1. Information we collect
We collect information you give us directly, including:
- Account information — your email address, password (stored as a secure hash, never in plain text), optional username, display name, and profile avatar. If you sign up with Google, we receive your name, email, and profile photo from Google.
- Content you upload — photos and videos you add to your galleries, gallery names and cover images, captions, tags, comments, and reactions.
- Gallery & membership data — which galleries you create, join, or are invited to, and your activity within them (uploads, favorites, comments).
- Billing information — if you purchase additional storage or a paid plan, our payment processor handles your card details directly; we receive only your plan, purchase, and storage balance, never your full card number.
- Usage & device information — basic technical data such as your IP address, browser type, and log data, collected automatically to keep Xleria secure and working properly.
2. How we use your information
We use the information we collect to:
- Create and maintain your account and your galleries
- Let you upload, view, organize, and share photos and videos with people you invite
- Send account-related emails, such as email verification, password resets, and gallery invitations
- Process purchases of additional storage and manage your subscription plan
- Maintain the activity feed within galleries you belong to
- Detect, prevent, and address technical issues, abuse, or violations of our Terms of Service
- Improve and develop Xleria's features
4. Photos & galleries
Galleries on Xleria are private by default and only visible to members you approve or people who use a gallery's invite link. You control who you invite, and you can remove members, delete content you uploaded, or delete a gallery you own at any time. Deleting a gallery permanently removes its photos, videos, and comments from our systems.
5. Storage & security
Your photos, videos, and account data are stored on reputable cloud infrastructure with encryption in transit. We use industry-standard measures — including password hashing, secure tokens for email verification and password resets, and access controls limiting gallery content to its members — to protect your information. No method of transmission or storage is 100% secure, so we can't guarantee absolute security, but we work to keep your memories safe.
6. Data retention
We keep your account and gallery information for as long as your account is active. If you delete a photo, gallery, or your account, we remove the associated content from our active systems; some information may remain briefly in backups before it is fully purged, and we may retain minimal records where needed to comply with legal obligations or resolve disputes.
7. Your choices & rights
You can, at any time:
- Access and update your profile information from your account settings
- Leave a gallery you're a member of, or delete a gallery you own
- Delete individual photos or videos you've uploaded
- Permanently delete your account from your account settings, which removes your profile and the galleries you own
- Request a copy of, or the deletion of, your personal information by contacting us
Depending on where you live, you may have additional rights over your personal data under laws such as the GDPR or CCPA. Contact us to exercise these rights.
8. Children's privacy
Xleria is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
9. Changes to this policy
We may update this privacy policy from time to time. If we make material changes, we'll notify you by email or with a notice in the app. The "last updated" date at the top of this page always reflects the most recent version.
10. Contact us
If you have questions about this privacy policy or how we handle your information, reach us at support@xleria.com.