Xbio.to Privacy Policy

Version: 1.0
Last Updated: [01.07.2026]

Welcome to Xbio.to ("Xbio," "we," "our," or "us").

We value your privacy and are committed to protecting the personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process information when you access or use the Xbio platform, website, applications, APIs, and related services (collectively, the "Services").

Xbio provides a platform that enables users to create customizable bio pages, generate QR codes, shorten and manage URLs, monitor link performance, and use related digital tools and features.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree with this Privacy Policy, you should discontinue use of the Services.

1. Scope

This Privacy Policy applies to all users of the Services, including:

visitors;
registered users;
subscribers;
customers;
organizations;
business users;
API users;
affiliates;
and any individual interacting with the Services.

This Privacy Policy applies regardless of the device or technology used to access the Services, including desktop computers, laptops, tablets, mobile devices, APIs, browser extensions, or future technologies made available by Xbio.

This Privacy Policy applies worldwide unless a separate privacy notice specifically governs a particular service or jurisdiction.

2. Who We Are

Xbio operates an online platform that allows individuals and organizations to create digital identity pages, generate QR codes, shorten and manage URLs, and access related services.

Throughout this Privacy Policy:

"Xbio"
"Company"
"we"
"our"
"us"

refer to the operator of the Services.

Where applicable law requires identification of the data controller, Xbio acts as the controller of personal information processed in connection with the Services, except where another party acts as the controller under applicable law.

3. Definitions

For purposes of this Privacy Policy, the following definitions apply.

Account

An Account means a registered profile that enables a user to access certain features of the Services.

Bio Page

A Bio Page means any public or private webpage created using Xbio that may contain links, text, images, videos, social profiles, files, embedded content, contact information, or other user-provided information.

QR Code

A QR Code means any machine-readable code generated through the Services that references digital information, URLs, contact information, files, payment destinations, or other supported content.

Short Link

A Short Link means any shortened URL generated through the Services.

Content

Content means any information uploaded, created, submitted, imported, generated, stored, displayed, published, or otherwise processed through the Services, including but not limited to:

text;
links;
images;
videos;
files;
icons;
QR codes;
profile information;
metadata;
analytics data;
comments;
messages;
custom domains;
and other digital materials.

Personal Information

Personal Information means information that identifies, relates to, describes, or could reasonably be linked to an identifiable individual under applicable law.

Processing

Processing means any operation performed on information, including collection, recording, organization, storage, modification, retrieval, consultation, transmission, disclosure, analysis, deletion, anonymization, aggregation, restriction, or destruction.

Public Content

Public Content means any information intentionally made publicly accessible by a user through the Services, including publicly available Bio Pages, publicly accessible Short Links, publicly shared QR Codes, and other content designated by the user as publicly visible.

Subscriber

A Subscriber means an individual or organization that purchases, upgrades, renews, or otherwise maintains a paid subscription for the Services.

Visitor

A Visitor means any individual who accesses the Services without creating an Account.

Device Information

Device Information includes technical information relating to the hardware, operating system, browser, network, identifiers, language preferences, screen characteristics, and other technical attributes associated with access to the Services.

Usage Information

Usage Information means information relating to how users interact with the Services, including navigation patterns, feature usage, interaction events, performance metrics, error events, and other operational data.

Applicable Law

Applicable Law means any law, regulation, directive, governmental requirement, judicial order, or legally binding obligation applicable to the processing of information by Xbio.

4. Privacy Principles

Xbio is designed around several core privacy principles.

Whenever reasonably possible, we seek to:

collect only information reasonably necessary to provide and improve the Services;
process information lawfully, fairly, and transparently;
implement reasonable administrative, organizational, and technical safeguards;
limit access to information on a need-to-know basis;
retain information only for appropriate periods;
support user privacy rights where required by applicable law;
continuously improve security, privacy, and operational integrity.

These principles guide how we design, operate, maintain, and improve the Services.

