Privacy Policy
This Privacy Policy explains how CLOUDMEL LLC, a Wyoming limited liability company operating as “Xenovia” (“we,” “us”), collects, uses, and protects your information when you use xenovias.com and our services. For the purposes of the EU/UK GDPR, CLOUDMEL LLC is the data controller.
1. Information We Collect
Information you provide
- Account & contact: your email address and, if provided, name and company.
- Order & brief: the packages you buy and the project context, goals, and notes you submit.
- Communications: messages you send us.
Information collected automatically
- Usage & device data: basic log data such as pages visited and approximate location, used to operate and secure the site.
- Essential cookies: used to keep you signed in and to secure sessions.
Information from third parties
- Payment status: our payment provider confirms whether a payment succeeded. We do not receive or store your full card or account credentials.
2. How We Use Your Information
- To provide, deliver, and support the services you order.
- To communicate about your orders and respond to enquiries.
- To operate, secure, and improve our website and services.
- To comply with legal, tax, and accounting obligations.
3. Legal Bases (GDPR)
Where the GDPR applies, we rely on: performance of a contract (to deliver your order), legitimate interests (to secure and improve our services), consent (where required, e.g. optional marketing), and legal obligation (e.g. tax records).
4. Payment Data
Payments are processed by our third-party payment provider under their own terms and privacy policy. We never store your full payment card or account numbers on our systems.
5. Sharing & Service Providers
We do not sell your personal information. We share it only with service providers who process it on our behalf, including:
- Hosting & database (e.g. our cloud database and hosting providers) to run the site and store your account and orders.
- Payment provider to process transactions.
- Email provider to send transactional messages.
- Authorities where required by law.
6. International Transfers
We are based in the United States and our providers may process data in the US and other countries. Where we transfer personal data from the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.
7. Data Retention
We keep personal data for as long as needed to provide the services and to meet legal, tax, and accounting requirements, after which it is deleted or anonymized.
8. Security
We use encryption in transit, database-level access controls (row-level security), and least-privilege access to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.
9. Your Rights
Depending on your location, you may have the right to:
- GDPR (EEA/UK): access, correct, delete, restrict or object to processing, data portability, and withdraw consent. You may also lodge a complaint with your local data protection authority.
- CCPA (California): know what we collect, request deletion, and opt out of “sale” of personal information. We do not sell personal information. We will not discriminate against you for exercising your rights.
To exercise any right, contact hello@xenovias.com.
10. Cookies
We use only essential cookies required for authentication and security. We do not use advertising cookies.
11. Children
Our services are intended for businesses and are not directed to children under 16. We do not knowingly collect their data.
12. Changes
We may update this policy; the “Last updated” date reflects the latest version.
13. Contact
Privacy questions or requests: hello@xenovias.com, CLOUDMEL LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA.