privacy

This Privacy Policy explains how xBot ("we", "us", "our") collects, uses, stores, and protects information from users of the xBot Software and the website playwithxbot.com. We process personal data in accordance with Brazil's General Data Protection Law (LGPD) and, where applicable, the EU GDPR.

1. Data we collect

1.1 Data you provide

Email and password — to create your account (managed by Firebase Authentication / Google);
Payment information — processed by Paddle; we never receive or store your card details.

1.2 Data collected automatically

Firebase UID — a unique identifier generated by Firebase;
Subscription tier — "free" or "premium", stored in Firestore;
Server usage logs — IP address, timestamp, and endpoint accessed (standard web-server logging);
WordPress cookies — used for sessions and basic analytics.

1.3 Processed locally, not collected by us

The xBot Software runs on your computer. The following are processed locally on your device and are not transmitted to or stored by us:

Screen captures used by the image-recognition (computer vision) features;
Your game or Xbox platform data;
Your macros, profiles, and input sequences;
Any third-party content visible on your screen.

The remote-control and streaming features connect directly between your own devices (peer to peer) and do not route your gameplay video through our servers.

2. How we use your data

Authentication and access control (Firebase Auth);
Subscription and payment management (Paddle);
Communicating important Software updates;
Aggregated usage analysis to improve the product.

3. Data sharing

We share your data only with the service providers needed to run xBot:

Google / Firebase — authentication and database (USA);
Paddle.com — payment processing and as Merchant of Record (UK / USA);
Cloudflare — CDN and site protection.

We do not sell your personal data to third parties.

4. Cookies

We use essential cookies to:

Keep you signed in on the website;
Remember basic browsing preferences;
Securely process the Paddle checkout.

You can disable non-essential cookies in your browser settings. Doing so may prevent the checkout from working.

5. Data retention

We keep your data while your account is active. When you request account deletion, we remove your data within 30 days, except where the law requires longer retention (e.g., tax records of transactions).

6. Your rights (LGPD / GDPR)

You have the right to:

Access the data we hold about you;
Correct inaccurate data;
Request deletion of your account and data;
Data portability;
Withdraw consent at any time.

To exercise these rights, email support@playwithxbot.com.

7. Security

We apply technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), expiring Firebase tokens, and restricted database access via Firestore Security Rules. No method is 100% secure; in the event of a breach, we will notify affected users as required by law.

8. Children

xBot is not intended for anyone under 18, and you must be of legal age to purchase a subscription. We do not knowingly collect data from minors.

9. Changes to this Policy

We may update this Policy from time to time. The "last updated" date at the top indicates the current version. Continued use of the Software after changes constitutes acceptance.

10. Contact

Privacy questions or requests: support@playwithxbot.com.

Data controller: xBot, operated by Rodrigo Bertoldi, Brazil.