5. Relationship with Other Policies

This Privacy Policy should be read together with our:

Terms of Service;
Cookie Policy;
Acceptable Use Policy;
Copyright Policy;
Data Processing Addendum (where applicable);
and any additional legal notices published by Xbio.

Where another policy specifically governs a particular subject, that policy supplements this Privacy Policy.

6. Information We Collect

The categories of information we collect depend on how you interact with the Services, the features you use, your account settings, applicable legal requirements, and your relationship with Xbio.

We may collect information directly from you, automatically through your use of the Services, from integrated services that you authorize, and from trusted third-party sources where permitted by applicable law.

The categories described below are illustrative and may not apply to every user.

6.1 Information You Provide Directly

You may voluntarily provide information when you:

create an Account;
subscribe to a paid plan;
create a Bio Page;
generate QR Codes;
shorten URLs;
connect a custom domain;
contact customer support;
participate in surveys or promotions;
communicate with us;
submit feedback;
request assistance;
report abuse;
or otherwise interact with the Services.

Depending on your use of the Services, such information may include:

your name;
username;
display name;
email address;
profile image;
organization name;
billing information;
company information;
communication preferences;
account settings;
custom domains;
uploaded files;
text content;
links;
branding assets;
profile descriptions;
social media links;
payment-related information provided during checkout;
and any other information you choose to submit.

You are solely responsible for ensuring that any information you submit is accurate, lawful, and does not violate the rights of others.

6.2 Account Information

When you register an Account, we may collect information necessary to establish, maintain, secure, and administer your Account.

This information may include:

account credentials;
encrypted authentication information;
verification status;
subscription status;
account preferences;
login history;
security settings;
recovery information;
authentication events;
and other information reasonably necessary to operate the Services.

Passwords are not stored in plain text.

6.3 Bio Page Information

When you create a Bio Page, we may process information necessary to publish, display, maintain, and improve that page.

Depending on your configuration, this may include:

page title;
biography;
profile image;
banner image;
links;
buttons;
contact information;
social media profiles;
embedded content;
uploaded media;
icons;
branding;
layout preferences;
custom CSS or styling options (where supported);
page analytics;
metadata;
SEO information;
custom domains;
visibility settings;
localization settings;
and other content intentionally added by you.

Public Bio Pages are intended to be publicly accessible.

You should avoid publishing confidential or sensitive information that you do not wish to become publicly available.

6.4 URL Shortener Information

When you create a Short Link, we may process information relating to that link.

Such information may include:

original destination URL;
shortened URL;
custom alias;
expiration settings;
password protection settings;
geographic targeting;
device targeting;
language targeting;
redirect settings;
campaign identifiers;
click statistics;
timestamps;
metadata;
QR Code associations;
custom domains;
and other configuration settings.

Where analytics features are enabled, we may also collect information relating to interactions with the generated Short Links.

6.5 QR Code Information

When you generate QR Codes using the Services, we may process information relating to the QR Code and the content associated with it.

Depending on the selected QR Code type, this may include:

destination URLs;
contact information;
Wi-Fi configuration;
email information;
telephone information;
calendar events;
payment destinations;
files;
text;
images;
business information;
social profiles;
metadata;
branding elements;
scan statistics;
customization settings;
and related configuration data.

Where supported, QR Code analytics may include aggregate information relating to scans, locations, devices, operating systems, browsers, timestamps, and similar interaction data.

6.6 Subscription and Billing Information

If you purchase a subscription or other paid Services, we or our authorized payment service providers may process information necessary to complete the transaction.

Depending on the payment method used, this may include:

billing name;
billing address;
country;
tax information;
transaction identifiers;
subscription identifiers;
payment status;
invoices;
renewal status;
refunds;
credits;
promotions;
discount information;
and related transaction records.

For security reasons, Xbio generally does not store complete payment card information.

Payment information may be processed by carefully selected third-party payment service providers acting on our behalf or independently, depending on the nature of the transaction.

