Privacy Policy

Welcome to XTEND Reality Expansion Ltd.’s (XTEND) website (the “Website”). XTEND (“we”, “us”, “our” or the “Company”) is committed to protecting your privacy. This Privacy Notice (the “Privacy Notice”), together with our Terms of Use available at www.xtend.me governs how we collect, process, use and transfer personal data in connection with our Services (as defined in the Terms of Use). This Privacy Notice applies to all users (“Users” or “you”) accessing or using the Services. Please note that this Privacy Notice applies to where XTEND acts as a Data Controller. Any processing of Personal Data which occurs in XOS and deployed product environments on behalf of customers is governed by contractual arrangements and is outside of the scope of this Privacy Notice.

“Users” of XTEND’s Website and/or Services may be (part or all):

Visitors (whether occasional or purposely), prospective customers or partners (“Visitors”) who visit or interact with our website, social media pages, participate in our events, online ads and content, emails or communications under our control;

Customers and/or partners (together “Customers”) who have engaged with XTEND, including prospective integration or technology partners applying to our XTEND Certified program, and their authorized users (“Customer Representative”), and visit and interact with our website;

Job Applicants (“Applicants”) who wish to apply for opening jobs and/or submitting their resumes to XTEND with respect to an opening.

We strive to make all Users’ experiences with our Services safe and satisfying. Your privacy is of utmost importance to us. In this Privacy Notice, we explain how XTEND collects and uses personal data, and for what purposes.

This Privacy Notice applies whenever you access XTEND’s Website and use XTEND’s Services. Any terms not defined in this Privacy Notice shall be given the meaning ascribed to them in the Terms and Conditions on the website: www.xtend.me

Please read this Privacy Notice before using XTEND’s Services, since by using XTEND Services, you express your agreement to this Privacy Notice. If you do not agree to the terms of this Privacy Notice, please do not use XTEND Website and/or Services. By using the Services, you acknowledge and freely agree that your personal data will be collected and processed as described in this Privacy Notice. You are not legally required to provide us with your Personal data. If you do not consent to the collection or processing of your Personal data, we may be unable to provide you with certain features of the Services, and in some cases, may be unable to provide access to the Services altogether.

For your convenience, below are highlights from our Privacy Notice:

• Personal data we collect, how we collect it, and why
• The legal basis for personal data processing done by our Services
• The use of such personal data and with whom we share it
• Your rights: How you can access, manage and update your personal data
• The choices you can make about how we collect, use, and share your personal data
• How we protect your personal data

If you do not want us to collect, store, use or share your personal data in the ways described in this Privacy Notice, you may not use XTEND Website and/or Services.

As part of providing XTEND Services, we will collect personal data to the extent necessary for providing the Services. Personal data may be collected, combined and used for the purposes of maintaining and developing XTEND Services, contacting Users, providing services and products, providing information regarding Company’s products, Customers’ support, managing Customer’s and/or Visitors’, sending information to Users, conducting research and creating reports for internal use and Customers’ use.

1. User Data: We collect User data through our Website when you interact with us, including when you submit information through our “Contact Us” forms, request a demonstration, subscribe to communications, or apply for employment, or apply to join our XTEND Certified partner program. The type and scope of personal data we collect depends on the nature of your interaction with us.

We may collect the following categories of personal data, as applicable:

Identification and Contact Information:

• Full name
• Email address
• Organization
• Job title
• Country
• Message

2. Visitors: When Users visit our Website, interact with or use our Services, we may collect or generate certain technical data about such Visitors. Such personal data is gathered by us independently or with the help of our service providers, including through the use of “cookies” and other tracking technologies (as further detailed in Section V below).

Such data mainly consists of technical or aggregated usage data, such as IP address, non-identifying data regarding a device, operating system and browser, location and language settings used. Such data mostly serves us to improve engagements, as well as the overall performance of our Services.

3. Customers: As an XTEND Customer or prospective customer or XTEND’s partner, you may wish to contact us through the means on our Website.

