This Privacy Policy explains how Xendio Studio collects, uses, discloses, and protects personal information when you visit our website, request launch or early-access notifications, use Xendio Studio, or interact with related services.
Xendio Studio is operated by Castro Group LLC (“Xendio Studio,” “we,” “us,” or “our”).
1. Information We Collect
The information we collect depends on how you interact with Xendio Studio.
We may collect the following categories of information:
- Contact information, such as an email address you provide to receive launch, early-access, support, or other requested communications.
- Account information, such as identifiers, authentication information, and information associated with your Xendio Studio account.
- Website and project information, such as domains, project information, website files, import information, and other materials you choose to provide or connect to Xendio Studio.
- Provider connection information, including information necessary to establish and maintain connections with supported third-party services that you authorize.
- Transaction information, such as purchase status, transaction identifiers, payment status, and related records needed to provide and support paid services.
- Support communications, including information you provide when contacting us for assistance.
- Technical and usage information, such as browser type, device information, IP address, timestamps, security events, diagnostic information, and information about how our website or services are accessed.
2. Launch and Early-Access Notifications
If you submit your email address through the Xendio Studio website to be notified when Xendio Studio is ready, we use that email address to send launch, availability, and early-access communications related to Xendio Studio.
When you join the notification list, we may also record information associated with the signup, including the date and time of the request, IP address, browser or device information, signup source, security or anti-abuse verification information, and the version of the consent notice presented when you subscribed.
We use this information to maintain and secure the notification list, prevent fraudulent or automated signups, document the signup request, investigate abuse, and respond to questions or complaints concerning a subscription.
We may require you to confirm your email address before activating the subscription. If confirmation is required, we may record the date and time the email address was confirmed and information reasonably necessary to document that confirmation.
Submitting an email address for these notifications is voluntary. You may unsubscribe at any time by using the unsubscribe method included in our communications or another method we make available.
We may retain a limited suppression record after you unsubscribe so we can honor your request and avoid adding the address back to the notification list unintentionally.
We do not require payment information to join the launch or early-access notification list.
3. How We Use Information
We may use personal information to:
- provide, operate, maintain, and secure Xendio Studio;
- provide requested launch and early-access notifications;
- document and maintain records of notification-list consent;
- process email confirmations, unsubscribe requests, and suppression records;
- authenticate users and maintain account security;
- connect services and providers that you authorize;
- create, import, maintain, and recover website projects;
- process and reconcile authorized transactions;
- respond to questions and provide customer support;
- detect, investigate, and prevent fraud, abuse, and security incidents;
- diagnose technical problems and improve reliability;
- maintain business, transaction, security, and compliance records;
- enforce our agreements and protect our legal rights; and
- comply with applicable legal, tax, accounting, and regulatory obligations.
4. Payment Information
Payments for Xendio Studio services may be processed by third-party payment processors such as Stripe.
Payment-card details may be collected directly by the payment processor rather than by Xendio Studio.
We may receive transaction information such as payment status, transaction identifiers, amounts, and other information necessary to provide, reconcile, support, and account for the transaction.
Payment processors process information according to their own privacy policies and legal obligations.
5. How We Disclose Information
We may disclose information when reasonably necessary to operate Xendio Studio, including to:
- service providers that provide hosting, infrastructure, communications, security, payment processing, authentication, analytics, or support services;
- third-party services or providers that you choose to connect to Xendio Studio;
- professional advisers such as attorneys, accountants, auditors, or insurers where reasonably necessary;
- government authorities or other parties when disclosure is required by law or valid legal process;
- parties involved in detecting or preventing fraud, abuse, security threats, or unlawful activity; and
- parties involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to applicable law.
6. Sale and Sharing of Personal Information
Xendio Studio does not currently sell personal information for money.
We also do not currently use personal information for cross-context behavioral advertising in a manner that we characterize as a sale or sharing under California privacy law.
If our practices materially change, we will update this Privacy Policy and provide any notices or choices required by applicable law.
7. Cookies and Similar Technologies
Our website and service providers may use cookies, local storage, logs, or similar technologies when reasonably necessary for security, fraud prevention, preferences, diagnostics, performance, and operation of the website or services.
Security and anti-abuse services used with forms or account features may also process technical information necessary to determine whether a request appears legitimate or automated.
If we introduce advertising or other technologies that require additional consent or opt-out choices, we will provide those choices as required by applicable law.
8. Data Retention
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy.
Retention periods may depend on the type of information, the service involved, security requirements, transaction and accounting requirements, dispute-resolution needs, and applicable legal obligations.
For launch and early-access notifications, we may retain subscription and consent records for as long as the subscription remains active and for a reasonable period afterward when necessary to document the request, honor an unsubscribe instruction, prevent abuse, resolve a complaint, or establish compliance with applicable requirements.
A limited suppression record may be retained after an unsubscribe request when reasonably necessary to ensure that the address remains unsubscribed.
Information may be retained longer where required by law or where reasonably necessary to establish, exercise, or defend legal claims.
9. Security
We use administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.
These safeguards may include access controls, protected communications, server-side security boundaries, monitoring, validation, rate limiting, anti-abuse protections, and other measures appropriate to the nature of the information and service.
No system, transmission method, or storage technology can guarantee absolute security.
10. Your Privacy Choices
Depending on your location and applicable law, you may have rights concerning your personal information.
These rights may include the ability to request:
- access to personal information we maintain about you;
- correction of inaccurate personal information;
- deletion of certain personal information;
- information about how personal information is collected, used, or disclosed;
- a portable copy of certain information where applicable; or
- other rights provided by applicable privacy law.
We may need to verify your identity before completing a request. Certain information may be exempt from a request when retention or processing is permitted or required by law.
11. California Privacy Rights
California residents may have additional privacy rights under applicable California law.
Depending on the law applicable to Xendio Studio and the information involved, these rights may include the right to know or access personal information, request correction, request deletion, receive information about categories of personal information and disclosures, and exercise rights concerning the sale or sharing of personal information.
We will not discriminate against you for exercising a privacy right protected by applicable law.
12. Global Privacy Control and Do Not Track
Some browsers and devices provide privacy preference signals, including Global Privacy Control (“GPC”) or “Do Not Track” settings.
Where applicable law requires us to recognize a legally valid opt-out preference signal for a covered data practice, we will process that signal as required by law.
Because there is no universally adopted standard governing all Do Not Track signals, our services may not respond uniformly to traditional Do Not Track settings.
13. Third-Party Services
Xendio Studio may contain links to or connect with third-party websites, platforms, hosting providers, payment processors, or other services.
Those third parties may collect and process information according to their own privacy policies.
Xendio Studio does not control the independent privacy practices of third parties.
14. Children's Privacy
Xendio Studio is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the service.
If we learn that personal information from a child under 13 was collected in violation of applicable law, we will take reasonable steps to delete it.
15. International Users
If you access Xendio Studio from outside the United States, your information may be processed in the United States or other countries where our service providers operate.
Data-protection laws in those locations may differ from those in your country. Where required, we will use appropriate safeguards for international transfers of personal information.
16. Changes to This Privacy Policy
We may update this Privacy Policy as Xendio Studio, our practices, or applicable legal requirements change.
When we update the policy, we will revise the effective date shown at the top of this page.
We may provide additional notice when a material change requires it.
17. Contact and Privacy Requests
Questions about this Privacy Policy or requests concerning personal information may be submitted through the official privacy or support contact method published on xendiostudio.com.