Privacy Policy

01Who we are

Xioma Automotive Ltd. ("Xioma", "we") provides the Automotive Agentic Cloud Platform for automotive retail organizations. For data collected through this website, Xioma is the data controller. For customer data processed inside the platform on behalf of our clients, Xioma acts as a data processor under the applicable data-processing agreement.

Contact for privacy matters: [email protected].

02What we collect

• Contact and demo requests - name, business email, business type, segment and your message, used to respond to your inquiry.
• Recruitment - CV and application details you submit through the Join Us page.
• Technical data - IP address, browser type, pages visited and referring page, collected through cookies and similar technologies subject to your consent choices.

We do not knowingly collect data from children, and we do not sell personal data.

03Why we process it and on what legal basis

• Responding to inquiries and scheduling demos - our legitimate interest in serving prospective customers (GDPR Art. 6(1)(f)) and, where applicable, steps prior to entering a contract (Art. 6(1)(b)).
• Analytics and site improvement - only with your consent (GDPR Art. 6(1)(a)); you can withdraw it at any time via Privacy Settings in the footer.
• Legal obligations - retention and disclosure where required by law.

Providing personal data to us is voluntary; under Israel's Privacy Protection Law 5741-1981 (as amended, including Amendment 13) you are not legally required to provide it, and the purposes above define the scope of use.

04Cookies and consent

We use necessary cookies for the site to function (language preference, consent record) and, with your consent, analytics cookies to understand site usage. Marketing cookies are used only if you opt in. You can change your choices at any time via Privacy Settings.

05Sharing and international transfers

We share data only with service providers that support our operations (hosting, email delivery, CRM), under contracts that restrict their use of the data. Where data is transferred outside the EEA, Israel or your jurisdiction, we rely on appropriate safeguards such as EU Standard Contractual Clauses, transfers to jurisdictions with an adequacy decision (Israel holds EU adequacy status), or your explicit consent.

06Retention and security

We keep inquiry data for as long as needed to handle your request and for legitimate business records, then delete or anonymize it. We apply organizational and technical measures aligned with Israel's Privacy Protection (Data Security) Regulations 2017 and industry practice - encryption in transit, access controls and audit logging.

07Your rights

• EU/EEA (GDPR) - access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your supervisory authority.
• Israel (Privacy Protection Law) - the right to review data held about you (s.13), request correction or deletion of inaccurate data (s.14), and refuse direct-mail approaches (s.17F).
• US states (e.g. CCPA/CPRA) - the right to know, delete, correct, opt out of sale/sharing (we do not sell or share personal information as defined by the CCPA), and non-discrimination for exercising your rights.

To exercise any right, email [email protected]. We respond within the timeframe required by the applicable law.

08Changes

We may update this policy from time to time. Material changes will be highlighted on this page with an updated "last updated" date.