Legal
Effective date: 2026-04-25 · How we handle the information you share with Xpertyy.
When you create an account we collect your name, email, phone (optional), and any profile details you choose to share. When you book a session we collect payment details (processed by Stripe; we never see raw card numbers), the session brief you share with the expert, and the outcome notes the expert returns. Live sessions on the platform may be recorded if both parties opt in; recordings are stored encrypted and accessible only to the appointment’s participants.
We use the information to operate the platform: matching you with experts, processing payments and refunds, sending booking + reminder notifications, and supporting you with disputes or questions. We use anonymized aggregate data to improve the product (e.g. ranking, suggested experts).
When you book a session, the expert sees your name, your session brief, and any goals you have shared. Firms see the same plus a roll-up across the firm’s experts. We never share your personal information with third parties for marketing.
Card payments are processed by Stripe. Stripe stores card details under their own privacy policy and PCI-DSS compliance. Xpertyy retains only the brand + last 4 digits + expiry date so you can recognise saved cards.
Account data is retained while your account is active. After closure, transactional records (appointments, payments, invoices) are kept for 7 years to meet UAE legal and tax requirements; profile data and notification preferences follow the platform's configured deletion-retention schedule.
You may access, correct, or export your personal data at any time from Account settings. You may request deletion subject to the 7-year retention rule above. To raise a privacy concern, email privacy@xpertyy.com.
Your data is stored in the GCP me-central1 region (Doha, Qatar) by default. Some processors (Stripe, LiveKit) operate from other jurisdictions; transfers are protected by industry-standard contractual safeguards.
We use TLS in transit, encryption at rest, role-based access controls, audit logs on every sensitive action, and regular security reviews. No system is perfectly secure; we encourage strong passwords + 2FA.
Xpertyy is not intended for users under 18. We do not knowingly collect data from children.
Material changes will be notified by email at least 14 days before taking effect. The current version is always available at this URL.
