PRIVACY POLICY

XBoat Privacy Policy

Last Updated: May 30, 2025

1. Introduction

X Boat, LLC ("XBoat," "we," "us," or "our") respects your privacy and is committed to protecting it through our compliance with this Privacy Policy ("Policy"). This Policy explains how we collect, use, disclose, and protect information that relates to an identified or identifiable natural person ("Personal Data") when you interact with any XBoat hardware, firmware, mobile or web applications, cloud services, and related support offerings (collectively, the "Services"), including Elite and Pro platform subscriptions. This Policy applies to all users of the Services worldwide unless a more specific privacy notice applies.

2. Scope

This Policy covers Personal Data that we collect from:

Individuals who purchase or use XBoat products or Services on their own behalf or on behalf of an organization;
Visitors to our websites, portals, and mobile applications;
Athletes and other end users whose performance data is captured by XBoat sensors; and
Individuals who otherwise communicate with us, such as through customer support or events.

This Policy covers Personal Data that we collect from:

Individuals who purchase or use XBoat products or Services on their own behalf or on behalf of an organization;
Visitors to our websites, portals, and mobile applications;
Athletes and other end users whose performance data is captured by XBoat sensors; and
Individuals who otherwise communicate with us, such as through customer support or events.

3. Information We Collect

3.1 Information You Provide to Us

Contact details such as name, email address, mailing address, telephone number, and organization.
Account credentials, including usernames and hashed passwords.
Payment and billing information (processed by our PCI‑compliant payment processors).
Communications, feedback, and other information you provide when contacting support or participating in surveys.

3.2 Information We Collect Automatically

Device telemetry and performance data: sensor outputs, environmental readings, usage logs, fault codes, and firmware versions.
Usage data: timestamps, IP addresses, browser type, referring pages, and interactions within the mobile app or portal.
Cookies and similar technologies that recognize your browser or device and gather analytics about how you use our Services.

3.3 Information from Third Parties

Shipping carriers provide delivery status and tracking details.
Analytics and marketing partners supply aggregated insights.
If you authorize a third‑party integration, we may receive information from that service consistent with its own privacy policy.

3.1 Information You Provide to Us

Contact details such as name, email address, mailing address, telephone number, and organization.
Account credentials, including usernames and hashed passwords.
Payment and billing information (processed by our PCI‑compliant payment processors).
Communications, feedback, and other information you provide when contacting support or participating in surveys.

3.2 Information We Collect Automatically

Device telemetry and performance data: sensor outputs, environmental readings, usage logs, fault codes, and firmware versions.
Usage data: timestamps, IP addresses, browser type, referring pages, and interactions within the mobile app or portal.
Cookies and similar technologies that recognize your browser or device and gather analytics about how you use our Services.

3.3 Information from Third Parties

Shipping carriers provide delivery status and tracking details.
Analytics and marketing partners supply aggregated insights.
If you authorize a third‑party integration, we may receive information from that service consistent with its own privacy policy.

4. How We Use Information (Purposes & Legal Bases)

We process Personal Data for the following purposes and, where the General Data Protection Regulation (EU/UK) ("GDPR") applies, under the legal bases noted in parentheses:

To provide, operate, and support the Services, including provisioning hardware, authenticating users, and delivering firmware updates (Contract).
To monitor device performance, troubleshoot issues, and perform preventative maintenance (Legitimate Interests / Contract).
To improve our products and develop new features, including by creating aggregated, de‑identified analytics and benchmarks (Legitimate Interests).
To process payments, detect fraud, and manage orders (Contract / Legal Obligation).
To communicate with you about releases, security updates, and administrative messages (Legitimate Interests / Legal Obligation).
To send newsletters or marketing communications you opt into (Consent / Legitimate Interests).
To comply with applicable laws, regulations, and legal process, or to protect the rights, property, or safety of XBoat, our users, or others (Legal Obligation / Legitimate Interests).

We process Personal Data for the following purposes and, where the General Data Protection Regulation (EU/UK) ("GDPR") applies, under the legal bases noted in parentheses:

To provide, operate, and support the Services, including provisioning hardware, authenticating users, and delivering firmware updates (Contract).
To monitor device performance, troubleshoot issues, and perform preventative maintenance (Legitimate Interests / Contract).
To improve our products and develop new features, including by creating aggregated, de‑identified analytics and benchmarks (Legitimate Interests).
To process payments, detect fraud, and manage orders (Contract / Legal Obligation).
To communicate with you about releases, security updates, and administrative messages (Legitimate Interests / Legal Obligation).
To send newsletters or marketing communications you opt into (Consent / Legitimate Interests).
To comply with applicable laws, regulations, and legal process, or to protect the rights, property, or safety of XBoat, our users, or others (Legal Obligation / Legitimate Interests).

