Privacy Policy
How Xahelo collects, uses, stores, and shares information across repair, manufacturing, support, and commerce workflows.
This policy is wired into Xahelo's consent system and reflects the current software workflow, but it has not been represented as attorney-approved legal advice. Final live-sales terms should be reviewed by qualified counsel.
1. Information Xahelo collects
Xahelo may collect account and contact information; repair photos; CAD and technical files; product identifiers; measurements; manufacturing requirements; support communications; quote, order, payment-status, shipping, and quality records; and device, security, and operational logs needed to run the service.
Payment-card details are handled by the configured payment provider and are not intended to be stored directly in Xahelo application tables. Xahelo may store provider identifiers, payment status, amounts, and reconciliation evidence.
2. How information is used
Xahelo uses information to authenticate users, identify parts, analyze submitted evidence, engineer and manufacture parts, generate quotes, process payments, perform quality review, provide support, prevent abuse, fulfill orders, maintain audit records, improve reliability, and comply with legal obligations.
3. Service providers
Xahelo may use infrastructure, authentication, database, hosting, AI, payment, communications, shipping, monitoring, and security providers to operate the service. Providers receive only the information reasonably needed for their role and remain subject to their own terms and privacy obligations.
4. Sale, advertising, and disclosure
Xahelo does not currently operate a program to sell personal information for monetary consideration. Xahelo does not intentionally disclose private repair/CAD evidence for unrelated advertising purposes. If these practices materially change, this policy will be updated before the new use is introduced.
Xahelo may disclose information when reasonably necessary to provide the requested service, protect users or the platform, investigate abuse, respond to lawful process, or complete a business transaction subject to appropriate safeguards.
5. Retention and security
Xahelo retains records for as long as reasonably needed for active work, support, quality traceability, security, legal obligations, dispute handling, and legitimate manufacturing-history needs. Different records may have different retention periods.
Xahelo uses technical and organizational safeguards, but no online service can guarantee absolute security. Sensitive operational data is separated from public browsing surfaces and access is limited by authentication and server-side authorization controls.
6. Your choices and privacy requests
You may request access, correction, or deletion of account information where applicable and subject to records Xahelo must retain for legal, fraud-prevention, transaction, quality, or safety reasons. Xahelo will provide additional jurisdiction-specific rights if and when applicable law requires them.
California's online privacy rules require clear disclosure of privacy practices for online services that collect personal information from California consumers. Xahelo will update this policy and its request process as its size, data practices, and statutory obligations evolve.
7. Children and changes
Xahelo is not directed to children under 13. Policy updates will be posted with a new version and effective date. Material changes that affect a required customer consent will be presented again before the relevant action.