xovale

Privacy Policy

This policy explains what information Xovale collects, why we use it, when it may be shared, and the choices available to businesses and customers.

Last updated: 28 October 2026

1. Scope

Xovale ("Xovale", "we", "us", or "our") provides a business platform for creating, sending, verifying, and redeeming customer offers. This Privacy Policy applies to the Xovale website, business portal, public offer pages, and related services.

Businesses that use Xovale are independently responsible for the customer information they collect and the offers they send. Their own privacy notices and legal obligations may also apply.

2. Information we collect

Business account information

When a business signs in with Google or creates a profile, we may receive and store its Google account identifier, email address, authentication provider, business name, address, logo, account status, and access dates. Google processes the sign-in under its own terms and privacy policy.

Offer and redemption information

We store offer titles, descriptions, validity settings, active status, customer phone numbers entered by the business, unique offer codes and links, issue and expiry dates, redemption status, and the business associated with each offer.

Device and technical information

We may process browser type, device or cookie identifiers, IP-derived security signals, timestamps, requested pages, response status, and diagnostic information. Where practical, security signals are stored in hashed form rather than in their original form.

Support communications

If you contact us by email, we receive your email address and any information you choose to include in your message.

3. How we use information

We use information to:

  • create, authenticate, and maintain business accounts;
  • provide business profiles, offers, WhatsApp handoff, verification, redemption, and reporting features;
  • generate secure offer links, codes, and expiry details;
  • prevent fraud, misuse, unauthorised access, and security incidents;
  • diagnose technical problems and improve the reliability of the service;
  • respond to support requests and service communications; and
  • comply with legal obligations and enforce our agreements.

Xovale prepares a WhatsApp conversation for the business to review. The business completes the send within WhatsApp.

5. How we share information

We may share information only as necessary with:

  • Service providers that host our application and database, provide authentication, deliver infrastructure, or help us secure and support the service.
  • Google when a business chooses Google sign-in.
  • WhatsApp and Meta when a business opens a prepared WhatsApp link. The phone number, message, and subsequent conversation are then handled under their terms and privacy policy.
  • Authorities or other parties where reasonably necessary to comply with law, protect rights and safety, investigate misuse, or respond to a lawful request.
  • A successor organisation in connection with a merger, acquisition, reorganisation, financing, or sale of business assets, subject to appropriate safeguards.

We do not sell or rent personal information and do not use customer phone numbers for third-party advertising.

6. Responsibilities of businesses

Businesses using Xovale must collect and use customer information lawfully. Before entering a customer’s phone number or sending an offer, the business must provide any notice and obtain any permission required by applicable law.

Businesses are responsible for keeping their accounts secure, using customer information only for appropriate communications, and responding to requests to stop receiving offers or to correct or delete customer information where required.

7. Cookies and similar technologies

The business portal uses essential cookies for sign-in, account security, and abuse prevention. These cookies are necessary for the service to work and are not used for advertising. The public marketing website does not currently use third-party advertising cookies.

Blocking essential cookies may prevent sign-in or other portal features from working correctly.

8. Data retention

We retain information only for as long as reasonably necessary to provide the service, maintain offer and redemption records, protect against misuse, meet legal or accounting requirements, and resolve disputes. Retention periods may vary depending on the type of record and why it is required.

When information is no longer required, we take reasonable steps to delete, anonymise, or securely isolate it. Backup copies may remain for a limited period until overwritten through normal backup cycles.

9. Data security

We use reasonable technical and organisational safeguards designed to protect information, including encrypted connections, restricted access, secure session cookies, authentication controls, and hashed security signals where appropriate. No online service can guarantee absolute security. Businesses should protect their Google and Xovale access and notify us promptly about suspected misuse.

10. Your rights and choices

Depending on applicable law and your relationship with Xovale, you may have the right to request access to personal information, correction of inaccurate information, deletion, restriction or objection to processing, data portability, withdrawal of consent, or review of a privacy concern.

Business users can update much of their profile and offer information in the portal. Customers may first contact the business that issued the offer because that business supplied the phone number and selected the communication.

We may need to verify a request and may retain information where required for security, legal compliance, fraud prevention, or the establishment or defence of legal claims.

11. International data transfers

Our service providers may process or store information in India or other countries. Privacy and data-protection laws may differ between locations. Where required, we use appropriate contractual, organisational, or technical safeguards for such processing.

12. Children’s privacy

Xovale is a business service and is not intended for use by children. Businesses should not enter a child’s phone number or send offers to a child without the involvement and permission of a parent or legal guardian where required.

13. Changes to this policy

We may update this policy when our service, providers, or legal obligations change. We will publish the updated version on this page and revise the “Last updated” date. Where appropriate, we will provide additional notice of material changes.

14. Contact us

For privacy questions, requests, or complaints, email support@xovale.click.

Please do not include passwords, one-time codes, or other unnecessary sensitive information in your email.