Privacy Policy

Last updated: Sep 1, 2026

Xoveni Privacy Policy

Last Updated: September 1, 2026

This Privacy Policy explains how Xoveni collects, uses, stores, discloses, and otherwise processes personal information when you access or use our website, client portal, social media marketing services, wallet, APIs, reseller and child-panel services, CRM tools, communication channels, automation features, support services, and other products or services made available through Xoveni (collectively, the “Services”).

Throughout this Privacy Policy, “Xoveni”, “we”, “us”, and “our” refer to the Xoveni platform and the operator of the Services.

This Privacy Policy applies to customers, website visitors, API users, resellers, child-panel operators, business users, support contacts, and other individuals whose personal information is processed through the Services.

By accessing or using Xoveni, you acknowledge that your personal information may be processed as described in this Privacy Policy.

Where applicable law requires consent for particular processing activities, we will obtain or rely on the appropriate consent before conducting those activities.

1. Information We Collect

We may collect personal information that you provide directly to us, information generated through your use of the Services, information received from payment providers and other third parties, and technical information automatically collected when you access Xoveni.
The specific information collected depends on the Services you use, the features you enable, your account type, your location, and how you interact with Xoveni.
You are responsible for ensuring that information you provide to Xoveni is accurate and that you are legally permitted to provide it.

2. Account Information

When you create or maintain a Xoveni account, we may collect information such as your name, username, email address, telephone number, country, preferred language, account settings, currency preferences, and other profile information.
We may also store account creation dates, login history, account status, customer level, referral information, reseller status, child-panel settings, and other account-related records.
Certain information may be required to create an account or access particular Services.

3. Authentication and Security Information

We may process information used to authenticate and protect your account, including password hashes, login tokens, session identifiers, two-factor authentication information, password-reset records, security events, and account-recovery information.
We may collect IP addresses, device identifiers, browser information, operating-system information, login timestamps, approximate location derived from IP address, and other technical information for security and fraud-prevention purposes.
We do not require your social media account password for ordinary SMM orders unless a specific feature expressly states otherwise.

4. Order and Service Information

When you place an order, we may collect and store information including the selected service, service identifier, quantity, target URL, username, profile URL, post URL, channel URL, order status, starting count, completion information, refill information, cancellation information, and other data necessary to process the order.
Information submitted as an order target may be visible publicly on the relevant third-party platform.
We may retain order history to provide customer support, resolve disputes, monitor service quality, prevent abuse, maintain accounting records, and operate the Services.

5. Payment and Wallet Information

We may collect information relating to deposits, wallet balances, credits, bonuses, refunds, payment status, transaction identifiers, payment method type, transaction amount, currency, payment date, and payment-provider information.
Payments may be processed by third-party payment processors, banks, cryptocurrency services, or other payment providers.
Xoveni generally does not receive or store complete payment-card numbers when card payments are processed directly by a third-party payment processor.
Payment providers may independently collect additional personal, financial, device, identity, or verification information according to their own privacy policies.
We may receive transaction confirmations, fraud indicators, payment status, partial card information, billing information, or other limited information from payment providers.

6. Identity and Verification Information

We may request additional information when reasonably necessary to verify identity, payment ownership, account ownership, business activity, suspicious transactions, refund requests, account recovery, reseller applications, or other higher-risk activity.
Verification information may include identification documents, business information, payment evidence, ownership information, or other documentation appropriate to the circumstances.
We will use verification information for security, fraud prevention, legal compliance, dispute resolution, and other purposes reasonably connected with the verification request.
You should not submit identification documents or other sensitive information unless Xoveni specifically requests them through an appropriate channel.

7. API Information

If you use the Xoveni API, we may process API keys, account identifiers, API requests, order requests, response data, timestamps, IP addresses, rate-limit information, authentication events, errors, webhook configuration, and other technical records.
API activity may be logged for security, troubleshooting, fraud prevention, service monitoring, billing, abuse prevention, and operational purposes.
You are responsible for protecting your API credentials and for personal information transmitted to Xoveni through your own API integration.

8. Reseller and Child-Panel Information

If you operate a reseller or child panel, we may process information relating to your reseller account, subscription, pricing settings, branding, domain, DNS configuration, customer accounts, staff accounts, service configuration, CRM configuration, wallet activity, and other panel settings.
Xoveni may process information about end customers of a reseller or child panel where necessary to provide the underlying infrastructure and Services.
Resellers are responsible for providing their own customers with appropriate privacy notices and for complying with applicable privacy and data-protection laws.
A reseller must not represent its own privacy practices as being those of Xoveni unless expressly authorized.

