Privacy Policy

1. Introduction

At Xyora Journal, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Services").

We take your privacy seriously. Please read this Privacy Policy carefully to understand our practices regarding your personal data and how we will treat it. By accessing or using our Services, you acknowledge that you have read and understand this Privacy Policy.

2. Information We Collect

We collect several types of information from and about users of our Services:

2.1 Information You Provide to Us

• Account Information: When you register for an account, we collect your name, email address, password, and profile information.
• Profile Information: Information you provide in your user profile, such as your photo, biography, and preferences.
• Travel Journal Content: Information you voluntarily provide when creating travel journals, including text, photos, videos, locations, dates, and other content.
• Trip Planning Information: Details about your planned trips, including destinations, dates, accommodations, activities, and preferences.
• Payment Information: If you subscribe to our premium services, we collect payment details, billing address, and other financial information necessary to process your payment. Note that we do not store full credit card numbers, as this information is processed by our payment service providers.
• Communications: Information you provide when you contact us for customer support, participate in surveys, or communicate with us in any way.

2.2 Information We Collect Automatically

• Device Information: We collect information about the device you use to access our Services, including the hardware model, operating system and version, unique device identifiers, and mobile network information.
• Log Information: We automatically collect log information when you use our Services, including your IP address, browser type, access times, pages viewed, and the page you visited before navigating to our Services.
• Location Information: With your consent, we collect precise location information from your device when you use our travel planning and journaling features. You can turn off location services in your device settings at any time.
• Usage Information: We collect information about how you use our Services, such as the features you use, the actions you take, and the time, frequency, and duration of your activities.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing behavior and preferences. For more information, please see our Cookie Policy.

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Social Media Platforms: If you choose to link your social media accounts to our Services, we may collect information from these platforms in accordance with your privacy settings on those platforms.
• Travel Partners and APIs: When you use our Services to book travel or access travel information, we may receive information from our travel partners, such as airlines, hotels, and travel booking platforms.
• Other Users: Other users may provide information about you when they tag you in travel journals or invite you to collaborate on trip planning.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process and complete transactions
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and requests
• Personalize your experience and deliver content relevant to your interests
• Help you connect with other users when you choose to share your journals or collaborate on trip planning
• Monitor and analyze usage patterns and trends to improve our Services
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Protect the rights and property of Xyora Journal and others
• Comply with legal obligations

3.1 Personalization and Recommendations

We use your information to provide personalized travel recommendations, suggestions for places to visit, and content that may be of interest to you. You can manage your preferences for these recommendations in your account settings.

3.2 Location-Based Features

With your consent, we use your location information to provide location-based features such as mapping your travel routes, tagging locations in your travel journals, finding nearby attractions, and providing relevant local information. You can disable location services at any time through your device settings.

4. How We Share Your Information

We may share your personal information in the following circumstances:

4.1 With Your Consent

We share your information with third parties when you give us your consent to do so, such as when you choose to share your travel journals publicly or with specific individuals.

4.2 With Service Providers

We share information with third-party vendors, consultants, and other service providers who need access to such information to carry out work on our behalf. These may include:

• Cloud hosting and storage providers
• Payment processors
• Analytics providers
• Customer support services
• Marketing and email service providers

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. They are only permitted to process your personal data for specified purposes and in accordance with our instructions.

4.3 For Legal Reasons

We may disclose your information if we believe in good faith that such disclosure is necessary to:

• Comply with relevant laws or regulations, or respond to a subpoena, court order, or legal process
• Protect the safety, rights, or property of Xyora Journal, our users, or the public
• Detect, prevent, or otherwise address fraud, security, or technical issues

4.4 Business Transfers

If Xyora Journal is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Services of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

4.5 Aggregated or De-identified Information

We may share aggregated or de-identified information, which cannot reasonably be used to identify you, with third parties for research, marketing, analytics, and other purposes.

5. Your Privacy Choices and Rights

You have several rights and choices regarding your personal information:

5.1 Account Information

You can update, correct, or delete your account information at any time by logging into your account and navigating to the profile settings page. If you need assistance, you can contact us using the information provided in the "Contact Us" section below.

5.2 Location Information

You can control whether your device shares precise location information with us through your device's settings menu. Please note that turning off location services may limit your ability to use certain features of our Services.

5.3 Cookies and Tracking Technologies

Most web browsers are set to accept cookies by default. You can usually choose to set your browser to remove or reject cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services. For more information, see our Cookie Policy.

5.4 Marketing Communications

You can opt out of receiving promotional emails from us by following the instructions in those emails. If you opt out, we may still send you non-promotional emails, such as those about your account or our ongoing business relations.

5.5 Data Access, Correction, and Deletion

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Request restriction of processing of your personal information
• Request the transfer of your personal information to another party
• Object to processing of your personal information

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

5.6 Data Portability

You can export your travel journals, trip plans, and other content you've created through our Services. We provide tools within the application to help you download your data in common, machine-readable formats.

6. Data Security

We implement appropriate technical and organizational measures to protect the security of your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

We take the following security measures to protect your data:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Regular data backups
• Employee training on data security and privacy
• Incident response planning

In the event of a data breach that affects your personal information, we will notify you in accordance with applicable laws.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal information, we consider:

• The amount, nature, and sensitivity of the personal information
• The potential risk of harm from unauthorized use or disclosure of your personal information
• The purposes for which we process your personal information
• Whether we can achieve those purposes through other means
• The applicable legal requirements

When we no longer need to use your personal information, we will either delete it or anonymize it so that it can no longer be associated with you.

8. Children's Privacy

Our Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will promptly delete that information. If you believe that we might have any information from or about a child under 16, please contact us using the information provided in the "Contact Us" section below.

9. International Data Transfers

Xyora Journal is based in the United States, and we process and store information on servers located in the United States and other countries. If you are located outside the United States, your personal information may be transferred to, stored, and processed in a country that may not provide the same level of data protection as your jurisdiction.

When transferring personal information from the European Economic Area (EEA), United Kingdom, or Switzerland to countries that have not received an adequacy decision by the European Commission, we use appropriate safeguards, such as standard contractual clauses, to ensure that your data is protected.

10. Your California Privacy Rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These include:

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information
• The right to opt-out of the sale or sharing of personal information
• The right to non-discrimination for exercising your rights
• The right to limit the use and disclosure of sensitive personal information
• The right to correct inaccurate personal information

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

11. Your European Privacy Rights

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR) and similar laws. These include:

• The right to access your personal data
• The right to rectification of inaccurate personal data
• The right to erasure of your personal data
• The right to restrict processing of your personal data
• The right to data portability
• The right to object to processing of your personal data
• The right not to be subject to automated decision-making, including profiling

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

You also have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable law.

12. Changes to Our Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (sent to the email address specified in your account) or by means of a notice on our Services prior to the change becoming effective. We encourage you to review this Privacy Policy periodically for the latest information on our privacy practices.

The date at the top of this Privacy Policy indicates when it was last updated.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: support@xyoraarc.com

Postal Address:
XYORA ARC LTD
90, Clayton Road, Hayes, UB31BA,
UK

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.