Privacy Policy

1. About XOSell

This Privacy Policy explains how Xosell ("XOSell", "we", "us" or "our") collects, uses, stores and shares information when you use xosell.com, the XOSell Android application, Facebook Login, or related XOSell services.

2. Information we collect

Depending on how you use XOSell, we may collect information you provide directly, including your name, phone number, email address, order details, product selections, size/color/variant choices, customer-service messages and other information needed to complete or support an order.

If you choose Continue with Facebook, Facebook may provide XOSell with information authorized by you and permitted by Meta, such as your Facebook user ID, name and email address when available. We use this information to sign you in, create or connect your XOSell account, and avoid duplicate accounts.

The XOSell app may also process technical information such as an installation identifier, app version, platform, language, notification preference and Firebase Cloud Messaging token so that the app can function and, when enabled, receive notifications. Website analytics may process page views, search terms, device/browser information and referral information.

3. How we use information

• To provide and operate XOSell.
• To create, confirm, manage and support orders.
• To remember the exact product and variant selected by a customer.
• To authenticate users, including through Facebook Login when enabled.
• To link an existing XOSell account with a verified Facebook account where appropriate.
• To send service or promotional notifications when notifications are enabled.
• To provide customer support and respond to requests.
• To maintain security, prevent fraud, abuse and duplicate or invalid activity.
• To measure and improve the website and app.
• To comply with applicable legal, accounting and record-keeping obligations.

4. Facebook Login

Facebook Login is optional. XOSell does not receive your Facebook password. Authentication is handled by Meta/Facebook. XOSell only requests and processes the information required for the login/account-linking experience and that you authorize Facebook to provide.

You can stop using Facebook Login at any time. You can also request deletion of information associated with your Facebook Login through our User Data Deletion page or through the deletion tools provided by Facebook.

5. Sharing and service providers

We may use service providers that help us operate XOSell, such as website hosting, email delivery, Firebase/Google services for app notifications, analytics services, product/catalog suppliers, and Meta/Facebook when you use Facebook Login or Meta tools. These providers process information according to their own terms and privacy requirements.

We do not sell your personal information.

6. Cookies, analytics and marketing technologies

Essential cookies or local storage may be used for cart, checkout, session and security functions. Optional analytics or marketing technologies may be used when enabled and, where required, after your consent. If privacy controls are available on the site, you can reopen them and change your choice.

7. Push notifications

If you allow notifications, XOSell may store a device installation identifier and FCM token to deliver notifications. You can disable notifications in your Android device settings. Disabling notifications does not prevent you from browsing or purchasing through XOSell.

8. Data retention

We retain information only for as long as reasonably necessary for the purposes described in this policy. Customer and order information is generally intended to be retained for approximately 24 months, subject to legitimate business, dispute, fraud-prevention, accounting, tax, security or legal requirements. Authentication tokens and obsolete device tokens may be removed earlier.

9. Data deletion

You may request deletion of your XOSell account information. For Facebook Login users, XOSell provides a Meta-compatible data-deletion callback and a public deletion-information page. When a valid Facebook deletion request is received, XOSell removes the linked XOSell customer profile and authentication tokens and disconnects associated app-device records. Certain transaction records may be retained when necessary for legal, tax, accounting, fraud-prevention or dispute-resolution purposes.

See User Data Deletion for instructions and status information.

10. Security

We use reasonable administrative and technical measures designed to protect information, including restricted administrative access, server-side storage of private credentials, encrypted storage for supported secret keys, CSRF protection and secure account-token handling. No online system can guarantee absolute security.

11. Children

XOSell is not designed to knowingly collect personal information from children who are not legally permitted to use the service on their own. If you believe a child has provided personal information improperly, contact us so the request can be reviewed.

12. Your choices and rights

Depending on applicable law, you may ask to access, correct or delete personal information associated with you, object to certain processing, or ask a privacy question. We may need to verify a request before acting on it.

13. Contact

For privacy questions or requests, contact Xosell using the contact details below or the customer-support channels available on xosell.com.

14. Changes to this policy

We may update this Privacy Policy when XOSell features, legal requirements or service providers change. The effective date at the top of this page identifies the current version.