Privacy Policy

Xenari Ltd ("we", "us", "our"), company number 17372098, operates Xenari, a property deal management platform. Our role in relation to personal data depends on whose data it is:

• For your own account and organisation data (name, email, billing, usage) — we are the data controller.
• For personal data about your investors, vendors, contacts and other individuals that you input into Xenari — you are the data controller and we are the data processor, acting only on your instructions. See our Terms of Service, Section 6, for the data processing terms that apply.

Xenari is used by property professionals and organisations internationally. Xenari Ltd is a UK company, and this policy is governed by UK data protection law (the UK GDPR and the Data Protection Act 2018), which forms our primary legal basis for processing personal data. If you are located outside the UK, you may have additional rights under your local data protection law; where applicable, we will honour equivalent rights on request.

Contact: dax@espaceproperty.com

We collect and process the following categories of personal data:

• Account data: your name, email address, and password when you register.
• Organisation data: business name, branding, and team member details.
• Deal and investor data: property details, investor names, email addresses, phone numbers, and documents you upload to Xenari.
• Payment data: subscription billing is handled by Paddle. We do not store your card details. Stripe processes investor payment links — card data is handled by Stripe directly.
• Usage data: pages visited, actions taken within Xenari, and device/browser information for security and improvement purposes.

We use your personal data to:

• Provide and operate the Xenari platform
• Process your subscription payments via Paddle
• Send transactional emails (deal pack requests, NDA signing links, payment confirmations)
• Respond to support requests
• Improve and develop the platform
• Comply with legal obligations

We process your data on the following legal bases under UK GDPR:

• Contract: processing necessary to provide the Xenari service you have subscribed to.
• Legitimate interests: improving the platform, preventing fraud, and ensuring security.
• Legal obligation: where required by applicable law.

We share personal data only with the following third parties as necessary to operate Xenari:

• Supabase — database and authentication hosting (EU/US)
• Vercel — application hosting (US)
• Paddle — subscription billing and Merchant of Record
• Stripe — investor payment link processing
• Resend — transactional email delivery
• OpenAI — used to generate property and deal-related content (listings, financial commentary, memoranda, comparable market research) from your deal and property data. This does not include your investor or contact records. If you use Xenari's AI chat assistant, the content you type into it — which may include personal data you choose to enter, such as investor details — is also sent to OpenAI for processing.

We do not sell your data to any third party.

We retain your account and deal data for as long as your account is active. If you close your account, we will delete your personal data within 90 days, except where we are required to retain it for legal or compliance purposes.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability

To exercise any of these rights, contact us at dax@espaceproperty.com. We will respond within 30 days.

Xenari uses essential cookies only — required for authentication and session management. We do not use advertising or tracking cookies.

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), access controls, and regular security reviews.

We may update this policy from time to time. We will notify you by email of any material changes. Continued use of Xenari after the effective date constitutes acceptance.

For any privacy questions or concerns, contact us at dax@espaceproperty.com.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.