9. CRM and Unified Inbox Information

If you use Xoveni CRM or Unified Inbox features, information processed through those features may include names, usernames, email addresses, telephone numbers, social-media identifiers, message content, attachments, conversation history, support records, notes, tags, status information, and other customer or contact information.
CRM data may originate from Email, Web Chat, Support Tickets, WhatsApp, Facebook Messenger, Instagram, Telegram, or other supported communication channels.
The information available through a connected channel depends on the permissions, APIs, policies, and functionality made available by the relevant third-party provider.
Business users and resellers are responsible for ensuring that they have an appropriate legal basis to collect and process information relating to their own customers and contacts.

10. Communications and Support Information

When you communicate with Xoveni, we may collect and retain your messages, support tickets, emails, chat messages, attachments, screenshots, complaint information, refund requests, dispute information, feedback, and other communications.
We may use support communications to respond to requests, investigate problems, improve our Services, detect abuse, train support personnel, and maintain records of customer interactions.
Communications may be reviewed by authorized personnel where necessary to provide support or protect the Services.

11. Automatically Collected Technical Information

When you access Xoveni, we may automatically collect information such as IP address, browser type, browser version, device type, operating system, language, referring URL, pages visited, timestamps, session information, error logs, performance information, and approximate geographic information derived from network data.
We may also collect information about how you navigate and interact with the website or dashboard.
This information may be used for security, analytics, troubleshooting, performance optimization, fraud prevention, and improvement of the Services.

12. Cookies and Similar Technologies

Xoveni may use cookies, local storage, session storage, pixels, SDKs, and similar technologies to operate the website, maintain login sessions, remember preferences, protect accounts, measure performance, and understand how the Services are used.
Some cookies may be necessary for authentication, security, shopping-cart or wallet functionality, language settings, account preferences, or other essential Services.
Analytics or other optional technologies may be used where permitted by applicable law.
Where required, Xoveni may provide a cookie notice or consent mechanism allowing you to manage non-essential cookies.
Disabling certain cookies may affect the availability or functionality of parts of the Services.

13. Information From Third Parties

We may receive information from payment processors, hosting providers, security providers, analytics providers, communication platforms, API providers, upstream SMM providers, fraud-prevention services, resellers, referral partners, or other parties involved in providing the Services.
Information received from third parties may include transaction status, account identifiers, technical information, service-delivery information, fraud indicators, or other information relevant to your use of Xoveni.
Third-party services process information according to their own privacy policies and contractual obligations.

14. Third-Party Social Media Platforms

Orders submitted through Xoveni may reference accounts, profiles, posts, videos, channels, pages, groups, or other content hosted by third-party social media platforms.
Xoveni may access publicly available information from such platforms or receive information through providers or APIs where necessary to process orders or verify delivery.
Third-party social media platforms independently determine how they collect, use, and disclose information through their own services.
Xoveni does not control the privacy practices of Instagram, Meta, Facebook, TikTok, YouTube, Google, Telegram, Discord, X, LinkedIn, Twitch, or other third-party platforms.

15. How We Use Personal Information

We may use personal information to create and maintain accounts.
We may use personal information to authenticate users and protect account security.
We may use personal information to process orders and provide requested Services.
We may use personal information to operate wallets, payments, refunds, subscriptions, bonuses, and billing functions.
We may use personal information to provide API, reseller, child-panel, CRM, communication, automation, and support functionality.
We may use personal information to communicate with customers about accounts, transactions, orders, security incidents, service updates, and support requests.
We may use personal information to detect, investigate, and prevent fraud, chargeback abuse, account takeover, security threats, malicious activity, prohibited use, and violations of our policies.
We may use personal information to troubleshoot problems, monitor service performance, improve features, develop new functionality, and maintain system reliability.
We may use personal information to maintain accounting, transaction, security, legal, and operational records.
We may use personal information to comply with legal obligations and respond to valid legal requests.

16. Legal Bases for Processing

Where applicable data-protection law requires a legal basis for processing, Xoveni may process personal information because it is necessary to perform a contract with you or provide Services you request.
We may process information because it is necessary for our legitimate interests, including security, fraud prevention, service improvement, business administration, customer support, network protection, and enforcement of our Terms.
We may process information to comply with applicable legal obligations.
We may process information with your consent where consent is required or otherwise appropriate.
Where processing is based on consent, you may withdraw that consent subject to applicable law, although withdrawal does not affect processing that occurred before consent was withdrawn.

