Privacy Policy

How Xairod collects, uses and protects your information

1. Introduction

USAFA Ltd, a company registered in the United Kingdom, operates Xairod ("we", "us", "our"), a community platform connecting Africans living in or moving to Egypt with trusted businesses, agencies, housing, and each other. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the rights you have over it.

By using Xairod's app or website (xairod.com), you agree to the practices described in this Policy. If you do not agree, please do not use Xairod.

2. Information We Collect

2.1 Information You Give Us Directly

• Account details — full name, email address, phone number, password
• Profile information — nationality, city/area, role, bio, profile photo
• Content you create — reviews, ratings, community questions and replies, saved listings, business listing submissions
• Payment information — processed directly by Stripe, Paystack or Flutterwave. We never receive or store your full card number, CVV or expiry date
• Communications — messages to our support team, feedback, survey responses

2.2 Information Collected Automatically

• Device and usage data — device type, browser, OS, pages visited, features used
• Location data — only when you grant permission, used for nearby listings and directions via Google Maps
• Cookies — see Section 8 for full detail and your choices

2.3 Information From Third Parties

• Google Sign-In — name, email, profile photo, as authorised by you
• Payment processors share limited transaction confirmation data — never full card details

3. How We Use Your Information

Purpose	Why
Provide the Service	Create your account, show listings, enable Q&A, save items and reviews
Process Payments	Manage your subscription and billing
Communicate With You	Service updates, support, optional announcements (opt-out available)
Improve Xairod	Understand usage, fix bugs, prioritise features
Keep the Platform Safe	Detect fraud, fake listings, abuse; enforce our Terms
Legal Compliance	Meet obligations under UK and Egyptian law

4. Who We Share Information With

We do not sell your personal information to anyone, ever. We share information only with: Supabase (our database provider), Stripe/Paystack/Flutterwave (payments only), Google Maps Platform (location, if granted), Vercel (hosting), businesses you directly choose to contact, and legal authorities when required by valid legal process.

5. Data Retention

• Account data — retained until deletion, removed within 30 days after
• Payment records — retained 7 years per UK financial law
• Community content — may remain visible anonymised after account deletion
• Support communications — retained 2 years

6. Your Rights

You have the right to access, correct, delete, request portability of, object to certain uses of, and withdraw consent regarding your personal data.

7. Children's Privacy

Xairod is intended for users aged 18 and older. We do not knowingly collect data from anyone under 18. If discovered, the account will be deleted promptly. Contact hello@xairod.com if you believe a child has created an account.

8. Cookies

Type	Purpose	Can You Decline?
Essential	Login, session, security	No — required
Analytics	Usage patterns, improvements	Yes — via cookie banner

9. International Data Transfers

Xairod operates between Egypt and the UK; our providers may process data in other countries including the US and EU, under appropriate safeguards such as Standard Contractual Clauses.

10. Data Security

We use encrypted connections (HTTPS/TLS), Row-Level Security on our database, secure password hashing, and restricted internal access. No method is 100% secure, but we work continuously to protect your information.

11. Changes to This Policy

We may update this Policy as Xairod grows. Material changes are communicated via email or in-app notice before taking effect.

12. Contact Us