{"success":true,"data":{"slug":"terms-of-service","title":"Terms and Conditions","updatedAt":"2026-05-22T04:28:33.793Z","metadata":{"platformName":"XELTA PLATFORM","documentTitle":"Terms and Conditions of Use","version":"3.0","lastUpdated":"April 15, 2026","applicableRegions":["United States","European Union / Ireland","United Arab Emirates","GCC","United Kingdom","Worldwide"],"contact":"support@xelta.ai","website":"www.xelta.ai"},"notices":[{"type":"legal","title":"IMPORTANT LEGAL NOTICE","content":"Please read these Terms carefully before using the Xelta platform. By accessing or using any part of the Services, you agree to be bound by all provisions herein. These Terms constitute a legally binding agreement between you and Xelta."},{"type":"arbitration","title":"ARBITRATION NOTICE","content":"By agreeing to these Terms, you and Xelta agree to resolve most disputes solely on an individual basis and not as a class arbitration, class action, or representative proceeding. See Section 19 for full details including opt-out instructions."}],"sections":[{"number":1,"title":"Introduction","content":"These Terms and Conditions (\"Terms\" or \"Agreement\") govern your access to and use of the Xelta platform, including all associated websites, web and mobile applications, APIs, AI models, automation tools, digital infrastructure, and services (collectively, the \"Services\"). Xelta is an AI-powered technology platform providing a comprehensive suite of capabilities including but not limited to:\n\n• AI content generation, intelligent writing, and text automation tools\n• Image editing, enhancement, and AI image generation\n• Video generation, synthesis, editing, and processing tools\n• Automation workflows and process orchestration engines\n• AI agents, conversational bots, and voice automation\n• Business productivity and enterprise workflow tools\n• AI Studio and digital media asset management\n• APIs, SDKs, and developer integration services\n\nBy accessing or using the Services, creating an account, subscribing to a plan, or purchasing credits, you acknowledge that you have read, understood, and agreed to be legally bound by these Terms, our Privacy Policy, our Acceptable Use Policy (https://xelta.ai/legal/acceptable-use), and any supplemental policies incorporated herein by reference.\n\nWe may make changes to these Terms. The \"Last Updated\" date above indicates when these Terms were last changed. If we make future changes, we will provide you with notice such as by sending an email, providing a notice through our Services, or updating the date at the top of these Terms. Your continued use of our Services after we provide notice will confirm your acceptance of the changes. If you do not agree to the amended Terms, you must immediately stop using our Services."},{"number":2,"title":"Defined Terms","content":"Capitalized terms have the meanings provided below or as otherwise defined in these Terms.\n\n• \"Platform\" means the Xelta website, applications, APIs, SDKs, and all associated services.\n• \"User\" or \"you\" means any individual or legal entity accessing, registering for, or using the Platform, whether on a free or paid basis.\n• \"Customer\" means a User who has agreed to these Terms for personal or internal business use.\n• \"Business User\" means a User accessing the Platform on behalf of a company, organization, or legal entity.\n• \"Customer Solution\" means your product or services that integrate or interface with the Services through APIs and is made available to your End Users.\n• \"End Users\" means your end user customers who use the Customer Solution.\n• \"Customer Input\" means any text, images, audio, video, prompts, data, files, or other materials submitted by Users through the Platform.\n• \"Output Content\" or \"Generated Content\" means any data, text, sound, video, images, media, or other content produced by the AI services in response to Customer Input.\n• \"Credits\" means the usage units required to operate AI workflows, purchased or allocated as part of a subscription or one-time purchase.\n• \"Usage Data\" means anonymized or aggregated data collected, computed, originated, or stored by Xelta resulting from use of the Services, which may include data based on or derived from Customer Input.\n• \"Personal Data\" means any information that identifies or can be used to identify a natural person, as defined under applicable data protection legislation.\n• \"Subscription\" means a recurring paid plan providing access to specified Services for a defined period.\n• \"Term\" means the period during which you have an account with us and are allowed to access and use the Services.\n• \"Documentation\" means any user manuals, API materials, and other instructional or technical materials relating to the Services provided in electronic form or via the Sites.\n• \"Third-Party Materials\" means third-party products and services that the Platform may integrate with, including cloud storage, communications technologies, ML models, and payment services."},{"number":3,"title":"Eligibility and Legal Capacity","content":"To access or use the Platform, you must:\n\n• Be at least 18 years of age, or the age of legal majority in your jurisdiction, whichever is higher.\n• Possess full legal capacity and authority to enter into a binding agreement.\n• Not be subject to trade sanctions, export restrictions, or equivalent regulatory prohibitions imposed by the US, EU, UAE, or any other applicable authority.\n• Not have been previously suspended or permanently banned from the Platform.\n• Comply with all applicable laws, regulations, and ordinances in your jurisdiction.\n\nIf you are a parent or guardian and believe your child under 18 is using our Services without your consent, please contact us at support@xelta.ai immediately.\n\nIf you are accessing the Services on behalf of a company, organization, government body, or other legal entity, you represent and warrant that you have authority to legally bind such entity to these Terms. In such cases, \"you\" shall refer to both the individual and the entity.\n\nIf you are a Customer with a Customer Solution for your own End Users, or if you create a Team Organization account, you are responsible for ensuring that your End Users are at least 18 years of age (or the age of legal majority in the applicable jurisdiction)."},{"number":4,"title":"Account Registration, Teams, and Security","subsections":[{"number":"4.1","title":"Account Creation and Accuracy","content":"You must create a registered account to access certain features. By registering, you agree to provide accurate, current, and complete information and to maintain its accuracy throughout your use of the Platform. Providing false or misleading information may result in immediate suspension or termination.