17. Service Providers and Processors

We may disclose personal information to vendors and service providers that assist us with hosting, cloud infrastructure, payment processing, security, analytics, email delivery, communications, customer support, fraud prevention, software services, databases, backups, and other operational functions.
Service providers are given access to information only to the extent reasonably necessary for the services they provide.
Where appropriate, service providers may be subject to contractual confidentiality, privacy, security, and data-processing obligations.
The specific providers used by Xoveni may change as our infrastructure and Services evolve.

18. Upstream SMM Providers

Xoveni may transmit information necessary to fulfill an order to one or more independent upstream providers.
Information transmitted may include the target URL, username, service identifier, quantity, order identifier, or other information required to process the requested service.
We generally seek to limit information transmitted to upstream providers to information reasonably necessary to fulfill or manage the order.
Upstream providers may maintain their own operational records and may be located in countries different from your own.

19. Payment Providers

Personal information necessary to process a payment may be transmitted directly to or processed by third-party payment providers.
Payment providers may perform fraud checks, identity verification, sanctions screening, risk analysis, authentication, or other processing independently from Xoveni.
Your use of a third-party payment method may also be governed by that provider's terms and privacy policy.
Xoveni is not responsible for the independent privacy practices of external payment providers.

20. Connected Communication Services

When you connect a third-party communication account or messaging channel to Xoveni, information may be exchanged between Xoveni and that service as necessary to provide the integration.
This may include access tokens, account identifiers, channel information, contact information, message content, attachments, and related metadata.
You are responsible for obtaining all permissions and authorizations necessary to connect and process information from third-party communication channels.
Revoking permissions through a third-party platform may limit or disable the corresponding Xoveni integration.

21. AI-Assisted Features

Xoveni may offer AI-assisted functionality for support, message drafting, conversation assistance, summarization, knowledge retrieval, automation, or other features.
Information submitted to an AI-assisted feature may be processed to generate the requested output.
Depending on the feature and technical configuration, information may be processed using third-party AI or infrastructure providers.
You should avoid submitting unnecessary sensitive personal information, confidential information, passwords, financial credentials, or other high-risk information into AI-assisted features.
AI-generated output may contain inaccuracies and should be reviewed before being relied upon.

22. Knowledge Base and RAG Data

If you upload documents, text, FAQs, files, or other information to a Xoveni knowledge base or retrieval-augmented generation feature, that information may be stored, indexed, embedded, searched, and retrieved as necessary to provide the feature.
You are responsible for ensuring that you have the legal right to upload and process information contained in your knowledge base.
You should remove information when you no longer have a lawful basis or right to process it.
Knowledge-base information may remain in backups for a limited period after deletion as part of standard backup and disaster-recovery processes.

23. Analytics and Service Improvement

We may analyze account activity, order patterns, technical logs, support interactions, feature usage, and other information to understand how Xoveni is used.
Analytics may be used to identify errors, improve usability, optimize service performance, measure feature adoption, detect abuse, and develop new products or functionality.
Where reasonably possible and appropriate, information used for statistical or analytical purposes may be aggregated or de-identified.
Aggregated or de-identified information that cannot reasonably identify an individual may be used for legitimate business purposes.

24. Marketing Communications

Where permitted by applicable law, Xoveni may send information about new services, product updates, promotions, discounts, bonuses, reseller opportunities, or other marketing communications.
Where consent is legally required, marketing communications will be sent only where the required consent has been obtained.
You may unsubscribe from marketing emails by using the unsubscribe mechanism provided in the communication or by adjusting available communication preferences.
Account, payment, security, order, legal, and service-related communications are transactional and may continue even if you opt out of marketing communications.

25. Disclosure for Legal and Security Purposes

We may preserve, access, or disclose information where reasonably necessary to comply with applicable law, regulation, legal process, court order, or valid governmental request.
We may disclose information where reasonably necessary to investigate fraud, security incidents, chargeback abuse, unlawful activity, threats, policy violations, or misuse of the Services.
We may disclose information where reasonably necessary to protect the rights, property, security, or safety of Xoveni, our users, providers, business partners, or other persons.
We may challenge or limit requests for information where we reasonably believe a request is invalid, excessive, or unlawful.