6.7 Customer Support Information

When you contact customer support, we may process information necessary to investigate, respond to, and resolve your request.

This may include:

support tickets;
chat messages;
emails;
attachments;
screenshots;
technical logs;
diagnostic information;
browser information;
device information;
account information;
and correspondence history.

Support communications may be retained to improve the quality, consistency, security, and effectiveness of our Services.

6.8 Communications

If you communicate with Xbio, we may retain records of such communications.

Communications may include:

emails;
notifications;
customer service conversations;
feedback;
surveys;
abuse reports;
legal requests;
feature requests;
and other correspondence.

6.9 User Generated Content

Users may voluntarily create, upload, publish, import, synchronize, or otherwise provide Content through the Services.

Such Content remains the responsibility of the user who created or submitted it.

Xbio does not routinely monitor all user-generated Content before publication.

However, we reserve the right to review, investigate, restrict, suspend, remove, or otherwise take action regarding Content where reasonably necessary to:

protect the Services;
enforce our policies;
comply with applicable law;
investigate abuse;
prevent fraud;
protect users;
preserve platform integrity;
or respond to legal requests.

6.10 Information About Other Individuals

If you provide information relating to another individual, you represent and warrant that you have the necessary legal authority, consent, or other lawful basis to do so.

You remain solely responsible for ensuring that such disclosure complies with applicable law.

6.11 Information You Choose Not to Provide

Certain information is optional.

However, choosing not to provide certain information may limit your ability to access specific features, subscriptions, or functionality available through the Services.

6.12 Information We Do Not Intentionally Collect

Unless specifically required for a supported feature, we do not intentionally request or encourage users to submit:

government-issued identification documents;
financial account credentials;
passwords for third-party services;
confidential business secrets;
sensitive personal information;
health records;
biometric identifiers;
genetic information;
or other categories of highly sensitive personal information.

Users should refrain from uploading such information unless expressly requested by Xbio for a legitimate and lawful purpose.

7. Information Collected Automatically

When you access or use the Services, certain information may be collected automatically through our systems, your browser, your device, or other technologies used to operate, secure, and improve the Services.

The information collected automatically depends on how you interact with the Services, your device configuration, browser settings, applicable permissions, and the features you use.

7.1 Device Information

We may automatically collect technical information relating to the device used to access the Services.

Such information may include:

device type;
operating system;
operating system version;
browser type;
browser version;
screen resolution;
language preferences;
regional settings;
device identifiers;
network information;
time zone;
approximate geographic region derived from IP address;
connection type;
browser capabilities;
and similar technical characteristics.

This information is used primarily for compatibility, troubleshooting, security, fraud prevention, performance optimization, and service improvement.

7.2 Log Information

Our servers may automatically generate operational and security logs whenever the Services are accessed.

These logs may include:

IP address;
request timestamps;
requested resources;
HTTP headers;
browser information;
referral URLs;
response codes;
authentication events;
session identifiers;
error reports;
security events;
system diagnostics;
and other operational metadata.

Server logs are primarily maintained to:

ensure service availability;
investigate incidents;
diagnose technical issues;
detect abuse;
monitor performance;
enforce our policies;
comply with legal obligations;
and protect the integrity of the Services.

7.3 Usage Information

We may collect information regarding how users interact with the Services.

Examples include:

pages visited;
features used;
buttons clicked;
navigation paths;
session duration;
interaction frequency;
account activity;
feature adoption;
settings changes;
subscription events;
and similar usage information.

We may analyze such information to better understand user behavior, improve usability, develop new features, enhance reliability, and optimize overall service performance.

7.4 Link Analytics

Where analytics features are available, we may collect information relating to interactions with Short Links, Bio Pages, and QR Codes.

Depending on the feature configuration, such analytics may include:

number of visits;
number of scans;
click timestamps;
approximate geographic location;
browser type;
operating system;
device category;
referring websites;
language preferences;
campaign parameters;
and similar interaction metrics.

