Privacy Policy
Last updated: June 2026
This Privacy Policy explains what data Xentral collects, how we use it, and the choices you have. We are committed to keeping your data private and your workspace isolated.
1. Who we are
Xentral provides a sales operating system for businesses in the UAE. For privacy questions, contact hello@xentral.ae.
2. Data we process
Account data: your name, email and login details.
Workspace data: the CRM records, messages, documents and files you create or import.
Connected-account data: email, WhatsApp and AI provider credentials you connect — encrypted and used only to operate the Service.
Usage data: logs and analytics needed to run, secure and improve the platform.
3. How we use data
To provide and operate the Service, authenticate users, send transactional emails, prevent abuse, and improve reliability and features.
We do not sell your personal data, and we do not use one customer's workspace data to benefit another.
4. Workspace isolation
Each company is a sealed tenant. Your contacts, mailboxes, numbers, keys and documents are accessible only within your workspace and to the users you authorise.
5. Sub-processors
We use reputable infrastructure and service providers (e.g. hosting, email delivery, and the AI/communication providers you connect) strictly to deliver the Service. Your own connected providers process data under their own terms.
6. Security
Sensitive credentials are encrypted at rest (AES-256-GCM). We apply access controls, role-based permissions and the principle of least privilege. No system is perfectly secure, but we work hard to protect your data.
7. Retention
We retain workspace data while your account is active and for a reasonable period afterwards so you can export it. You may request deletion of your personal data.
8. Your rights
Subject to applicable law, you may access, correct, export or delete your personal data. Contact hello@xentral.ae to make a request.
9. International transfers
Data may be processed in data centres operated by our infrastructure providers. We take steps to ensure an adequate level of protection wherever data is processed.
10. Changes
We may update this Policy; material changes will be notified in-app or by email.