Privacy Policy

Last Updated: April 2026

How we handle and protect your global search data.

At XiaoFlow, we are committed to maintaining the trust of our visitors. In this Privacy Policy, we detail when and why we collect personal information, how we use it, and how we keep it secure.

1. Data Collection Protocols

We collect minimal personal identifiers during registration, primarily your email address and name. This data is essential for account management, authentication, and providing personalized search intelligence services.

2. Information Utilization

Your information is used solely to operate and provide the features of the XiaoFlow platform. This includes processing your keyword queries, managing your API credits, and sending critical service updates.

3. Data Security & Encryption

XiaoFlow employs enterprise-grade security measures. All sensitive data, including API keys and payment identifiers, are encrypted at rest using AES-256 and transmitted via secure TLS/SSL protocols.

4. Third-Party Integrations

We partner with Stripe for secure payment processing and Google for OAuth authentication. XiaoFlow does not sell, rent, or trade your personal information to third parties for marketing purposes.

5. User Rights & Data Portability

You have the right to access, correct, or delete your personal data at any time via your Member Control Panel (MCP). You may also request a copy of your stored data in a machine-readable format.

6. Cookies & Persistence

We use essential session cookies and local storage to maintain your authentication state and personalized interface preferences. We do not use tracking cookies for cross-site behavioral advertising.

7. Policy Revisions

XiaoFlow reserves the right to update this Privacy Policy to reflect changes in data practices. Material modifications will be notified via email or a prominent dashboard alert.

Privacy Inquiries

For any questions regarding your data or our protocols, reach out to our legal vector.

Contact Legal Support