1. California Online Privacy Protection Act
Xahelo operates a commercial website that may collect personally identifiable information from California consumers. Xahelo therefore publishes a conspicuous Privacy Policy describing categories of information collected, categories of parties with whom information may be shared, how policy changes are communicated, the effective date, and online-tracking practices.
The Privacy Policy and this disclosure should be read together. If the actual product or vendor practices change, the published disclosures must be updated to remain accurate.
2. Do Not Track and Global Privacy Control
Xahelo does not currently sell personal information or share it for cross-context behavioral advertising and does not currently operate third-party behavioral advertising on its core service.
A legacy browser Do Not Track signal therefore does not change the core service at this time. Where applicable law requires recognition of a supported opt-out preference signal for a covered practice, Xahelo will honor a legally recognized signal such as Global Privacy Control.
3. CCPA applicability
The California Consumer Privacy Act applies only when its definition and statutory applicability requirements are met. Publishing this disclosure does not mean Xahelo represents that it presently meets the definition of a covered CCPA business.
If Xahelo becomes subject to the CCPA, Xahelo will implement the notices, point-of-collection disclosures, request methods, response timing, opt-out mechanisms, retention disclosures, service-provider terms, nondiscrimination protections, and other controls then required.
4. Sale and sharing posture
Xahelo does not currently sell personal information and does not currently share personal information for cross-context behavioral advertising.
If that posture changes, Xahelo will update its disclosures and implement any required opt-out mechanism before or when the covered practice begins.
5. Privacy requests
California residents may use the Privacy Requests page or email support@xahelo.com with the subject 'Privacy Request.' Xahelo voluntarily accepts access, correction, deletion, and related requests even when a particular statutory right is not applicable.
Xahelo may use proportionate identity verification and may retain information when a lawful retention exception applies.
6. 2026 privacy regulations and future growth
California privacy regulations effective in 2026 add or update obligations for certain covered businesses, including requirements involving risk assessments, cybersecurity audits, and automated decisionmaking technology. Those obligations have separate applicability criteria and compliance dates.
Xahelo will reassess legal coverage as revenue, processing volume, advertising, automated decisionmaking, and other activities change. This disclosure is not a legal conclusion that every California privacy requirement applies to Xahelo today.