In such cases, you may need to provide us (not all details are mandatory):

• Full name
• Email address
• Organization
• Phone number

XTEND’s representatives will contact you following your approach and facilitate your request. In addition, the business organization you’re linked to (such as your employer), may be required to provide your email address. We are not responsible for any of the data provided by third parties, as such business organization. We take no responsibility for the accuracy or correctness of User personal data that the business organization may submit to XTEND or that you submitted to XTEND on its Website.

Upon request, we will remove any personal data that is claimed to infringe any of your rights and/or rights of a third party.

4. Job Applicants: Beside personal data generally collected regarding Visitors, Applicants wishing to send their resumes through our Website, shall provide us data directly and we will store such User personal data on our systems and use it if such applicant is found suitable for an opening job at XTEND. Applicant specific information may include:

• User full name
• User e-mail address
• User phone number
• Linkedin Profile URL
• Personal website and resume

5. Customer Support Correspondence: When you ask for help from our customer support team, we will collect and store the contact personal data you give them (generally, your name, business organization, and e-mail address) and information about your activity with XTEND Products. We may also store the communications you have with the customer support team and any personal data in those communications in order to provide support and improve XTEND services.

6. Partners (XTEND Certified Program): If you apply to join our XTEND Certified partner or integration program through our Website, we may collect your full name, email address, company name, country of registration, company website, a description of your intended integration or technology objectives, and any files or materials you choose to upload (such as a company overview). Because collaboration under this program typically involves an exchange of confidential information, you and XTEND will also be asked to enter into a non-disclosure agreement governing that exchange, which is a separate contractual arrangement outside the scope of this Privacy Notice.

The main use of the personal data we collect and store is to provide the Services through our Website, as well as providing a better service experience. Our legal basis for processing under the GDPR (where applicable) may include performance of a contract, our legitimate interests, compliance with legal obligations, and consent (where required by law).

Additional purposes for which we may collect and store your personal data include:

• Respond to your request, provide the Services and provide technical support and respond to User inquiries;
• To monitor and analyze the use of XTEND Services;
• To protect the safety and well-being of our Users;
• To protect XTEND’s rights and property in connection with the Services;
• To prevent fraud or potentially illegal activities, and to enforce the Terms of Service;
• To notify users of updates, new products or promotional offers;
• To comply with our legal obligations, resolve any disputes We may have with you or other users, and to enforce our agreements with third parties;
• To send communications and direct marketing;
• To conduct research;
• To improve and develop our Website and Services;
• To comply with regulatory and audit requirements;
• To handle complaints and manage legal claims;
• To verify your identity when you request to exercise your rights under applicable privacy laws;

Marketing Communications: We may send you marketing communications about our products, services, events, and updates where permitted by applicable law. Where required (including in the EEA and the United Kingdom), we will do so based on our legitimate interests or, where legally required, your consent. You may opt out of receiving marketing communications at any time by clicking the “unsubscribe” link in our emails or by contacting us at info@xtend.me. Please note that opting out of marketing communications will not affect service-related or transactional messages, such as responses to your inquiries, security notices, or contractual communications.

Service Communications: We use your personal data to communicate with you about the Services. If you provide your email address, we will use it to respond to inquiries and support requests, and to send service-related notices, security alerts, and administrative messages related to your account and use of the Services.

XTEND does not sell your personal data to any third party. XTEND uses certain advertising and analytics technologies on its Website, including the Meta Pixel and LinkedIn Insight Tag, which may constitute a “sharing” of personal data for cross-context behavioral advertising purposes under the CCPA/CPRA. These tags are gated behind our CookieYes cookie consent platform and will only fire after you provide consent; you may withdraw consent or opt-out of this sharing at any time through the CookieYes preference center. XTEND may transfer your personal data to its affiliates in the XTEND group, to provide you with better services and/or to provide you with additional offers related to your approach to XTEND (for example, if an Applicant asked to apply to a job opening, an Affiliate of XTEND may respond to such Applicant’s approach).