Analytics are intended to provide users with insights into the performance of their content.

We may also use aggregated and anonymized analytics to improve the Services.

7.5 Cookies and Similar Technologies

We may use cookies, local storage, session storage, pixels, software development kits (SDKs), and similar technologies to operate, secure, personalize, and improve the Services.

These technologies may be used for purposes including:

authentication;
session management;
user preferences;
language settings;
security;
fraud prevention;
abuse detection;
performance optimization;
analytics;
service reliability;
remembering user settings;
and improving the overall user experience.

Where required by applicable law, we will obtain consent before placing non-essential cookies or similar technologies on your device.

Additional information regarding our use of cookies may be provided in our Cookie Policy.

7.6 Security Monitoring

To maintain the security and integrity of the Services, we may automatically monitor certain technical events associated with user activity.

Such monitoring may include:

unusual login attempts;
repeated authentication failures;
suspicious account activity;
abnormal traffic patterns;
automated requests;
bot detection;
rate-limit violations;
malicious requests;
unauthorized access attempts;
suspected credential abuse;
and other indicators of potential misuse.

Security monitoring is conducted solely for legitimate operational, security, fraud prevention, and legal compliance purposes.

7.7 Abuse Prevention

To protect users and the Services, we may employ automated or manual measures designed to detect and prevent misuse.

Such measures may include identifying:

phishing campaigns;
malware distribution;
spam activity;
malicious redirects;
deceptive QR Codes;
fraudulent links;
harmful content;
unauthorized automation;
scraping;
excessive API usage;
account takeover attempts;
click fraud;
referral manipulation;
and other conduct inconsistent with our Terms of Service or applicable law.

The existence of such monitoring does not create an obligation for Xbio to actively monitor all user activity or guarantee that prohibited conduct will always be detected or prevented.

7.8 Information from Third-Party Integrations

Where you choose to connect third-party services to your Xbio Account, we may receive information that those services are authorized to share with us.

The categories of information received depend on:

your privacy settings;
permissions granted by you;
the policies of the third-party service;
and the nature of the integration.

We process such information only to the extent reasonably necessary to provide the requested integration or related functionality.

7.9 Aggregated and De-Identified Information

We may generate, use, analyze, and retain information that has been aggregated, anonymized, or otherwise de-identified so that it no longer reasonably identifies an individual.

Such information may be used for:

statistical analysis;
research;
product development;
service improvement;
security analysis;
business intelligence;
operational reporting;
performance benchmarking;
trend analysis;
and other lawful business purposes.

Where information has been properly anonymized or de-identified, it is not treated as Personal Information under this Privacy Policy, except where applicable law provides otherwise.

8. How We Use Information

We process information only where we have a legitimate business purpose, your consent where required, contractual necessity, compliance with legal obligations, protection of vital interests, or another lawful basis recognized under applicable law.

Depending on the circumstances, we may use information for one or more of the following purposes.

8.1 Providing the Services

We use information to provide, maintain, operate, administer, personalize, and improve the Services, including enabling users to create and manage:

Bio Pages;
Short Links;
QR Codes;
custom domains;
analytics;
subscriptions;
user accounts;
and related features.

8.2 Account Administration

We use information to:

create Accounts;
authenticate users;
manage subscriptions;
process renewals;
administer user preferences;
provide customer support;
maintain account security;
communicate service updates;
and otherwise manage the relationship between Xbio and its users.

8.3 Service Improvement

We continuously evaluate and improve the Services.

Information may therefore be used to:

improve reliability;
enhance functionality;
identify usability issues;
optimize performance;
develop new products;
test new features;
conduct quality assurance;
evaluate system stability;
and improve the overall user experience.

8.4 Security and Platform Integrity

We use information to protect our users, systems, infrastructure, intellectual property, and business operations.

This includes:

fraud prevention;
abuse detection;
spam prevention;
account protection;
network security;
incident response;
policy enforcement;
risk assessment;
vulnerability management;
and maintaining platform integrity.

