Privacy Policy

XYVOO Technologies Ltd ("XYVOO", "we", "us") provides software that helps hotels and online businesses manage and grow their operations. Our products include the XYVOO Hotel Management System and XYVOO Storefront, collectively referred to as the "Services".

This policy explains what personal data we collect from people who use our Services, including business owners, staff, guests, customers, and other users, and how we collect, use, and protect that information.

We collect the following categories of information:

• Account information: name, email address, and password (or, if you sign in with Google, the name, email address, and profile photo Google shares with us).
• Business and operational data: the hotel, storefront, product, order, booking, and guest/customer records you or your staff enter while using the Services.
• Payment information: payments are processed by Paystack; we do not store full card numbers ourselves.
• Usage data: log and device information such as IP address, browser type, and pages visited, collected automatically to keep the Services secure and reliable.

If you choose "Continue with Google", we receive your name, email address, and profile photo from Google to create or sign in to your XYVOO account. We do not receive your Google password, and we only request the minimum information needed for authentication. You can review or revoke XYVOO's access at any time from your Google Account permissions page.

• To create and secure your account, and authenticate you when you sign in.
• To provide the core functionality of the Services: bookings, orders, inventory, billing, and reporting.
• To send service-related communications, such as account, order, or booking notifications.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our terms of service.

We do not sell personal information. We share data only with:

• Service providers who help us run XYVOO, including Supabase (database and authentication), Google (sign-in), and Paystack (payment processing).
• Other staff within your own organisation's XYVOO account, according to the roles and permissions you assign them.
• Law enforcement or regulators, where required by law.

We retain personal data for as long as your account is active, or as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your account data at any time using the contact details below.

Depending on where you are based, you may have the right to access, correct, export, or delete your personal data, or to object to or restrict certain processing. To exercise any of these rights, contact us at support@getxyvoo.com.

We use industry-standard technical and organisational measures, including encryption in transit and access controls, to protect personal data against unauthorised access, loss, or misuse.

XYVOO operates across multiple regions, including Nigeria, Kenya, and the United Kingdom. Your information may be processed in a country other than the one you are based in; where this happens, we take steps to ensure it remains protected in line with this policy.

The Services are intended for business use and are not directed at children. We do not knowingly collect personal data from children.

We may update this policy from time to time. We will post the updated version on this page with a revised effective date.

Questions about this policy or your data can be sent to support@getxyvoo.com.