Privacy Policy

XochiCraft

Effective Date: February 17, 2026

Last Update: February 17, 2026

This Privacy Policy describes how XochiCraft (“we,” “us,” or “our”) collects, uses, stores, and shares information when you access or use our website and services at https://xochicraft.com (the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

We collect information you provide directly, information collected automatically, and information generated through your use of the Service.

A. Personal Information You Provide

When you register for an account, use our Service, or contact us, we may collect:

First name
Last name
Email address
Phone number

B. Project Content and User-Submitted Data

XochiCraft is a project management platform. We collect and store information you input into the Service, including but not limited to:

Project names and descriptions
Tasks, deadlines, notes, and comments
Files and attachments uploaded into projects
Team and workspace information
Team and workspace information

C. Uploaded Images (Profile Pictures and Project Images)

Users may upload images to the Service, including:

Profile pictures
Images uploaded to projects as attachments or resources

Uploaded images are stored and displayed within the Service based on your account settings and workspace permissions. Depending on how the Service is used, your profile picture or uploaded project images may be visible to other users within your workspace, team, or project.

D. Preferences and Settings

We may store information about your preferences and settings, including:

Notification preferences
Account settings
Display and layout preferences
Saved configurations or workspace preferences

E. Automatically Collected Information

When you use the Service, we may automatically collect:

IP address
Device and browser information
Log data and timestamps
Pages visited and actions taken
General usage analytics
Referring website addresses

2. Cookies and Similar Technologies

We use cookies and similar technologies to support authentication, security, and user preferences.

A. Authentication Cookies

We use cookies or stored session data to:

Keep you logged in
Authenticate your account
Maintain secure sessions
Protect against unauthorized access

B. Preference Cookies

We may store cookies or local storage data to remember:

Your preferences
Your settings and configurations
Display and interface customization

C. Managing Cookies

You may disable cookies through your browser settings. However, disabling cookies may prevent key features from functioning properly, including login and account authentication.

3. How We Use Your Information

We use collected information to:

Create and manage user accounts
Provide project management tools and features
Store and display user projects and submitted content
Store and display uploaded images such as profile pictures
Authenticate users and maintain secure login sessions
Save and apply user preferences
Provide customer support and respond to requests
Send important account or service notifications
Improve our platform and develop new features
Monitor for fraud, abuse, and security threats
Comply with legal requirements

5. Data Retention

We retain personal information and User Content for as long as necessary to:

Create and manage user accounts
Provide project management tools and features
Store and display user projects and submitted content
Store and display uploaded images such as profile pictures
Authenticate users and maintain secure login sessions
Save and apply user preferences
Provide customer support and respond to requests
Send important account or service notifications
Improve our platform and develop new features
Monitor for fraud, abuse, and security threats
Comply with legal requirements

If you delete your account, we will delete or anonymize your personal information within a reasonable time unless we are legally required to retain it.

Project data and uploaded images may remain accessible to other workspace members if shared within a team environment, unless removed by the workspace owner, administrator, or you (depending on permissions).

6. Data Security

We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, misuse, or alteration.

However, no system is completely secure, and we cannot guarantee absolute security of your information.

7. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including the right to:

request access to personal data we hold about you
request correction of inaccurate data
request deletion of your personal information
request a copy/export of your information
object to or restrict certain processing

To exercise these rights, contact us at support@xochicraft.com.

8. California Privacy Rights (CCPA/CPRA Notice)

If you are a California resident, you may have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

A. Right to Know

You may request details about the personal information we collect, use, and disclose.

B. Right to Delete

You may request deletion of personal information we have collected about you, subject to certain exceptions.

C. Right to Correct

You may request that we correct inaccurate personal information.

D. Right to Opt-Out of Sale or Sharing

XochiCraft does not sell your personal information.

We also do not share your personal information for cross-context behavioral advertising.

E. Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights.

To make a request, contact us at support@xochicraft.com.

9. Children’s Privacy

XochiCraft is not intended for use by children under the age of 13, and we do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it.

10. International Users

If you access the Service from outside the United States, you understand and agree that your information may be processed and stored in the United States, where privacy laws may differ from your jurisdiction.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review third-party privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last Updated” date. Continued use of the Service means you accept the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or your personal information, contact us at: