Privacy Policy

Last updated: June 2026 — Compliant with EU GDPR

1. Controller / Verantwortlicher

The data controller for XI Ai (www.xiaisoftware.com) is:

Ernyei Ervin-Vasile, Zöchbauerstrasse 11/2, 1160 Vienna, Austria
Email: support@xiaisoftware.com

2. Data We Collect

We collect the minimum data necessary to provide our service:

• Email address — collected at registration to create and manage your account.
• Usage data — anonymised interaction logs to improve the service (e.g. pages visited, features used).
• Payment data — processed exclusively by Stripe. We do not store card details on our servers.
• Technical data — IP address, browser type, device type, collected automatically via server logs.

3. Legal Basis for Processing (GDPR Art. 6)

• Contract performance (Art. 6(1)(b)) — processing your email to provide the service you signed up for.
• Legitimate interest (Art. 6(1)(f)) — anonymised analytics to improve our platform.
• Consent (Art. 6(1)(a)) — where explicitly given (e.g. marketing emails, if applicable).
• Legal obligation (Art. 6(1)(c)) — retention of financial records as required by Austrian law.

4. Third-Party Services

We use the following third-party data processors, each bound by GDPR-compliant data processing agreements:

• Stripe (stripe.com) — payment processing. Stripe acts as an independent data controller for payment data. Privacy Policy: https://stripe.com/privacy
• Replit — authentication and user registration infrastructure. Privacy Policy: https://replit.com/privacy
• Google LLC — may be used for analytics or infrastructure services. Privacy Policy: https://policies.google.com/privacy

We do not sell your personal data to any third party.

5. Data Retention

• Account email: retained for the duration of your account and deleted within 30 days of account closure.
• Payment records: retained for 7 years as required by Austrian tax law (§ 132 BAO).
• Server logs: retained for a maximum of 90 days.

6. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Right of access (Art. 15) — request a copy of your personal data.
• Right to rectification (Art. 16) — correct inaccurate data.
• Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten").
• Right to restriction of processing (Art. 18).
• Right to data portability (Art. 20).
• Right to object (Art. 21).
• Right to withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, contact us at support@xiaisoftware.com. We will respond within 30 days.

7. Cookies

We use only strictly necessary session cookies required for authentication and platform functionality. We do not use tracking or advertising cookies. No cookie consent banner is required for strictly necessary cookies. For details, see our Cookie Policy.

8. Push Notifications

If you opt in to push notifications for match alerts, your browser notification permission is used solely to deliver XI Ai alerts. You may withdraw permission at any time through your browser settings.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure, including encrypted data transmission (HTTPS/TLS) and access controls.

10. Supervisory Authority

You have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):

Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien
Website: https://www.dsb.gv.at

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the platform. Continued use of the service after changes constitutes acceptance.