Legal Bases
Effective date: June 15, 2025, or the date on which the user accepts the terms (whichever comes first).
This section explains the purposes for which we collect, use, share, and manage users’ Personal Data at Xder. It includes the categories of Personal Data, the legal basis that justifies the processing of Personal Data (when required by law), the source from which the Personal Data is obtained, and the categories of recipients of the Personal Data. Xder follows a data retention policy that determines how Personal Data is stored and deleted. We have implemented strong technical and organizational measures to safeguard Personal Data.
At Xder, we have a specialized data security team that constantly works to monitor the integrity and security of Xder Properties. We have established policies and protocols to help protect Personal Data, and we are committed to improving our defenses in the ongoing fight against potential threats. However, no method of transmission over the internet or electronic storage system is entirely secure, and Xder cannot guarantee absolute security of Personal Data.
Processing Purposes
| Purpose | Categories of Personal Data (as indicated in “Collected Personal Data”) | Legal Basis | Data Source | Shared With |
|---|---|---|---|---|
| 1. Provide services associated with your Xder account (e.g. user communication via messages, images, audio calls, video calls, video/audio recordings; troubleshooting; data analysis; system maintenance; support; reporting; hosting; processing location; sending service notifications; managing purchases and transactions). | Email, phone number, password; optional information such as location; device information (brand, model, carrier, software/hardware data); activity data (profiles visited, purchases); cookies; information from third-party providers (e.g. payments). | Contract Performance | You, Your device | Service providers, Other partners |
| 2. Respond to your inquiries and provide technical support. | Personal Data voluntarily provided (e.g. disclosed messages, additional information to support a report). | Contract Performance | You, Your device | Service providers |
| 3. Improve Xder Properties and ensure security (incl. machine learning and automated decision-making). This includes authentication, spam prevention, fraud protection, abuse prevention, illegal activity investigation, usage statistics, inappropriate content detection. | Required data for registration; device data; voluntarily provided data; third-party data. Note: email/password are not used for statistics. | Legitimate Interest (continuous improvement of security and accuracy of internal metrics) | You, Your device | Service providers |
| 4. Protect our business interests. Enforcing Terms & Conditions, investigating complaints, responding to customer requests, protecting rights and safety, establishing/exercising legal rights, defending against claims. | Required, device-based, voluntary, and third-party data. | Legitimate Interest (protect legal rights, defend interests in litigation, ensure safety). | You, Your device | Service providers |
| 5. Enable service features and Property functionalities. Making profile info visible (“About Me”); sending reminders; public service messages; enabling user communication (messages, calls, media); accessing camera, gallery, microphone; location sharing; backups of account data; personalized recommendations (ML/automated decisions). | Required data; device data; optional and sensitive data; third-party data. | Consent | You, Your device | Service providers, Other partners |
| 6. Allow external advertising & marketing experts to use cookies and similar technologies for personalized ads. | Device data (ad identifier, IP); third-party data (consent preferences). | Consent | You, Your device | Advertising & marketing providers |
| 7. Conduct surveys and collect feedback on Properties. | Responses, testimonials, comments (including sensitive data you may provide). | Consent | You, Your device | Service providers |
| 8. Respond to legal requests from authorities and third parties to comply with obligations. | Required data; device data; voluntarily provided data; third-party data. | Compliance with legal obligations (EU); Legitimate Interest (compliance outside EEA). | You, Your device | Authorities & related legal requesters |
Controller: Xder
Controller & Data Protection Officer contact: legal@xder.com