Nothing in this Privacy Policy shall be interpreted as creating an obligation for Xbio to continuously monitor, review, inspect, or verify all user-generated content or user activity.

8.5 Communications

We may use your information to communicate with you regarding the Services.

Such communications may include:

account notifications;
security alerts;
verification requests;
password reset communications;
billing notices;
subscription updates;
product announcements;
maintenance notifications;
customer support responses;
policy updates;
legal notices;
and other operational communications reasonably necessary for the administration of the Services.

Where required by applicable law, promotional or marketing communications will be sent only where appropriate consent has been obtained or another lawful basis exists.

Users may opt out of marketing communications where applicable; however, operational, security, billing, and legally required communications cannot be disabled while an Account remains active.

8.6 Compliance with Legal Obligations

We may process information where reasonably necessary to comply with applicable law, lawful governmental requests, judicial proceedings, regulatory requirements, tax obligations, accounting requirements, court orders, subpoenas, or other legally binding processes.

Nothing in this Privacy Policy shall require Xbio to disclose information where disclosure would be unlawful or where Xbio has a lawful basis to object, limit, or challenge such request.

8.7 Protection of Rights

We may use or disclose information where reasonably necessary to:

protect our legal rights;
protect our users;
protect third parties;
investigate suspected violations;
detect illegal activity;
respond to security incidents;
enforce contractual rights;
prevent fraud;
resolve disputes;
establish, exercise, or defend legal claims;
or otherwise protect the integrity of the Services.

8.8 Research, Innovation and Product Development

We may use information, including aggregated or de-identified information, for research, statistical analysis, product development, machine learning, service optimization, quality assurance, operational analysis, and innovation initiatives, provided such processing complies with applicable law.

Where required by applicable law, additional safeguards or user consent will be obtained before processing personal information for such purposes.

9. Sharing of Information

We do not sell Personal Information in the ordinary course of our business.

We may disclose information only under the circumstances described in this Privacy Policy or as otherwise permitted or required by applicable law.

The categories below describe situations in which information may be shared.

9.1 Service Providers

We may share information with carefully selected third-party service providers that perform services on our behalf.

Such services may include:

payment processing;
cloud infrastructure;
content delivery;
data storage;
customer support;
email delivery;
infrastructure monitoring;
security services;
fraud prevention;
analytics;
communications;
identity verification;
domain management;
software maintenance;
and other operational functions reasonably necessary for providing the Services.

These providers are contractually required, where applicable, to process information only for authorized purposes and to implement appropriate safeguards.

Xbio does not authorize such providers to use Personal Information for their own unrelated commercial purposes where prohibited by applicable law.

9.2 Business Transfers

In the event of:

a merger;
acquisition;
corporate restructuring;
financing transaction;
investment;
sale of assets;
bankruptcy;
insolvency;
or other business transition,

Personal Information may be transferred as part of the relevant transaction, subject to applicable law.

Where legally required, affected users will be notified in accordance with applicable legal requirements.

9.3 Legal Requirements

We may disclose information where we reasonably believe disclosure is necessary to:

comply with applicable law;
comply with lawful governmental requests;
comply with judicial proceedings;
protect public safety;
prevent unlawful activity;
investigate fraud;
enforce our agreements;
respond to legal claims;
protect our rights;
or otherwise comply with legally binding obligations.

9.4 Protection of the Services

We may disclose information where reasonably necessary to:

protect the Services;
investigate abuse;
detect malicious activity;
respond to security incidents;
protect intellectual property;
prevent unauthorized access;
preserve evidence;
or otherwise maintain platform integrity.

9.5 Public Information

Certain information is intended by design to be publicly accessible.

Examples include:

publicly published Bio Pages;
publicly available Short Links;
publicly shared QR Codes;
public usernames;
profile images designated as public;
and other information intentionally made public by users.

Users are solely responsible for determining what information they choose to make publicly available.

