Privacy Notice

Who Operates XveriTrade

Sosiale AI OÜ, registry code 17034664, operates XveriTrade and controls the service data described in this notice. Its correspondence address is Sigmaringer Str. 29, 70567 Stuttgart, Germany. The seller for new paid engagements is Sosiale AI OÜ. New paid engagements are on hold while our Estonian checkout is being finalized. Applications and fit calls remain free. Stripe processes checkout and billing data. Historical checkout records may identify Sosiale AI US LLC; those records remain separate and are not transferred to the Estonian entity merely by updating this notice. Privacy requests can be sent to the XveriTrade support address below.

What We Process

• Account identity, authentication state, contact details, and support messages.
• Founding sprint application contact, role, organization, supplier-range, workflow, scheduling, source-attribution, and delivery-status details. Abuse controls store a keyed pseudonymous network fingerprint rather than the raw network address.
• Public page-view analytics and field-free conversion events for application receipt, fit-question, and approved-list CSV actions. XveriTrade attaches no application fields, contact details, supplier rows, free text, or campaign parameters to those events.
• Approved-supplier-list builder entries stay in the visitor's browser and are not transmitted to or retained by XveriTrade. The generated CSV is downloaded directly to the visitor's device.
• Supplier profile fields, claim state, website URLs, and public provider signal summaries.
• Buyer approval policy versions, review outcomes, invite state, supplier evidence metadata, and private audit history.
• Provider connector status, provider evidence metadata, sync telemetry, and operational logs.
• Subscription status, company name, billing contact, billing address, tax identifiers, invoices, and payment-event metadata.

How We Use Data

XveriTrade uses data to authenticate users, run buyer-led supplier approval workflows, show provider-verified public signals, operate supplier connectors, protect access boundaries, investigate abuse, evaluate and respond to requested sprint applications, and respond to support or security requests. Privacy-minimal usage analytics measure public acquisition performance. A sprint application does not enroll the applicant in marketing email.

Public And Private Boundaries

The public signal board shows supplier identity fields and provider-verified aggregate signals that pass visibility rules. Buyer workspace records, approval decisions, invite state, supplier evidence metadata, connector credentials, and audit exports stay limited to authorized buyer, supplier, or ops flows.

Provider Connectors

Suppliers may connect provider accounts or restricted credentials they are authorized to use. XveriTrade stores connector credentials encrypted and uses them for provider evidence sync, connector health telemetry, and related audit events.

Payments

Stripe hosts the payment form and processes subscription payments. XveriTrade receives the billing and subscription records needed to activate service, reconcile invoices, handle support, and meet accounting obligations. XveriTrade does not receive or store the full payment-card number or card security code.

Sharing And Vendors

XveriTrade uses infrastructure, database, hosting and analytics, email, payment, tax-calculation, and provider-platform services to operate the product. Data may also be disclosed when required for security, legal process, abuse prevention, or protection of the service and its users.

Retention And Requests

Approval and audit records are retained for integrity, traceability, and security. Sprint application records are retained only while needed to evaluate the request, operate the sprint, prevent intake abuse, or meet legal obligations. Access, correction, deletion, or export requests can be sent to support@xveritrade.com. Some records may be retained where needed to preserve audit history, security logs, or legal obligations.