Privacy

Public XIYA browsing does not require an account. If you choose secure submission, we store the account identifier, request content, consent version, matches and workflow status for review, assignment and follow-up. Anonymous visitors cannot read this data.

To understand acquisition, a secure request may store a sanitized source, campaign label and same-site landing pathname. URL query strings, search text, email and phone are never stored as attribution fields.

Customers can read only their requests. Suppliers can read only requests explicitly assigned by XIYA admin to an approved company membership. Supplier claims, business applications and profile changes are used for identity checks, moderation and record management; they are not published automatically.

Signed-in users may privately suggest missing providers. Business name, public source, category, reason and review status are visible only to the nominator and XIYA administrators. Signing in does not automatically upload a browser draft.

Signed-in users may privately report provider-record issues. Reports, evidence links and workflow status are visible only to the reporter and XIYA administrators; they are not displayed as public reviews.

XIYA may create in-app status notifications for an account. Notifications contain only a short progress summary and a same-site link, are visible only to the recipient and administrators, and users can modify only their own read timestamp.

Do not include unnecessary sensitive data such as identity documents, card details or health records in requests, reports or notes. You may contact XIYA to request correction or deletion of account-linked records.

Provider information supports discovery and comparison. XIYA platform signals do not mean government endorsement or guarantee service quality.