We and other service providers (for example, browser service provider as Chrome, Google, Safari), may use cookies, beacons, pixels, tags, and scripts, which are small pieces of data transferred to your computer for record-keeping purposes; and local shared objects, also known as flash cookies, which help us to reduce fraud, remember your preferences, speed up loading times, to optimize our offerings and marketing and personalized your experience of our Website.

We and our third-party service providers use cookies, web beacons, pixels, tags, scripts and similar tracking technologies (collectively “Cookies”) to collect and analyze technical data, personalize your experience, and enable core functionality of our Services.

These technologies may collect personal data such as:

• IP addresses.
• Device identifiers (including MAC Address, IDFA, and/or IMEI).
• Browser type and settings.
• Operating system details.
• Language preferences.
• Referring and exit pages/URLs.
• Usage data and browsing patterns of your browser types.
• Platform type.
• The amount of time spent on particular pages.

Non-essential cookies (such as analytics and advertising cookies) will be used only where required by applicable law and after you provide your consent through our cookie banner or preference settings, managed through our cookie consent management platform, CookieYes, which blocks non-essential cookies by default until you opt-in. You may manage your cookie preferences at any time as described in our Cookie Policy. You’re able to opt-out or change the use of cookies, by adjusting your browser/device settings (as applicable) and you may delete all/part stored cookies on your computer/mobile device. For additional information regarding our use of cookies and similar tracking technologies, including the types of cookies we use and how you can manage your preferences, please refer to our Cookie Policy.

Accessibility Tools: Our Website may also use an accessibility overlay tool (currently AccessiBe) that allows Visitors to select an accessibility profile (for example, tailored for visual, hearing, cognitive, or motor impairments) to adjust how the Website is displayed. Selecting a profile is optional and is not required to use the Website.

We may disclose aggregated data (data about you and other users collectively that is not intended to specifically identify you) and other non-personal data about our users for industry analysis, demographic profiling, marketing, analytics, and other business purposes.

Notwithstanding the foregoing, personal data may be disclosed to third parties if required under any applicable law or regulation or order by competent authorities, or in order to enforce the Terms and Conditions and to investigate possible infringing use of the Services.

Your personal data, and the contents of all of your online communications on the Website (as well as of your Authorized Users) and between you and us may be accessed and monitored by us or disclosed to a third party:

• If we have a good faith belief that we have to disclose the personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements, or legal process (for example, a court order, search warrant or subpoena);
• To satisfy any laws or regulations that apply;
• Where we believe that the Services are being used in committing a crime, including to report such criminal activity or to share personal data with other companies and organizations for the purposes of fraud protection, credit risk reduction, and other security precautions;
• When we have a good faith belief that there is an emergency that poses a threat to the health and/or safety of you, another person or the public generally; and
• If we become involved in a merger, acquisition, or any form of sale of some or all of our assets.
• To protect the rights or property of XTEND and applicable third parties, including to enforce the Terms and Conditions.
• We may share personal data with business partners where necessary to provide integrated services or joint offerings, subject to applicable data protection requirements.

In addition to the third-party disclosures described above, we may share your personal data with companies within the XTEND group:

• To provide and improve our Services;
• To respond to your inquiries and requests;
• To manage recruitment processes;
• To provide related products or services that may be of interest to you, where permitted by applicable law and subject to your communication preferences.

All such entities will process personal data in accordance with this Privacy Notice and applicable data protection laws.

We may share your personal data with third-party companies (such as Google Analytics, Google Tag Manager, Google Search Console, Microsoft Clarity, Sentry, Meta, LinkedIn, and AccessiBe, JIRA, Comeet, IT services, data storage etc.) to perform services on our behalf, such as analyzing data, hosting services, management of Applicant applications, communicating with our Customers through our customers portal or providing customer support and service. We contractually require these third-party service providers to maintain the confidentiality of the personal data we share with them, and we contractually require them to comply with applicable data protection laws as well as to not use your personal data for anything other than to provide services on our behalf. Some of our service providers may be located in jurisdictions outside your country of residence, and in such cases we ensure that appropriate safeguards are in place, as required by applicable law.