Once information has been made publicly accessible, Xbio cannot guarantee that third parties will not copy, archive, index, redistribute, or otherwise retain such information.

9.6 With Your Consent

We may disclose information where you expressly authorize us to do so.

Such authorization may occur through:

application settings;
integration permissions;
connected services;
written instructions;
API authorizations;
or other affirmative actions taken by you.

10. International Data Transfers

The Services may be operated, supported, or accessed from multiple countries.

Accordingly, Personal Information may be transferred to, stored in, or processed in jurisdictions other than the country in which you reside.

Where applicable law requires additional safeguards for international data transfers, Xbio will implement measures that it reasonably determines to be appropriate under the circumstances.

Users acknowledge that privacy and data protection laws may differ between jurisdictions.

11. Data Retention

We retain Personal Information only for as long as reasonably necessary to:

provide the Services;
maintain Accounts;
fulfill contractual obligations;
comply with applicable law;
resolve disputes;
enforce our agreements;
protect the security of the Services;
preserve evidence;
satisfy accounting and tax obligations;
and fulfill other legitimate business purposes.

Retention periods vary depending on the type of information, legal requirements, operational needs, and the nature of the Services used.

Even after an Account has been closed, certain information may be retained where reasonably necessary for legal compliance, fraud prevention, dispute resolution, security investigations, backup recovery, or other legitimate purposes.

Where information is no longer reasonably required, we may delete, anonymize, aggregate, or otherwise de-identify it.

Deletion from active systems does not necessarily result in the immediate removal of information from backup systems, disaster recovery systems, archived logs, or security records, which may continue to exist for limited periods consistent with legitimate operational requirements.

12. Data Deletion

Subject to applicable law, users may request deletion of certain Personal Information.

Upon receipt of a valid request, Xbio will take reasonable steps to delete or anonymize applicable information unless retention is:

required by law;
necessary for legal claims;
necessary for fraud prevention;
necessary for security investigations;
necessary to enforce agreements;
technically impracticable;
or otherwise permitted under applicable law.

Deletion requests may not affect information that has already been anonymized, aggregated, publicly disclosed by the user, or incorporated into operational security records where continued retention is permitted by law.

13. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your Personal Information.

These rights are not absolute and may be subject to legal limitations, verification requirements, technical feasibility, contractual obligations, or other exceptions permitted by applicable law.

Where required by law, and upon receipt of a verifiable request, you may have the right to:

access certain Personal Information relating to you;
request correction of inaccurate or incomplete Personal Information;
request deletion of certain Personal Information;
request restriction of certain processing activities;
object to certain processing activities;
withdraw consent where processing is based on consent;
request portability of certain Personal Information in a commonly used format where technically feasible;
obtain information regarding certain categories of processing;
submit complaints to an applicable supervisory authority.

The availability of these rights depends on the laws applicable to your jurisdiction.

14. Exercising Your Rights

Requests relating to privacy rights may be submitted using the contact methods provided in this Privacy Policy.

Before responding to certain requests, Xbio may require reasonable verification of identity to protect users against unauthorized access, fraudulent requests, or identity theft.

We may decline, limit, or delay requests where permitted by applicable law, including where:

the request cannot be reasonably verified;
the request is repetitive or manifestly excessive;
disclosure would adversely affect the rights of others;
compliance would violate applicable law;
retention remains legally required;
the information is necessary for fraud prevention, security, dispute resolution, or legal claims.

15. GDPR and Similar Data Protection Laws

Where the General Data Protection Regulation (GDPR), the UK GDPR, or substantially similar privacy laws apply, Xbio processes Personal Information only where an appropriate legal basis exists.

Depending on the circumstances, such legal bases may include:

performance of a contract;
compliance with legal obligations;
legitimate interests pursued by Xbio or a third party, provided such interests are not overridden by applicable law;
protection of vital interests;
consent where required by law; or
any other lawful basis recognized by applicable legislation.

