Privacy Policy
Your trust is our most valuable asset. Learn how we handle and protect your personal information, technical assets, and digital property.
1. Introduction
At XiaLabs, we are committed to safeguarding the privacy and digital integrity of our website visitors, clients, and partners. This Privacy Policy details how we collect, process, utilize, and protect your information when you browse our services, register for an account, customize scope plans, configure interactive pricing calculators, or request consultations.
By accessing or using our websites, software portals, and digital services, you consent to the data practices described in this statement. We operate with full transparency, enterprise-grade data protection, and a strict commitment to never monetize or trade client assets.
2. Data We Collect
We collect personal and business information strictly necessary to fulfill our engineering obligations and provide modern digital services:
- Account Credentials: Full name, corporate email address, and secure authentication tokens managed via Supabase Authentication with salted password hashing and JWT sessions.
- Billing & Organization Details: Company legal name, physical billing address, GSTIN / tax identifiers, and phone number supplied during service checkout or scope approval.
- Custom Selections & Scope Data: Selections of customized deliverables, project add-ons, sprint milestones, and pricing calculation estimates configured within our platform.
- Interaction & Communication Records: Inquiries sent via the contact form, support requests, consultation notes, and technical feedback provided to our engineering leads.
3. How We Use Data
Your data enables us to provide a seamless, high-performance experience. Specifically, we use collected information to:
- Initialize, architect, and maintain your customized project scope configurations and digital service packages.
- Store verified project order history, milestone agreements, and invoice records securely within our database.
- Generate and send automated transactional emails, scope confirmations, and sprint delivery updates via certified cloud mailing infrastructure.
- Respond to client inquiries, provide personalized technical consulting, and continuously optimize application performance and core vitals.
4. Data Security
We employ rigorous physical, administrative, and technological security controls to guard your personal credentials and project data:
All HTTP traffic is enforced over TLS 1.3 encryption. Internal database storage is secured with AES-256 encryption at rest.
PostgreSQL databases are guarded by strict Supabase RLS policies ensuring clients only access their authorized records.
User sessions use cryptographically verified, time-bounded JSON Web Tokens with protected auth refresh flows.
Project codebases and staging servers are restricted strictly to assigned engineers under non-disclosure obligations.
While we maintain rigorous security protocols, no method of transmission over the Internet is completely invulnerable. We encourage users to maintain robust, unique passwords and promptly notify our team of any suspected unauthorized access.
6. Contact Information
If you have any questions or concerns regarding our privacy practices, wish to execute a custom Non-Disclosure Agreement (NDA), or request data correction or erasure, please reach out to our privacy compliance team:
XiaLabs Privacy & Data Governance
Official Data Protection & Compliance OfficeLet's make something
people remember.
Tell us what you're building. We'll help you figure out the best way forward.
Start a conversation