26. Business Transfers

Personal information may be transferred or disclosed in connection with a merger, acquisition, financing, restructuring, reorganization, sale of assets, transfer of business, bankruptcy, or similar corporate transaction.
Where required by applicable law, appropriate notice or other safeguards may be provided in connection with such a transfer.
Any successor operating the Services may continue to process information subject to applicable privacy obligations.

27. International Data Transfers

Xoveni operates online and may use service providers, payment providers, upstream providers, hosting infrastructure, communication services, or other partners located in multiple countries.
Your personal information may therefore be processed or stored outside the country in which you live.
Privacy and data-protection laws in another country may differ from those applicable in your location.
Where required by applicable law, Xoveni may use contractual safeguards, adequacy mechanisms, consent, or other legally recognized mechanisms for international data transfers.

28. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain account and transaction records, comply with legal obligations, resolve disputes, prevent fraud, protect security, enforce agreements, and support legitimate business purposes.
Different categories of information may be retained for different periods.
Account and order records may be retained after account closure where reasonably necessary for accounting, security, fraud prevention, chargeback defense, dispute resolution, or legal compliance.
Support, security, payment, API, and technical logs may be retained for periods appropriate to their operational purpose.
Information may remain temporarily in backup systems after deletion until those backups are overwritten according to standard retention cycles.
We may retain information longer where required by law, litigation, investigation, legal hold, unresolved dispute, or other legitimate necessity.

29. Data Minimization

Xoveni seeks to collect and process information that is reasonably relevant to the operation, security, improvement, and provision of the Services.
Users should avoid submitting unnecessary sensitive information when placing orders, contacting support, using CRM features, or configuring integrations.
Order forms should contain only information required by the selected service.

30. Data Security

Xoveni uses reasonable technical and organizational measures intended to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.
Security measures may include access controls, authentication, encryption where appropriate, secure infrastructure, monitoring, backups, fraud-prevention systems, and other safeguards.
Access to personal information may be restricted to authorized personnel and service providers who require access for legitimate operational purposes.
No internet transmission, storage system, software platform, or security system can guarantee absolute security.
You are responsible for protecting your password, API keys, devices, connected accounts, email account, and other credentials used to access Xoveni.

31. Security Incidents

If Xoveni becomes aware of a security incident affecting personal information, we may investigate the incident, contain the issue, restore affected systems, and take other reasonable remedial measures.
Where required by applicable law, we may notify affected individuals, regulators, or other authorities of qualifying personal-data breaches.
Users should promptly report suspected unauthorized access or account compromise to Xoveni Support.

32. Your Privacy Rights

Depending on where you live, you may have rights relating to personal information processed by Xoveni.
These rights may include the right to request access to personal information.
These rights may include the right to request correction of inaccurate or incomplete information.
These rights may include the right to request deletion of certain information.
These rights may include the right to request restriction of certain processing.
These rights may include the right to object to certain processing.
These rights may include the right to receive certain information in a portable format.
These rights may include the right to withdraw consent where processing is based on consent.
These rights may include rights relating to certain automated decisions where applicable.
Privacy rights are subject to applicable legal requirements, exceptions, identity verification, record-retention obligations, fraud-prevention needs, and other lawful limitations.

33. EEA, United Kingdom and Similar Data-Protection Rights

Individuals located in jurisdictions governed by GDPR-style data-protection laws may have rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent, subject to applicable limitations.
Where processing is based on legitimate interests, you may have the right to object to processing based on circumstances specific to you.
You may also have the right to lodge a complaint with an applicable data-protection authority.
The availability and scope of these rights depend on the law applicable to your circumstances.

34. United States State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.
Depending on the applicable law, these rights may include access, correction, deletion, portability, information about categories of personal information collected or disclosed, and rights relating to certain forms of targeted advertising, sale, or sharing.
Xoveni will process qualifying requests in accordance with applicable law and may request information reasonably necessary to verify your identity.
Authorized agents may submit requests where permitted by applicable law and where appropriate authorization can be verified.
Xoveni will not unlawfully discriminate against users for exercising applicable privacy rights.

35. Sale and Sharing of Personal Information

Xoveni does not disclose personal information to third parties merely in exchange for direct monetary payment for the personal information itself.
Certain uses of analytics, advertising, cookies, or similar technologies may be classified as a “sale”, “sharing”, or targeted advertising under some privacy laws even where no money is exchanged for personal information.
Where such laws apply and such technologies are used, Xoveni may provide legally required notices, consent mechanisms, or opt-out controls.
The availability of particular controls may depend on your jurisdiction and the technologies enabled on the platform.

