XAATAI Privacy Notice

1. About XAATAI

For purposes of this Privacy Notice, "XAATAI LLC," "we," "us," or "our" refers to XAATAI LLC. XAATAI is the software platform developed and operated by XAATAI LLC.

XAATAI LLC provides technology designed to help educational institutions manage school operations, including areas such as academics, attendance, fees, communication, administration, reporting, and related workflows.

The public website at xaatai.com primarily serves as XAATAI's marketing, information, enquiry, and acquisition platform.

2. Information We Collect

The information XAATAI LLC collects depends on how you interact with the public website.

3. How XAATAI Uses Personal Information

XAATAI LLC may use personal information collected through the public website for purposes including:

4. Legal Basis for Processing

Where applicable data-protection law requires XAATAI LLC to identify a legal basis for processing personal information, the applicable basis may include:

• Consent, where you have given consent for a specified purpose;
• Contractual necessity, where processing is necessary to take steps at your request or perform an agreement;
• Legitimate interests, where processing is reasonably necessary for XAATAI LLC's legitimate business interests and those interests are not overridden by applicable rights;
• Legal obligations, where processing is necessary to comply with applicable law; or
• Another lawful basis recognized under applicable law.

The legal basis depends on the nature and purpose of the particular processing activity.

Where processing is based on consent, you may withdraw that consent, subject to the limitations described in this Notice and applicable law.

5. Cookies and Similar Technologies

XAATAI LLC uses cookies and similar browser technologies on its public website. These may include:

• essential cookies;
• local storage;
• session storage;
• analytics technologies;
• marketing measurement technologies; and
• other technologies necessary for website functionality or security.

Optional analytics technologies are controlled through XAATAI LLC's consent mechanism where applicable.

For detailed information about the technologies used, their purposes, retention, and your choices, please see the XAATAI Cookie Policy.

6. How XAATAI LLC Shares Personal Information

XAATAI LLC does not sell public website enquiry information.

We may share or allow access to personal information with service providers that help us operate the website and conduct legitimate business activities. These providers may include services supporting:

• website hosting and infrastructure;
• databases and storage;
• email delivery;
• communications;
• security and abuse prevention;
• analytics;
• customer relationship management;
• form processing; and
• other operational functions.

Where appropriate, XAATAI LLC uses contractual, technical, and organizational measures designed to ensure that service providers process information only for authorized purposes and in accordance with applicable requirements.

XAATAI LLC may also disclose information where reasonably necessary:

• to comply with applicable law or a valid legal process;
• to respond to lawful requests from competent authorities;
• to protect the rights, safety, and property of XAATAI LLC or others;
• to investigate fraud, abuse, or security incidents;
• to enforce applicable agreements; or
• in connection with a legitimate corporate transaction, such as a merger, acquisition, restructuring, financing, or sale of assets.

7. International Processing

Some XAATAI LLC service providers or infrastructure may operate outside your country or jurisdiction. As a result, personal information may be processed or stored in another country.

Where such processing involves an international transfer of personal information, XAATAI LLC will take appropriate measures required by applicable law to protect the information and address applicable transfer requirements.

The safeguards used may depend on the countries involved, the service provider, the type of information, and the applicable legal framework.

8. Data Retention

XAATAI LLC retains personal information only for as long as reasonably necessary for the purpose for which it was collected, taking into account applicable legal, operational, security, and business requirements.

For public website enquiries:

• information may be retained while an enquiry is being handled;
• acquisition records may be retained for legitimate follow-up and operational reporting;
• information may be retained where necessary to investigate fraud, abuse, or security incidents;
• information may be retained where required for legal or regulatory purposes; and
• inactive or expired marketing records may be archived, anonymized, or deleted in accordance with applicable retention practices.

If an enquiry results in a formal customer or school relationship, information may become subject to the retention requirements applicable to that relationship and the relevant XAATAI services.

9. Data Security

XAATAI LLC uses reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.

Depending on the nature of the information and service involved, safeguards may include:

• access controls;
• authentication mechanisms;
• encryption and secure transmission;
• infrastructure security;
• monitoring and logging;
• abuse prevention;
• data minimization; and
• controlled access to personal information.

However, no internet service, electronic transmission, or storage system can be guaranteed to be completely secure. You should also take reasonable steps to protect your own devices, accounts, credentials, and communications.

10. Information Relating to Students and Schools

XAATAI is designed for educational institutions and its authenticated platform may process information relating to students, parents, teachers, administrators, and other individuals connected with a school.

This public Privacy Notice primarily concerns information collected through xaatai.com. It does not describe every category of information that may be processed within the authenticated XAATAI school-management platform.

For example, the XAATAI platform may process information associated with:

• student records;
• attendance;
• academic performance;
• fees and payments;
• parent and guardian information;
• teacher and staff information;
• school administration;
• communications; and
• other school-management activities.

The processing of such information is governed by the applicable XAATAI service terms, customer agreements, privacy requirements, and data-processing arrangements.

Where a school or educational institution uses XAATAI to process personal information on its behalf, the respective responsibilities of the school and XAATAI will be determined by the applicable contractual and legal framework.

11. Children's Privacy

Because XAATAI provides services to educational institutions, the XAATAI platform may operate in environments involving children and students.

The public marketing website is not intended to knowingly collect unnecessary personal information directly from children for marketing purposes.

Where information relating to students or children is processed through the authenticated school-management platform, such processing is undertaken in the context of the relevant educational institution's use of XAATAI and is subject to the applicable legal, contractual, and data-protection requirements.

12. Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information. These may include the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of personal information in appropriate circumstances;
• object to certain processing;
• request restriction of certain processing;
• withdraw consent where processing is based on consent;
• request portability of certain information; and
• lodge a complaint with a competent data-protection or supervisory authority.

These rights are not absolute and may be subject to applicable legal exceptions or limitations.

To exercise a privacy right, contact XAATAI LLC using the contact details provided below. We may need to verify your identity before processing certain requests.

13. Marketing Communications

If you provide your contact information to XAATAI LLC, we may contact you regarding the enquiry, service, demonstration, partnership opportunity, onboarding process, or other matter for which you provided your information.

Where XAATAI LLC sends promotional communications, we will provide appropriate mechanisms to manage or opt out of those communications where required by applicable law.

Opting out of promotional communications does not necessarily prevent us from sending important service-related or transactional communications where such communication is necessary.

14. Third-Party Websites

The XAATAI website may contain links to third-party websites, services, or platforms.

XAATAI LLC is not responsible for the privacy practices, content, security, or policies of third-party websites that we do not operate. We encourage you to review the privacy policies of third-party services before providing them with personal information.

15. Your Responsibilities

When submitting personal information through xaatai.com, you should ensure that the information you provide is accurate and that you have the appropriate authority to provide information relating to another person or organization.

Where you provide information relating to a school, organization, employee, parent, student, or another individual, you are responsible for ensuring that you have the appropriate authority or lawful basis to provide that information to XAATAI LLC.

16. Changes to This Privacy Notice

XAATAI LLC may update this Privacy Notice from time to time to reflect changes to:

• our services;
• our data-processing practices;
• technologies used by our websites;
• third-party service providers;
• applicable laws or regulatory requirements; or
• our business operations.

When we make changes, we will update the Last Updated date at the beginning of this Notice. Where appropriate or required by law, we may provide additional notice regarding material changes.

17. Contact Us

If you have questions about this Privacy Notice, how XAATAI LLC processes your personal information, or you wish to exercise an applicable privacy right, please contact us.

When making a privacy request, please provide sufficient information for us to understand and respond to your request. We may request reasonable information to verify your identity before providing access to or making changes to personal information.