As a User of XTEND Services, you have a right to access, update and manage your own personal data under the applicable data protection laws. If you wish to exercise any of the rights defined below, please email us at info@xtend.me.

We may request additional personal data in order to verify your identity, in order to protect your personal data and prevent fraud or unauthorized access. Any identification data provided for verification purposes will be used solely for that purpose and will not be retained longer than necessary. We will respond to your request in accordance with applicable law. Please note that where requests are manifestly unfounded, excessive, or repetitive, we may refuse to act on the request or charge a reasonable fee, as permitted under applicable data protection laws.

EEA/UK Rights (GDPR):

If you are a GDPR or UK GDPR protected individual, the following rights will apply, subject to certain exceptions:

Accessing and Updating Your Personal data: You are entitled to obtain confirmation on whether or not we process personal data about you. You may also have information on our means of processing as well as a copy of the personal data undergoing processing.

We may charge a reasonable fee based on our administrative costs if you request further copies.

Right to rectify your data: You shall have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. You may have your incomplete data completed if you provide us with additional details or statements.

Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, as provided by applicable data protection laws. This may apply, for example, where you contest the accuracy of the personal data, where the processing is unlawful, or where you have objected to the processing and we are considering whether our legitimate grounds override yours.

Right to Object to Processing: You have the right to object to the processing of your personal data where such processing is based on our legitimate interests, for reasons relating to your particular situation. In addition, you have the right to object at any time to the processing of your personal data for direct marketing purposes, and in such case we will cease processing your personal data for such purposes.

Right to Data Portability: Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to request to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format, and to request that we transfer such personal data to another controller, where technically feasible.

Right to Withdraw Consent: Where we rely on your consent to process personal data, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Right to erasure: If you no longer want us to actively process your personal data, you can have us delete your personal data if:

• Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• If you withdraw your consent;
• If you object to the processing and there are no overriding legitimate grounds for the processing;
• The personal data have been unlawfully processed; or
• The personal data have to be erased for compliance with a legal obligation in applicable law.

Please note that certain records, for example those relating to payments or customer service matters, will be held for legal and accounting purposes.

If you are protected under the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with the competent supervisory authority in your place of residence, including in the United Kingdom, where applicable.

California Privacy Rights (CCPA/CPRA):

If you are a California resident, you may have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), subject to certain exceptions:

• Right to Know/Access: You may request that we disclose the categories and specific pieces of personal information we collected about you, the categories of sources, our business or commercial purposes for collecting, and the categories of third parties to whom we disclose personal information.
• Right to Delete: You may request that we delete personal information we collected from you, subject to applicable exceptions.
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale/Sharing/Targeted Advertising: Where applicable, you may request to opt out of the “sale” or “sharing” of your personal information (as those terms are defined under California law) and/or certain targeted advertising activities.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Requests may also be submitted by an authorized agent, where permitted by law. We will respond within the timeframes required by applicable law (generally within 45 days, and we may extend once where permitted).

Israeli Privacy Rights (Privacy Protection Law, 5741-1981, as amended, including by Amendment 13):

If you are protected under the Israeli Privacy Protection Law, 5741-1981, as amended (the “Privacy Protection Law”), you may have the following rights, subject to certain exceptions:

• Right to Access: You may request to review the personal data we hold about you.
• Right to Rectification: You may request that we correct personal data about you that is incorrect, incomplete, unclear, or outdated.
• Right to Erasure: You may request that we delete personal data about you where (i) the personal data is incorrect, incomplete, unclear, or outdated, or (ii) the personal data is no longer necessary for the purpose for which it was collected or otherwise processed and there is no remaining legal basis for its continued processing.
• Right to be Informed: You may request to know whether we hold personal data about you and, if held, request details regarding the databases in which such personal data is stored and the purposes of processing.

To exercise any of these rights, please contact us at info@xtend.me. We will respond within the timeframes required by applicable law.

Our Platforms and Services may contain links to third-party services, which are companies other than XTEND that may link to their own websites, online services or applications. We are not responsible for the privacy practices or the content of these third-party services. If you have any questions about how these third-party services use your personal data, you should review their policies and contact them directly. If we receive an inquiry relating to a third-party service, we will make reasonable efforts to direct you to the relevant third party, where appropriate.

