Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Last updated: October 14, 2025
At Xefa, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, share, and protect your data when you use our AI-powered learning platform.
By using Xefa, you agree to the collection and use of information in accordance with this policy. If you have any questions or concerns, please contact us at privacy@xefa.com.
When you create an account, we collect your name, email address, and password. This information is necessary to provide you with access to our platform.
We track your course progress, quiz results, and learning preferences to personalize your experience and provide recommendations.
We collect information about how you interact with our platform, including pages visited, features used, and time spent on the platform.
We may collect information about the device you use to access our platform, including browser type, operating system, and IP address.
We use your data to deliver personalized learning experiences, recommend courses, and improve our AI algorithms.
We may send you course updates, platform announcements, and marketing communications (which you can opt out of at any time).
We analyze user behavior to understand how our platform is used and identify areas for improvement.
We use your information to protect our platform from unauthorized access and fraudulent activities.
All data transmitted to and from our platform is encrypted using industry-standard SSL/TLS protocols.
Your data is stored on secure servers with restricted access and regular security audits.
Passwords are hashed using bcrypt and never stored in plain text.
We keep our security measures up to date and conduct regular vulnerability assessments.
You can request a copy of all personal data we hold about you at any time.
You can update or correct your personal information through your account settings.
You can request deletion of your account and associated data. Some data may be retained for legal compliance.
You can request your data in a structured, machine-readable format.
You can opt out of marketing communications and certain data collection activities.
We never sell your personal information to third parties. Your trust is our priority.
We may share data with trusted service providers who help us operate our platform (e.g., hosting, analytics). They are contractually obligated to protect your data.
We may disclose information if required by law or to protect our rights and safety.
In the event of a merger or acquisition, your data may be transferred to the new entity.
We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device that help us:
You can control cookie preferences through your browser settings. Note that disabling cookies may affect platform functionality.
Our platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information promptly.
Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your data.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically for any changes.