Privacy Policy

Important: Age and audience. XylaWorks is a career-intelligence and professional-development platform intended for users age 13 and older. It is not designed for children under 13. Users ages 13–17 and users who access XylaWorks through a school, college, university, workforce program, employer, nonprofit, or other sponsoring organization may be subject to additional safeguards, permissions, and contractual terms.

1. Scope and Who We Are

XylaWorks, Inc., a Texas corporation (“XylaWorks,” “we,” “us,” or “our”), operates a career-intelligence and professional-development platform. This Privacy Policy applies to www.xylaworks.com, the XylaWorks web application, XylaWorks mobile applications distributed through Google Play and the Apple App Store, and related APIs, cloud-hosted features, support channels, and services (collectively, the “Platform”).

This Policy explains what personal information we process, why we process it, the categories of service providers that may receive it, how long we retain it, and the choices and controls available to users.

Use of the Platform is also subject to our Terms of Service and End-User License Agreement. If you use XylaWorks through a sponsoring organization, additional contractual or privacy terms between XylaWorks and that organization may apply.

2. Information We Collect

2.1 Account, Eligibility, and Profile Information

• Account information: name, email address, authentication credentials, user/account identifiers, and account preferences. A phone number may be optional.
• Age-eligibility information: where needed to determine eligibility or apply age-appropriate safeguards, we may ask for an age, age band, date of birth, or an equivalent age-eligibility confirmation. We seek to minimize this information and, where feasible, retain only the age band or eligibility status rather than an exact date of birth.
• Profile information: optional profile details such as a biography and profile photo.

2.2 Career, Files, and User-Generated Content

• Career and professional information: resume or résumé content, work history, education, skills, certifications, awards, leadership or community activities, professional summaries, career interests, goals, assessment responses, and other information you choose to provide.
• Files and documents: documents you choose to upload, such as a resume or other career-related file.
• User-generated content: prompts, open-ended responses, selections, notes, feedback, survey responses, and other content you submit while using Platform features.
• Support and in-app communications: content you send to XylaWorks through support forms, an in-app support feature, email, or another support channel.

2.3 Transaction Information

We may receive purchase status, product or service purchased, transaction identifiers, purchase date and amount, and limited billing information from the applicable payment processor or app store. Web purchases may be processed by a web payment processor, while purchases made within a mobile app may be processed by Apple or Google where required by the applicable store rules. XylaWorks does not intentionally store full payment-card numbers, card security codes, or similar payment credentials.

2.4 Information Collected Automatically

• App and device information: app version, operating-system version, device type, browser type, language and time-zone settings, and app-installation or device-related identifiers used for Platform operation, diagnostics, analytics, security, or notifications.
• Usage and app-interaction information: screens or pages viewed, features used, navigation events, clicks or taps, session activity, and similar interaction information.
• Diagnostics and performance information: crash logs, error reports, diagnostics, latency, loading time, and other technical performance data.
• Server and security logs: IP address, timestamps, request information, authentication events, security events, and similar records used to operate, secure, and troubleshoot the Platform.
• Push-notification information: a push token if you choose to enable push notifications.

2.5 Photos

If you choose to add a profile photo, XylaWorks collects and stores the selected image as part of your account profile. A profile photo is optional. XylaWorks does not use profile photos for facial recognition, biometric identification, advertising, or career-intelligence analysis.

2.6 Information We Do Not Intentionally Collect From Your Device

The mobile application is not designed to collect contacts or address-book data, SMS or call logs, health or fitness data, biometric identifiers, installed-app lists, or precise GPS location. XylaWorks does not use advertising identifiers for behavioral advertising or cross-app tracking.

We do not intentionally derive or store a user location from IP address for location-based career recommendations or advertising. IP addresses may still be processed as part of ordinary networking, security, fraud-prevention, and server operations.

2.7 Information We Ask You Not to Provide

Unless XylaWorks expressly asks for it for a specific feature, do not upload or enter Social Security numbers, government-issued identification numbers, payment-card or bank-account credentials, passwords for other services, medical records, precise location histories, or other highly sensitive information that is not needed for career-intelligence functionality. If career materials incidentally contain sensitive information, consider removing it before upload unless it is necessary for the result you are requesting.

3. Sources of Information

We collect information directly from you, automatically from your use of the Platform, and from service providers that support Platform operations. We may also receive limited account, eligibility, entitlement, or sponsorship information from a school, college, university, workforce program, employer, nonprofit, or other organization that provides you access to XylaWorks.

