Your information stays yours.

When you join a Xen waitlist, we collect your first and last name, email address, selected country or region, product interest, and your acknowledgment of the Terms of Use and this Privacy Notice. We also record the notice versions, time, form surface, consent source, and privacy-protective technical evidence needed to demonstrate and secure the request.

You may optionally provide an organization, role, relationship to property, primary subdivision, estimated property count, referral source, or marketing preference. Optional information helps us understand launch demand and does not determine guaranteed access.

If you create an Account or use Xen, we collect the identity, authentication, Account, Property Workspace, classification, task, Record, Evidence, event, audit, support, billing, and configuration information needed to provide the service. Authorized users may also provide property documents, notes, links, obligations, and related workspace content.

Do not provide Social Security numbers, bank credentials, payment-card data, wire instructions, private keys, medical information, or other highly sensitive information unless a separate written agreement expressly authorizes it and the applicable controls have been confirmed.

Our hosting, authentication, security, and delivery providers may process IP address, browser or device type, request and security logs, timestamps, cookie identifiers, and similar operational information. Waitlist abuse controls store a keyed technical hash rather than the submitted network address in the waitlist record.

We use information to operate and secure Xen, maintain Account and Property Workspace boundaries, authenticate users, process waitlist requests, send requested product-access updates, provide support, administer billing, troubleshoot, measure launch demand, comply with law, and improve reliability. Where applicable, processing is based on providing the requested service, legitimate operational and security interests, legal obligations, or consent.

Important waitlist and product-access updates are separate from optional marketing. We send marketing only when you make a separate affirmative choice. The marketing option is not preselected, and you may withdraw it through the email preference link or by contacting info@xenhq.io.

Withdrawing marketing consent does not undo lawful processing that occurred before withdrawal and does not prevent service, security, transactional, or specifically requested access communications.

We do not sell personal information or use it for cross-context behavioral advertising. We disclose information only as needed to providers that support hosting, databases, authentication, email, security, billing, storage, document processing, and authorized AI processing; to professional advisers; to authorized workspace participants at your direction; or when required to comply with law or protect Xen, users, or others.

Providers receive only the information reasonably needed for their role and are expected to handle it under applicable contractual and security restrictions. We may also transfer information in connection with a financing, reorganization, acquisition, or sale of business assets, subject to applicable requirements.

Xen initially serves people in the United States, Canada, and the United Kingdom, and may receive interest from other locations. Information may be processed in the United States or another country where Xen or its providers operate. Where required, we use appropriate contractual or other recognized safeguards for cross-border transfers. Product, provider, payment, and localization availability may differ by country and property location.

Xen uses administrative, technical, and organizational safeguards designed for the service, including server-side authorization, Row Level Security, server-only private credentials, signed HTTP-only access cookies, transport encryption over HTTPS, event and audit records, least-privilege service access, and separate storage for operational waitlist data.

No internet, email, authentication, or storage system is completely secure. Xen does not claim absolute security or certification merely because these controls exist.

Unconverted waitlist entries are reviewed for deletion or anonymization no later than 24 months after the last meaningful interaction unless a shorter period is required or continued retention is necessary for a documented legal, security, suppression, or dispute purpose. Account and Property Workspace information is retained while the service relationship is active and afterward only as reasonably needed for contractual, legal, security, recovery, and audit obligations. Preference and suppression records may be retained in minimal form so we can honor communication choices.

Xen uses strictly necessary cookies for authentication, security, and requested functionality. We do not currently use advertising cookies or session-replay technology on the public waitlist. If nonessential technologies are introduced, we will provide the notices and choices required by applicable law before using them.

Depending on where you live, you may request access, correction, deletion, restriction, objection, or portability, withdraw consent, or appeal certain decisions. You may also have the right to complain to a privacy regulator. Email info@xenhq.io or use our contact form. We may verify your identity and authority, and lawful exceptions may apply. Xen will not discriminate against you for exercising an applicable privacy right.

Xen is not directed to children under 18, and we do not knowingly collect their personal information through the waitlist or service.

We may update this notice as Xen, our markets, providers, or legal requirements evolve. The effective date and version identify the notice presented. Privacy questions and requests may be sent to info@xenhq.io.