36. Automated Decision-Making and Fraud Detection

Xoveni may use automated systems to identify suspicious logins, unusual payment activity, chargeback risk, API abuse, account takeover, fraudulent transactions, or other security concerns.
Automated risk signals may result in a transaction being delayed, additional verification being requested, or an account being temporarily restricted pending review.
Where required by applicable law, additional rights may apply to decisions based solely on automated processing that produce legal or similarly significant effects.
Xoveni may use human review where reasonably appropriate for significant fraud, account, or payment decisions.

37. Children's Privacy

Xoveni is not intended for children who are below the minimum age permitted to enter into a binding agreement under our Terms & Conditions.
Users must be at least eighteen (18) years old, or the age of legal majority applicable to them, unless applicable law expressly permits otherwise.
We do not knowingly seek to collect personal information from children in circumstances where doing so would be unlawful.
If you believe that a child has provided personal information to Xoveni in violation of applicable requirements, please contact us so the matter can be reviewed.

38. Third-Party Websites and Services

Xoveni may contain links to third-party websites, payment services, social networks, documentation, applications, or other external services.
This Privacy Policy does not govern information processed independently by those third parties.
You should review the privacy policies of third-party services before providing personal information to them.
Xoveni is not responsible for the independent privacy, security, or data-handling practices of third-party websites or services.

39. Reseller Privacy Responsibilities

Resellers and child-panel operators are responsible for determining and documenting how they process personal information relating to their own customers.
Resellers should maintain an appropriate privacy policy describing their own identity, purposes, legal bases, cookies, payment practices, customer communications, disclosures, and privacy rights where required.
Xoveni's Privacy Policy does not automatically replace the privacy policy required for a reseller's independent business.
Resellers must not collect or process personal information through Xoveni in violation of applicable law.
Where required, resellers are responsible for obtaining appropriate consent from their own customers.

40. Controller and Processor Roles

The legal role of Xoveni in relation to personal information may vary depending on the Service and the circumstances.
For information relating directly to a Xoveni account, payment, order, security, fraud prevention, or Xoveni's own business operations, Xoveni may determine the purposes and means of processing.
Where a reseller or business customer uses CRM, Unified Inbox, knowledge-base, communication, or similar functionality to process information relating to its own customers, that business may determine the purposes and means of such processing and Xoveni may process information on its behalf.
Specific contractual or data-processing terms may apply where required by applicable law.

41. Data Processing Agreements

Business customers or resellers that require a data processing agreement may contact Xoveni to determine whether appropriate data-processing terms are available for the relevant Services.
Additional terms may be required depending on the Services used, jurisdictions involved, nature of the data, and applicable law.
A data processing agreement does not alter a customer's responsibility to ensure that its own collection and use of personal information is lawful.

42. Privacy Requests and Identity Verification

Privacy requests may be submitted through Xoveni Support or the contact information listed in this Privacy Policy.
We may request information reasonably necessary to verify that the person submitting a request is the account holder or otherwise authorized to make the request.
Verification requirements may vary according to the sensitivity of the requested information and the nature of the request.
We may deny or limit a request where permitted by law, including where identity cannot reasonably be verified, the request is fraudulent or abusive, retention is legally required, or another lawful exception applies.
Where applicable law establishes a deadline for responding to privacy requests, we will seek to respond within the applicable period.

43. Account Closure and Personal Information

Closing your Xoveni account does not necessarily result in immediate deletion of all information associated with the account.
Information required for outstanding orders, payment disputes, refunds, chargebacks, legal obligations, fraud prevention, security investigations, accounting, or enforcement may be retained after account closure.
Information that is no longer reasonably required may be deleted, anonymized, or retained only as permitted by applicable law and our retention practices.

44. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Services, technology, business practices, legal requirements, payment methods, integrations, security measures, or privacy practices.
The latest version will be published on Xoveni with an updated “Last Updated” date.
Where required by applicable law, we may provide additional notice of material changes.
Your continued use of the Services after an updated Privacy Policy becomes effective will be subject to the updated policy, subject to any rights or consent requirements provided by applicable law.

45. Contact

Questions, concerns, or requests regarding this Privacy Policy or Xoveni's privacy practices may be submitted through the Xoveni support system.
Email: support@xoveni.com
Website: https://xoveni.com

Privacy Acknowledgment

By accessing or using Xoveni, you acknowledge that you have been provided with this Privacy Policy and understand that personal information may be collected, used, stored, disclosed, and otherwise processed as described above, subject to applicable law.