4. How We Use Personal Information

Purpose	Examples of Information Used
Provide Platform functionality	Account information, age-eligibility status, career data, files, user-generated content, profile photo, transaction status
Create and manage accounts	Name, email, user ID, credentials, optional phone number, profile photo, age-eligibility status
Apply age-appropriate safeguards and legal requirements	Age or age band, eligibility status, account and consent records
Generate personalized career intelligence	Career/resume data, uploaded files, assessments, goals, prompts, and related user-generated content
Process and document purchases	Purchase history, transaction identifiers, limited billing information
Communicate with users	Name, email, push token, support communications
Protect the Platform and prevent misuse	User ID, login/security events, IP address, device/app identifiers, transaction and usage information
Measure and improve reliability	App interactions, crash logs, diagnostics, performance data, device/app information
Comply with law and agreements	Information reasonably necessary for the applicable legal or contractual purpose

We do not sell personal information. We do not use personal information for targeted or cross-context behavioral advertising, and the Platform does not serve third-party behavioral advertisements.

5. AI and Automated Processing

AI-assisted processing is a core part of XylaWorks career-intelligence functionality. We use career information, uploaded documents, assessment responses, goals, and related user content to generate analyses, recommendations, reports, and other Platform outputs.

5.1 Third-Party AI Processing

To provide AI-powered features, XylaWorks may transmit the content needed for a requested analysis to cloud infrastructure and contracted third-party AI service providers acting on our behalf. We require those providers to process the information only for the services they provide to XylaWorks and to protect it consistently with our contractual requirements and applicable law.

Under our service arrangements, XylaWorks does not authorize contracted AI providers to use identifiable XylaWorks user content to train their general-purpose foundation models.

5.2 Explicit Permission Before Third-Party AI Transmission

Before the mobile application first sends personal information or user-provided career content to a third-party AI provider, XylaWorks will present a clear disclosure describing the transmission and obtain explicit permission where required by applicable law or app-store rules. A user who declines that permission may be unable to use features that require third-party AI processing. Where required, the Platform will provide a way to review or withdraw that permission.

5.3 Users Under 18

For users under 18, XylaWorks does not authorize identifiable user content to be used to train general-purpose AI models. AI features for minors are made available only where the applicable service-provider arrangement permits the processing and the required age-appropriate safeguards, notices, permissions, and legal requirements are satisfied.

5.4 Platform Improvement

XylaWorks may use de-identified or aggregated information to evaluate Platform quality, security, reliability, and performance where permitted by law and applicable agreements. We do not use identifiable personal information from users under 18 or institution-sponsored student accounts to train general-purpose AI models.

5.5 Human Review and AI Limitations

Authorized personnel may conduct limited quality-assurance, security, troubleshooting, or support review when reasonably necessary. AI-generated outputs may contain errors, omissions, or bias and should be reviewed by the user. XylaWorks career intelligence supports career exploration and development; it does not make employment, admissions, credit, insurance, housing, or other legally significant decisions on behalf of third parties.

6. Service Providers and Other Disclosures

We use service providers to operate the Platform. Depending on the feature used, providers may support cloud hosting, AI processing, payment processing, app-store transactions, authentication, email or notifications, analytics, diagnostics, crash reporting, support, and security.

We require service providers to use personal information only for the contracted service, maintain safeguards appropriate to the information, and provide protections consistent with this Privacy Policy and applicable legal or platform requirements. We do not authorize service providers to sell personal information or use it for their own targeted advertising.

We may also disclose information when reasonably necessary to comply with law or valid legal process; investigate fraud, abuse, or security incidents; protect users or others; enforce agreements; complete a corporate transaction such as a merger or acquisition; or when you direct or consent to the disclosure.

7. Users Ages 13–17

XylaWorks is designed to support career exploration and professional development for users age 13 and older, including high-school students, dual-enrollment and early-college students, postsecondary students, workforce participants, professionals, and executives.

Users ages 13–17 may use XylaWorks where permitted by applicable law and the terms of any sponsoring organization. Depending on age, jurisdiction, method of access, and feature, a parent, guardian, educational institution, or other authorized organization may need to provide permission or authorization.

For users under 18, XylaWorks:

• does not use personal information for targeted or behavioral advertising;
• does not use advertising identifiers or restricted hardware identifiers for advertising or cross-app tracking;
• does not authorize contracted AI providers to use identifiable user content to train general-purpose AI models;
• does not use identifiable minor-user content to train general-purpose AI models;
• uses age-eligibility information only as reasonably necessary to determine eligibility, apply safeguards, and meet legal or platform requirements;
• limits collection to information reasonably related to Platform functionality, security, account management, requested personalization, and service reliability; and
• applies account and data-deletion controls subject to lawful or institution-directed retention obligations.