5. Sharing & Disclosure

We do not sell or rent Personal Data. We may disclose it:

To trusted service providers under written confidentiality agreements who perform services on our behalf (e.g., cloud hosting, payment processing, logistics, analytics). These providers may only use Personal Data as instructed by XBoat.
To affiliates within the XBoat corporate family who require it to provide the Services.
In connection with a business transaction such as a merger or acquisition, subject to customary confidentiality protections.
To competent law‑enforcement or regulatory authorities where required by law or to enforce our agreements, protect our rights, or investigate fraud or security issues.
With your consent or at your direction.
In aggregated or de‑identified form that cannot reasonably be used to identify you.

We do not sell or rent Personal Data. We may disclose it:

To trusted service providers under written confidentiality agreements who perform services on our behalf (e.g., cloud hosting, payment processing, logistics, analytics). These providers may only use Personal Data as instructed by XBoat.
To affiliates within the XBoat corporate family who require it to provide the Services.
In connection with a business transaction such as a merger or acquisition, subject to customary confidentiality protections.
To competent law‑enforcement or regulatory authorities where required by law or to enforce our agreements, protect our rights, or investigate fraud or security issues.
With your consent or at your direction.
In aggregated or de‑identified form that cannot reasonably be used to identify you.

6. International Transfers

XBoat is headquartered in the United States, and we may transfer your Personal Data to countries that do not offer the same level of data protection as your home jurisdiction. Where required, we use Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA), or rely on other approved transfer mechanisms to safeguard cross‑border data flows.

7. Data Retention

We retain Personal Data only as long as necessary for the purposes described in this Policy and to comply with our legal obligations, resolve disputes, and enforce our agreements. Telemetry and performance data are generally retained for the life of the subscription plus three (3) years, then either deleted or anonymized.

8. Security

We employ industry‑standard security measures designed to protect Personal Data, including encryption in transit and at rest, role‑based access controls, and regular penetration testing. No security system is perfect, and we cannot guarantee absolute security.

9. Your Privacy Rights

Depending on your jurisdiction, you may have rights to:

Access the Personal Data we hold about you and request a portable copy;
Correct inaccurate or incomplete data;
Request deletion of your data;
Object to or restrict our processing of your data;
Withdraw consent at any time, where processing is based on consent;
Opt out of marketing communications;
Opt out of the “sale” or “sharing” of Personal Data as those terms are defined under certain U.S. state laws.

To exercise these rights, email us at support@xboat.com. We will verify your identity before fulfilling the request and may deny requests where permitted by law.

Depending on your jurisdiction, you may have rights to:

Access the Personal Data we hold about you and request a portable copy;
Correct inaccurate or incomplete data;
Request deletion of your data;
Object to or restrict our processing of your data;
Withdraw consent at any time, where processing is based on consent;
Opt out of marketing communications;
Opt out of the “sale” or “sharing” of Personal Data as those terms are defined under certain U.S. state laws.

To exercise these rights, email us at support@xboat.com. We will verify your identity before fulfilling the request and may deny requests where permitted by law.

10. Children’s Privacy

Our Services are not directed to children under 13 (or the equivalent minimum age in the relevant jurisdiction). We do not knowingly collect Personal Data from children without appropriate parental consent. If you believe we have done so in error, please contact us and we will delete the information.

11. Changes to this Policy

We may update this Policy from time to time. We will post the revised Policy on our website and update the “Last Updated” date. If changes materially affect your rights, we will provide additional notice (e.g., by email or in‑app notification) and, where required, obtain your consent.

12. Contact Us

For questions or concerns about this Policy or our privacy practices, please contact us at:

Email: support@xboat.com
Mail: XBoat, LLC 56 Broad Street, Suite 14122 Boston, MA 02109 USA

If you are in the EEA or UK, you additionally have the right to lodge a complaint with your local supervisory authority or with the Irish Data Protection Commission.

For questions or concerns about this Policy or our privacy practices, please contact us at:

Email: support@xboat.com
Mail: XBoat, LLC 56 Broad Street, Suite 14122 Boston, MA 02109 USA

If you are in the EEA or UK, you additionally have the right to lodge a complaint with your local supervisory authority or with the Irish Data Protection Commission.

13. Additional Disclosures for California Residents

The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide California residents with specific rights regarding their Personal Data. XBoat does not “sell” or “share” Personal Data for cross‑context behavioral advertising. Section 9 describes how you may exercise your California privacy rights.

Stay Informed

XBoat is now available in limited quantities. Submit your email to receive product release announcements.

Contact