Privacy Policy

XEGA ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal information when you use our website (https://xega.dev), our platform, our software applications (including any apps distributed through the Microsoft Store), and any related services (collectively, the "Services").

1. Who we are

XEGA is a software-as-a-service company that provides a sales platform combining a sales CRM, email campaign automation, a parallel dialer and AI digital employees. Our headquarters are in Milton Keynes, United Kingdom. XEGA is the data controller responsible for your personal data.

You can contact us at any time at hello@xega.dev.

2. Information we collect

We collect the following categories of information:

• Account information — name, work email address, company name and telephone number when you register, book a demo or contact us.
• Usage information — how you interact with the Services, such as pages visited, features used, and actions taken within the platform.
• Communication data — the contents of enquiries, support requests and messages you send to us.
• Technical data — device type, operating system, browser type, IP address, approximate location and crash or diagnostic reports.
• Call and message data — where you use our dialler or digital employee features, records, transcripts and logs of calls and messages processed on your behalf.

3. How we use your information

We use the information we collect to:

• Provide, operate, maintain and improve the Services;
• Process your registration, enquiries and orders;
• Respond to your comments, questions and support requests;
• Send you service-related communications, such as updates, security alerts and account notices;
• Detect, prevent and address fraud, abuse, security incidents and technical issues;
• Comply with our legal and regulatory obligations.

We do not sell your personal information. We do not use your personal information for third-party advertising.

4. Legal bases for processing (UK GDPR)

Under UK GDPR, we rely on the following legal bases to process your personal data:

• Contract — where processing is necessary to provide the Services you have requested;
• Legitimate interests — to operate and improve our business and the Services, and to keep them secure;
• Consent — where you have given consent for a specific purpose (for example, marketing), which you may withdraw at any time;
• Legal obligation — where we are required to process data to comply with law.

5. How we share your information

We may share your information with:

• Service providers — trusted third parties who perform services on our behalf (for example, hosting, email delivery, analytics and payment processing), subject to contractual confidentiality and security obligations;
• Professional advisers — such as legal, accounting and audit professionals where necessary;
• Legal and regulatory authorities — where required by law, regulation or valid legal process;
• Business transfers — in connection with a merger, acquisition, reorganisation or sale of assets, in which case we will notify you where required.

6. Data retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, to meet our legal and regulatory obligations, or to resolve disputes. When data is no longer needed, we securely delete or anonymise it.

7. Data security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. These include encryption, access controls, and regular security reviews. No method of transmission over the internet is completely secure, but we work continuously to protect your data.

8. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your personal data;
• Object to or restrict certain processing;
• Request portability of your data;
• Withdraw consent at any time (without affecting lawfulness of prior processing);
• Lodge a complaint with a supervisory authority, such as the UK Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at hello@xega.dev.

9. Cookies and similar technologies

Our website uses cookies and similar technologies to ensure the site functions correctly, to remember your preferences and to understand how visitors use the site. You can control cookies through your browser settings. Essential cookies are required for the Services to operate.

10. International data transfers

We are based in the United Kingdom. Where we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your data.

11. Children's privacy

Our Services are intended for business use and are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the effective date. Your continued use of the Services after any changes constitutes acceptance of the updated policy.

13. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

XEGA
Milton Keynes, United Kingdom
Email: hello@xega.dev

Last updated: 26 October 2026