiries and engagements, on our legitimate interests in operating and securing the site, and on legal obligation where retention or disclosure is required by law. Where Thailand's Personal Data Protection Act applies, we rely on the equivalent bases available under that Act.
Cookies
Strictly necessary cookies keep the site functioning and your language preference remembered; these are always active. Analytics and preference cookies are set only after you accept them in the cookie banner, and you can change or withdraw that choice at any time using the cookie settings link in the footer.
Who we share with
We share personal data only with service providers that help us operate — hosting, email delivery, form processing and analytics — each under a written agreement limiting them to our instructions. We may disclose data where required by law or to protect the rights, safety or property of any person. We do not share personal data with advertising networks.
International transfers
Our team operates from the United Arab Emirates and Thailand, and our service providers may process data in other countries. Where personal data is transferred outside the jurisdiction in which it was collected, we put appropriate safeguards in place, including standard contractual clauses where required.
How long we keep it
Enquiry correspondence is retained for up to twenty-four months after our last contact unless a relationship continues. Job applications are retained for up to twelve months unless you ask us to delete them sooner. Waitlist subscriptions are kept until you unsubscribe. Technical logs are retained for up to twelve months.
How we protect it
We encrypt data in transit using TLS 1.3 and at rest using AES-256, restrict access on a least-privilege basis with audit logging, review access quarterly, and maintain a documented incident response process. No system is perfectly secure, and we will notify you and any relevant authority of a qualifying personal data breach without undue delay.
Your rights
Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of or objection to processing, and portability, and you may withdraw consent at any time. Write to info@xeraapp.com and we will respond within thirty days. If you are unsatisfied with our response, you may complain to your local data protection authority.
The XERA app
The XERA companion app is governed by its own in-product privacy notice, which covers conversation data in detail. In summary: conversations are private to your account, we do not sell any personal information, we do not train models on your conversations without your separate and revocable consent, and you can export or permanently delete your history at any time. XERA is a wellness tool and not a medical device.
Children
This website and our services are not directed at children under sixteen, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes
We will update this policy when our practices change and will revise the date at the top. Material changes will be highlighted on this page.