Privacy Policy

Your Privacy is Our Priority

We are committed to protecting your personal information and app data. This policy explains how we collect, use, and safeguard your information.

Last updated: July 28, 2025

Introduction

MKSF LTD (“we,” “us,” or “our”) operates the xASO platform (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using our Service, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please discontinue use of our Service.

Information We Collect

Personal Information

  • Email address (through Google OAuth)
  • Full name (from your Google profile)
  • Profile picture/avatar URL
  • Account creation and last update timestamps

App and Usage Data

  • App Store IDs and metadata you provide
  • Keywords you add or analyze
  • Search queries and optimization requests
  • Usage analytics and feature interaction data
  • Device and browser information

Third-Party Data

  • Public app store data from Apple and Google
  • Market research data from SerpAPI
  • Industry benchmarks and competitive intelligence
How We Use Your Information

We use the information we collect for the following purposes:

  • Provide and maintain our ASO optimization services
  • Process your app analysis requests and generate AI-powered insights with Gemini 2.0 Flash
  • Authenticate your account and manage subscriptions
  • Process payments through Stripe (Pro and Enterprise plans)
  • Send service-related communications and updates
  • Improve our xASO algorithms and AI recommendation engine
  • Provide customer support and respond to inquiries
  • Detect and prevent fraudulent or unauthorized activities
  • Comply with legal obligations and enforce our terms
Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

  • Supabase: Database hosting and authentication services
  • Stripe: Payment processing for Pro and Enterprise subscriptions
  • SerpAPI: App store data collection and market intelligence
  • Google: Authentication services (OAuth)
  • Gemini AI: Advanced keyword analysis and AI-powered recommendations

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights and safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

Data Security

We implement appropriate technical and organizational measures to protect your information:

  • End-to-end encryption for data transmission
  • Secure database hosting with Supabase
  • Regular security audits and vulnerability assessments
  • Access controls and authentication requirements
  • SOC 2 compliance for enterprise customers
  • Data backup and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

  • Account Data: Retained while your account is active
  • App Analysis Data: Retained for service provision and improvement
  • Payment Records: Retained for 7 years for tax and compliance purposes
  • Usage Analytics: Anonymized and retained for product improvement

You may request deletion of your account and associated data at any time by contacting our support team.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Rectification: Request correction of inaccurate or incomplete information
  • Erasure: Request deletion of your personal information
  • Portability: Request transfer of your data to another service
  • Restriction: Request limitation of processing your information
  • Objection: Object to processing of your information for certain purposes

To exercise these rights, please contact us at the information provided below. We will respond to your request within 30 days.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

We ensure that such transfers are conducted in accordance with applicable data protection laws and that appropriate safeguards are in place to protect your information.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

MKSF LTD

Suite 8805 5 Brayford Square

London, E1 0SG

United Kingdom

Email: privacy@xaso.io