Where processing is based on consent, users may withdraw such consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before such withdrawal.

16. California Privacy Rights

Where applicable under California law, eligible California residents may have additional privacy rights regarding their Personal Information.

Such rights may include the ability to request information regarding certain categories of Personal Information collected, disclosed, or processed, subject to applicable legal exceptions.

Nothing in this Privacy Policy shall be interpreted as limiting any rights provided by applicable California privacy legislation.

17. Children's Privacy

The Services are intended for a general audience and are not directed toward children below the minimum age required under applicable law to independently use the Services.

Xbio does not knowingly collect Personal Information from children where such collection is prohibited by applicable law.

If we become aware that Personal Information has been collected from a child in violation of applicable law, we may take reasonable steps to delete such information or otherwise comply with applicable legal requirements.

Parents or legal guardians who believe that a child has provided Personal Information may contact us using the contact information provided below.

18. Security Measures

Protecting user information is an important component of operating the Services.

Xbio implements and maintains administrative, organizational, contractual, and technical safeguards that are reasonably designed to protect Personal Information against unauthorized access, accidental loss, destruction, alteration, misuse, or unlawful disclosure.

Security measures may include, where appropriate:

authentication controls;
encryption during transmission where supported;
access controls;
logging;
monitoring;
vulnerability management;
backup procedures;
infrastructure protections;
abuse detection;
fraud prevention;
incident response procedures;
and other security practices appropriate to the nature of the Services.

No method of transmission, storage, or electronic processing can be guaranteed to be completely secure.

Accordingly, Xbio cannot guarantee absolute security, uninterrupted availability, or the complete prevention of unauthorized access.

Users remain responsible for maintaining the confidentiality of their account credentials and for taking appropriate precautions when using the Services.

19. Third-Party Websites and Services

The Services may contain links to websites, applications, platforms, content, or services operated by third parties.

Xbio does not own or control such third-party services and is not responsible for their privacy practices, security measures, content, or operations.

Access to third-party services is governed by the terms and privacy policies of the respective providers.

Users should review the applicable privacy policies before providing Personal Information to third-party services.

20. Changes to this Privacy Policy

Xbio may update, modify, or replace this Privacy Policy from time to time.

Changes may become necessary due to:

legal developments;
regulatory requirements;
security improvements;
technological changes;
operational needs;
product enhancements;
business developments;
or other legitimate reasons.

Where required by applicable law, users will be provided with appropriate notice before material changes become effective.

Continued use of the Services after the effective date of an updated Privacy Policy constitutes acknowledgment of the updated version to the extent permitted by applicable law.

21. Contact Us

Questions, requests, or concerns relating to this Privacy Policy or our privacy practices may be submitted through the contact channels made available by Xbio.

For privacy-related matters, users may contact us at:

Email: privacy@xbio.to (or another designated privacy contact address)

Additional contact information may be published on the Services from time to time.

22. Severability

If any provision of this Privacy Policy is determined to be invalid, unlawful, or unenforceable under applicable law, the remaining provisions shall continue in full force and effect to the maximum extent permitted by law.

Any invalid or unenforceable provision shall be interpreted, modified, or limited only to the extent necessary to make it enforceable while preserving, as closely as possible, its original intent.

23. No Waiver

Failure by Xbio to enforce any provision of this Privacy Policy shall not constitute a waiver of any right, remedy, or provision.

Any waiver shall be effective only if made expressly and in writing by an authorized representative of Xbio.

24. Governing Language

This Privacy Policy may be translated into multiple languages for convenience.

In the event of any inconsistency, ambiguity, or conflict between translated versions and the original version designated by Xbio, the original version shall prevail to the extent permitted by applicable law.

25. Entire Privacy Policy

This Privacy Policy constitutes the complete privacy notice of Xbio relating to the Services unless supplemented by a service-specific privacy notice or another legally binding privacy statement.

Where another document expressly supplements this Privacy Policy, both documents shall be interpreted together.