Your information, handled with care.

01Who we are

XO Digital Systems (Pty) Ltd (registration number 2014/253423/07), trading as XO Digital Systems, makes XO WP and is based in Cape Town, South Africa. We are the responsible party for the personal information this policy describes.

This policy covers the XO WP website and our own customers: the people who try, buy and use XO WP. Your customers' information inside your store is covered by the data processing section of the XO WP terms of service, where we act for you.

Our Information Officer is Ricardo. You can reach us about anything in this policy at [email protected].

02What we collect

When you visit this website. Our hosting provider records standard technical information, such as your IP address, browser and the pages requested, to keep the site running and secure.

When you email us. Whatever you choose to share with us.

When you start a trial or subscribe. Paddle.com, our merchant of record, takes your payment details and billing address. Paddle tells us your name, email address, company, country, plan and payment status. We never see your full card details.

When you use XO WP Pro or Enterprise. Your licence key, your store's web address, the names and email addresses of the people you add to your team, and the records needed to run, secure and support the service.

03Why we use it

• To reply to you and provide support.
• To issue and check your licence key and run the service you subscribe to.
• To tell you about your subscription, important changes and security.
• To keep our website and service secure.
• To meet our legal and tax obligations.

We do not sell your personal information, and we do not add you to a mailing list unless you ask us to.

04Our reasons for processing

We process your information to take the steps you ask for before an agreement, to carry out our agreement with you, to meet legal obligations, with your consent where we ask for it, and where we have a legitimate interest such as keeping the service secure. You can withdraw your consent at any time; this does not affect anything we did before you withdrew it.

05Who we share it with

We only share personal information with service providers who help us run XO WP, and only what they need:

• Paddle.com, our merchant of record, for payments, tax and receipts, under its own privacy policy.
• Supabase, which hosts XO WP's database, files and server functions.
• Resend, for email we send about your account and your store.
• Anthropic, for answers from XO Intelligence, using what you ask it.
• Our website hosting provider.

They must keep your information confidential and secure. We may also share information with professional advisers, or where the law requires it.

06Information outside South Africa

Some of these providers store or process information outside South Africa. We only use providers that are bound by laws, contracts or rules giving your information a level of protection similar to POPIA.

07How long we keep it

We keep your account information while you are a customer. If your plan ends, your data stays so that you can come back, and you can ask us to delete it at any time; we will do so within 30 days. We keep financial records for as long as the law obliges us to, generally five years.

08How we protect it

We use reasonable technical and organisational measures, including encrypted connections, each store's data kept separate from every other store's, two-step verification your team can turn on, and limits on who can see what. If we become aware of a breach that affects your personal information, we will tell you and the Information Regulator as POPIA requires.

09Your rights

You can ask us whether we hold your personal information and for a copy of it, ask us to correct or delete it, object to how we use it, and withdraw your consent. Email [email protected] and we will respond within a reasonable time. We may need to confirm who you are first.

If you are unhappy with how we handle your information, please tell us so we can put it right. You may also complain to the Information Regulator of South Africa at inforegulator.org.za.

10Cookies

This website runs on WordPress with XO WP. XO WP sets two first-party cookies, xo_first_touch and xo_last_touch, which remember the campaign link that brought you here (for example a UTM tag) for 90 days. They stay on this site and are not shared with advertising networks.

WordPress and WooCommerce set cookies needed for signing in and for checkout. We do not use advertising cookies.

11Children

XO WP is made for businesses. We do not knowingly collect personal information from children.

12Changes to this policy

We will update this policy when the way we handle personal information changes. The date at the top shows when it last changed.

13Contact us

Business

XO Digital Systems (Pty) Ltd, trading as XO Digital Systems

Registration number

2014/253423/07

Address

We work remotely and do not yet have a public office.

Based in

Cape Town, South Africa

Information Officer

Ricardo

Email

[email protected]