Because the Services are provided by an Israeli company to Users worldwide, your personal data may be transferred to, stored, and processed in countries other than the one where you are located, including the United States, the European Union, Israel, and other locations as reasonably necessary for the proper performance and delivery of the Services, or as required by law. Regardless of where personal data is processed, we require it to receive a level of protection consistent with this Privacy Notice and applicable law.

XI.1 Transfers from the European Economic Area and the United Kingdom

Where personal data originating in the EEA is transferred to a country outside the EEA that the European Commission has not recognized as providing an adequate level of protection, the transfer is made subject to the European Commission’s Standard Contractual Clauses (“SCCs”). Where personal data originating in the United Kingdom is transferred to a country outside the UK that the UK Information Commissioner’s Office has not recognized as providing an adequate level of protection, the transfer is made subject to the UK’s International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses, as applicable).

XI.2 Transfers to the United States

Where personal data originating in the EEA or the United Kingdom is transferred to a U.S.-based recipient that is self-certified under the EU-U.S. Data Privacy Framework (and, where relevant, its UK Extension), the transfer is made pursuant to the European Commission’s adequacy decision for the Framework (Commission Implementing Decision (EU) 2023/1795) and the UK’s corresponding adequacy regulations, without the need for additional safeguards; where a U.S.-based recipient is not, or is no longer, so certified, the transfer is instead made subject to the Standard Contractual Clauses (or the UK International Data Transfer Agreement, as applicable).

XI.3 Transfers from Israel

Because XTEND is an Israeli company, any transfer of personal data out of Israel – including to the EEA, the UK, the United States, or elsewhere – is subject to the Privacy Protection Regulations (Transfer of Data to Databases Outside of the State of Israel), 2001. Unless an exception applies, under Regulation 2(4), we require the recipient of any such transfer to contractually commit to protections equivalent to those required under Israeli law, in addition to whatever mechanism described in Sections XI.1 or XI.2 above also applies to that transfer. Where personal data originated in the EEA and is transferred onward from Israel, the recipient must also commit to the obligations in the Privacy Protection Regulations (Instructions Regarding Data Transfers from the European Economic Area to Israel), 5783-2023 (the “EEA Transfer Regulations”).

In each case, we also require the recipient to apply appropriate technical and organizational security measures to protect the transferred data. You may request further information about, or a copy of, the specific safeguards described above by contacting us at info@xtend.me. For more information about how we protect personal data generally, please see Section XIII (Security of Your Personal Data).

We will not retain your personal data for longer than is necessary for the defined purpose of the processing of personal data or for legal requirements. Certain records, for example those relating to payments, will be retained for accounting purposes for six years after the end of the year during which the financial year ended.

We implement technical and organizational security measures to help protect the security of your personal data both online and offline. We take steps to ensure that your personal data is treated securely and in accordance with this Privacy Notice. These measures vary based upon the sensitivity of your data. Therefore, while we strive to protect your personal data, we implement appropriate technical and organizational security measures designed to protect it against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access, including:

• Password protection and access controls.
• Encryption of data in transit and at rest.
• Regular security assessments and audits.
• Employee training and confidentiality obligations.

While we take precautions against possible security breaches of XTEND Services and our customer databases and records, no website or Internet transmission is completely secure.  We cannot guarantee that unauthorized access, hacking, data loss, or other breaches will never occur, and we cannot guarantee the security of your personal data while it is being transmitted to XTEND Services and Website. Any transmission is at your own risk. If you have questions about the security of our websites, please contact us at info@xtend.me.

If we decide to make material changes to this Privacy Notice, we will tell you by placing a notice on our Website, or by sending you a notice to the e-mail address we have on file for you prior to the change becoming effective. You should periodically check our Terms and Conditions and this Privacy Notice for updates.

If you have any questions, comments or concerns regarding the Privacy Notice or practices, please send an e-mail to info@xtend.me.