Privacy Policy
Last updated 18 October 2026
This policy explains what information Xymber collects, why, and what you can do about it. Xymber is run by Xymber, Dubai, United Arab Emirates. Questions about privacy: hello@xymber.com.
Who this is about
Businesses that sign up to Xymber (“you”), and their customers, whose details a business adds to Xymber to send them quotes and records. For customer details, the business decides what to add and why; Xymber stores and processes them on the business's behalf.
What we collect
- Your account: your name, email, password (stored only as a secure hash), business name, type of business, phone and WhatsApp number, and any address, tagline or TRN you add.
- What you put into Xymber: customers' names, mobile numbers, emails and areas; leads, quotes, items and prices; service, order or appointment records; QR codes and links. Contacts are imported only when you pick them or upload a file.
- Usage: the days you use Xymber and key actions (for example “quote created”), so we can support you and improve the product. These records do not include your customers' details.
- When customers open a link: the time, the browser type, and a one-way scrambled code made from their network address, so a business can see that a quote was opened without counting the same person twice. We do not store the address itself.
- How you found us: if you arrive from an ad or another site, we note the source (for example “google” or an ad campaign name) with your sign-up.
How we use it
- To run the service: create quotes and links, show records to the right people, send password-reset emails.
- To support you and keep your account in good standing, including trials and payments.
- To understand which of our ads and pages work, using totals rather than looking at individuals.
We do not sell personal information, and we do not message your customers ourselves. Messages to customers go from your own WhatsApp.
Cookies and similar
Xymber stores a sign-in token and the ad source in your browser's storage. If we run advertising, our pages may also load Google's tag or Meta's pixel, which use cookies to measure whether ads lead to sign-ups. You can block these in your browser settings; Xymber still works without them.
Who else handles data
We use trusted providers to run Xymber: cloud hosting and database (Railway), email delivery for password resets (Resend), and, if enabled, ad measurement (Google, Meta). They process data only to provide their service to us. Some of them may store data outside the UAE.
How long we keep it
While your account is open. If you ask us to close your account, we delete your business's data within 30 days, except what we must keep for legal or accounting reasons.
Your choices and rights
- You can view and correct your business details and your customers' details in the app at any time.
- You can ask us for a copy of your data, or to delete it, by emailing hello@xymber.com.
- If you are a customer of a business that uses Xymber, contact that business first; you can also contact us and we will pass your request on.
Keeping it safe
Connections are encrypted, passwords are hashed, each business can only see its own data, and customer links use long random codes. No system is perfectly secure, so please use a strong password and keep it private.
Changes
If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.