Parents, guardians, and educational institutions with questions may contact privacy@xylaworks.com.

8. Children Under 13

The Platform is not intended for children under 13. XylaWorks does not knowingly permit a child under 13 to create an ordinary consumer account or knowingly collect personal information directly from a child under 13 through an ordinary consumer account.

If we learn that such information was collected through an account that should not have been created, we will take appropriate steps to delete the information and close or restrict the account, subject to applicable law.

If XylaWorks later offers a separately configured service for children under 13 through a school or another authorized setting, that service will not launch until the required notices, contracts, safeguards, and consent or authorization mechanisms are in place.

9. Institution-Sponsored and Organization-Sponsored Users

Schools, colleges, universities, workforce programs, employers, nonprofit organizations, and other organizations may sponsor or provide access to XylaWorks. The applicable agreement may govern permitted uses, disclosures, retention, deletion, return of data, administrative access, and other privacy obligations.

Where XylaWorks processes education records, student information, or other protected information on behalf of a sponsoring organization, XylaWorks will process that information according to the applicable agreement and legal requirements. This Policy does not independently grant a sponsoring organization unrestricted access to a user’s private career content.

A sponsoring organization may provide account, eligibility, or entitlement information and may receive participation or outcome information when authorized by the applicable agreement, user permission, or law. Users should contact the sponsoring organization for questions about information that organization provides to or receives from XylaWorks.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, to comply with law, resolve disputes, enforce agreements, maintain security, and satisfy contractual obligations. Institution-sponsored retention may differ when an applicable agreement requires it.

Category	General Approach
Account/profile and age-eligibility information	While needed for the account and safeguards, plus a limited period after deletion where necessary for security, legal, or deletion-completion purposes
Career data, files, user content, and stored outputs	While needed to provide requested services, then deleted or de-identified following applicable deletion processes, subject to lawful exceptions
Transaction records	As needed for accounting, tax, chargeback, fraud-prevention, store reconciliation, and legal obligations
Crash, diagnostics, performance, and usage data	For a limited period reasonably necessary for reliability, analytics, security, and troubleshooting
Support communications	For a limited period reasonably necessary to resolve the request and protect legal rights
De-identified or aggregated information	May be retained where it can no longer reasonably be linked to an identifiable individual, subject to applicable law and agreements

11. Your Rights, Choices, and Consent

Depending on where you live and how you access XylaWorks, you may have rights to access, correct, delete, or obtain a copy of personal information; withdraw consent where processing is based on consent; and exercise other rights provided by applicable law.

• Account/profile controls: update supported account and profile fields.
• Optional profile photo and phone number: choose whether to provide them and remove them where supported.
• Push notifications: decline or disable them through the app or device settings.
• Files and career content: delete eligible content directly in the Platform or request deletion.
• AI permission: where permission is requested before third-party AI processing, decline or withdraw that permission. AI-dependent features may then be unavailable.
• Marketing communications: opt out of non-transactional marketing communications using the unsubscribe control or by contacting us. Account, security, transaction, and legal notices may still be sent when necessary.

We may verify identity before fulfilling certain requests. Rights may be subject to exceptions permitted by law.

12. Account and Data Deletion

XylaWorks provides two separate automated privacy controls: (1) deleting eligible data while keeping your XylaWorks account open, and (2) closing your XylaWorks account and deleting the personal data associated with that account. These actions are not the same. Deleting selected data does not close your account.

12.1 Delete Eligible Data Without Deleting Your Account

If you want to keep your XylaWorks account but remove eligible information, use the Privacy & Data controls in the Platform:

1. Sign in to XylaWorks in the mobile app or at https://app.xylaworks.com/.
2. Open Settings.
3. Select Privacy & Data.
4. Use the available data-management or deletion control for the information you want to remove and confirm the action.

Depending on the information and the current Platform features, eligible data may include uploaded files and documents, profile information or profile photo, career-profile information, assessment or open-ended responses, stored user-generated content, and other account content that the Platform allows you to manage separately.

Some information is necessary to maintain an active account or must be retained for transaction, security, fraud-prevention, legal, or institution-sponsored requirements. If you want to remove the account itself and all other account-associated data that XylaWorks is not required or permitted to retain, follow the account-closure process below.

12.2 Close Your Account and Delete Associated Data

Account closure is an automated deletion process. You can initiate it from the XylaWorks Platform without contacting customer support:

1. Sign in to XylaWorks in the mobile app or at https://app.xylaworks.com/.
2. Open Settings.
3. Select Close Account.
4. Select Close My Account.
5. Review the account-closure information and complete the confirmation steps presented by the Platform.

From a web browser, you may also go directly to https://app.xylaworks.com/settings/danger. If you are not signed in, XylaWorks may require you to authenticate before you can initiate deletion. You do not need to reinstall the mobile application to use this web-based deletion pathway.

After you confirm account closure, XylaWorks schedules the account and associated personal data for permanent deletion following a 30-day grace period. The account is pending deletion during that period; the process is not merely an indefinite deactivation or account freeze. When the deletion process completes, XylaWorks deletes account-associated personal data from active systems except for limited information that XylaWorks is required or permitted to retain.

Account-associated data subject to deletion generally includes the account and profile record, authentication/account identifiers under XylaWorks’ control, profile photo, uploaded files and documents, career-profile information, assessment responses, user-generated content, and stored Platform outputs associated with the account. XylaWorks also deletes or requests deletion of account-associated data held by service providers where required by our contracts, applicable law, and the services involved.

12.3 Information That May Be Retained After Account Deletion

Limited records may be retained when reasonably necessary for legal compliance, accounting and tax obligations, transaction reconciliation, chargebacks, fraud prevention, security, dispute resolution, enforcement of agreements, or an applicable institution-sponsored retention requirement. Such retention does not keep the XylaWorks account active. De-identified or aggregated information that can no longer reasonably be linked to you may also be retained as described in this Policy.

If an unusual technical or legal circumstance prevents the automated process from completing as described, contact privacy@xylaworks.com or support@xylaworks.com. Support is an exception path; it is not required for the ordinary in-app or web deletion process.

13. Mobile Application Data and Permissions

Capability	Purpose	User Choice
Internet access	Connect to XylaWorks services	Required for online Platform operation
Notifications	Account, security, transaction, service, and opted-in notifications	Optional; controlled through app/device settings
Files/documents	Select and upload a resume or career-related document	Optional; user-initiated
Photos	Select an optional profile photo	Optional; user-initiated

Where supported, XylaWorks uses system file or photo pickers rather than requesting broad access to a user’s file system or photo library.

14. Cookies, Analytics, and Tracking

The website and web application may use essential, functional, security, and analytics cookies or similar technologies. Mobile applications may use functionally similar technologies for authentication, session management, diagnostics, security, and analytics.

XylaWorks does not use personal information to track users across apps or websites owned by other companies for targeted advertising or advertising measurement and does not use mobile advertising identifiers for that purpose.

15. Security

We use administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, use, alteration, disclosure, or destruction. Measures include access controls, secure transmission, encryption at rest where supported by the applicable service, logging and monitoring, secure-development practices, and vendor-management controls.

No transmission or storage system can be guaranteed completely secure. Security concerns may be reported to security@xylaworks.com.

16. U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights, including rights to access, correct, delete, or obtain a portable copy of personal information and, where applicable, rights concerning sale, targeted advertising, or certain profiling.

XylaWorks does not sell personal information and does not process personal information for targeted or cross-context behavioral advertising. If a state privacy law applies to XylaWorks and grants you an additional right, submit a request to privacy@xylaworks.com.

Where applicable, California residents may exercise rights available under the California Consumer Privacy Act, as amended, and Texas residents may exercise rights available under the Texas Data Privacy and Security Act. Applicability and exceptions depend on the law and the circumstances.

17. Service Availability and International Access

XylaWorks is operated from the United States and is currently designed for U.S.-based services and organizations. If XylaWorks permits access from another jurisdiction, information may be processed in the United States and in locations where contracted service providers operate, subject to applicable legal requirements.

18. Changes to This Privacy Policy

We may update this Policy to reflect changes in Platform functionality, technology, legal requirements, contracts, or data practices. We will update the “Last Updated” date and provide additional notice when required. Where a change requires new consent or permission, we will request it before applying the changed processing to affected users.

19. Contact Us

XylaWorks, Inc.

Attn: Privacy

675 Town Center Blvd, Suite 200, Bldg 1A

Garland, TX 75040

Privacy: privacy@xylaworks.com

Support: support@xylaworks.com

Security: security@xylaworks.com

Website: https://www.xylaworks.com/