\n\nYou may not share or permit others to use your individual account credentials. You must use a strong password for your account. We reserve the right to reject, require that you change, or reclaim usernames, including on behalf of businesses or individuals that hold legal claim in those usernames."},{"number":"4.2","title":"Team Organization Accounts","content":"Xelta may allow you to create a \"Team Organization\" account to which you can invite team members who will create their own individual accounts associated with the Team Organization for centralized billing and Services access. As Team Organization administrator, you agree that:\n\n• You are responsible for your use of the Services and for your team members' use of the Services.\n• You are responsible for ensuring each team member accepts Xelta's Privacy Policy and agrees to comply with these Terms, including the Acceptable Use Policy.\n• You are responsible for ensuring team members are eligible to use the Services, including age requirements.\n• You will cooperate in good faith with Xelta's response to actual or suspected violations by team members, including by providing information about individual accounts and immediately suspending or terminating accounts when directed by Xelta."},{"number":"4.3","title":"Account Security","content":"You are solely responsible for: (a) maintaining strict confidentiality of your login credentials, API keys, and authentication tokens; (b) restricting access to your account; (c) all activities and charges incurred under your account; and (d) immediately notifying Xelta at support@xelta.ai upon discovery of any unauthorized access or suspected breach of your account.\n\nWe will not be liable for any loss or damage arising from your failure to comply with this section, including losses resulting from unauthorized use of your account."}]},{"number":5,"title":"Services, AI Features, and License Grant","subsections":[{"number":"5.1","title":"License Grant","content":"Subject to your payment of the required fees or credits, Xelta grants you a limited, non-exclusive, non-transferable, revocable right to access and use the Services in accordance with these Terms and applicable Documentation for your own personal or internal business use. Xelta will use commercially reasonable efforts to provide the Services in material conformance with these Terms."},{"number":"5.2","title":"API and Customer Solution Access","content":"If your use case involves accessing the Services through a Customer Solution using Xelta APIs:\n\n• Xelta grants you a limited, worldwide, non-exclusive right to (a) access and use the Services through an integration with the Customer Solution using Xelta-approved APIs; (b) use the Documentation in connection with the Services; and (c) allow End Users to access the Services through the Customer Solution in accordance with these Terms.\n• The API license is non-transferable and non-sublicensable, granted solely to develop an interface or integration and to provide Customer Input and obtain Output Content.\n• Xelta may limit API calls if the volume is excessive, constitutes abusive usage, or interferes with the proper functioning of the Services.\n• You will not expose any Services APIs directly to any End Users.\n• Your or your End Users' use of API services is governed by our API Services Supplemental Terms at https://xelta.ai/legal/api-terms.\n• Your or your End Users' use of compute infrastructure services is governed by our Compute Infrastructure Supplemental Terms at https://xelta.ai/legal/compute-terms."},{"number":"5.3","title":"AI Features and Output Content","content":"The Services provide AI content generation features (\"AI Features\") that allow submission of Customer Input as prompts and generate Output Content based on those prompts. You acknowledge that:\n\n• AI outputs are generated using probabilistic algorithms and may vary with each generation.\n• Output Content may not be unique across users, and the AI Features may generate the same or similar content for other users.\n• The AI Features are not error-free, may not work as expected, and may generate incorrect, inaccurate, or fabricated (\"hallucinated\") information.\n• Xelta does not represent, warrant, or covenant that any Output Content will be original, will not infringe third-party rights, or will be suitable for any particular purpose.\n• Use of Output Content is at Customer's sole risk.\n\nXelta may make commercially reasonable updates to the Services from time to time. Such updates will not result in a material adverse impact to your use of the Services."}]},{"number":6,"title":"Customer Input and Use of Services","subsections":[{"number":"6.1","title":"License to Customer Input","content":"Customer grants Xelta a non-exclusive, non-sublicensable, royalty-free license to reproduce, use, access, store, display, adapt, translate, modify, create derivative works from, and otherwise process any Customer Input to provide the Services."},{"number":"6.2","title":"Customer Ownership of Input","content":"Subject to the license granted to Xelta, Customer owns and retains all right, title, and interest in and to the Customer Input."},{"number":"6.3","title":"Usage Data","content":"Customer acknowledges and agrees that Xelta may generate, collect, store, use, transfer, and/or disclose to third parties Usage Data and use Usage Data to: perform data analytics; monitor, improve, and support the Services; design, develop, and offer Xelta products, services, and AI models; and for any other lawful purposes. Xelta owns and retains all rights to Usage Data, and no rights are granted to Customer there in, Your creation will be stored temporarily and automatically removed after 1 week."},{"number":"6.4","title":"Customer Representations and Responsibilities","content":"Customer acknowledges that Customer (not Xelta) has control over Customer Input. Customer represents and warrants that it has all rights, consents, licenses, and permissions necessary to grant the license in Section 6.1 and to provide Customer Input to Xelta. Customer will:\n\n• Not upload content protected by copyright, privacy rights, or intellectual property rights without obtaining the owner's permission.\n• Not upload any illegal content and will comply with all applicable laws including data privacy and the transmission of personal data.\n• Be solely responsible for ensuring that Customer and Xelta, acting on Customer's behalf, have the right to collect, store, use, process, and share Customer Input in connection with the Services."},{"number":"6.5","title":"Prohibited Actions on Platform","content":"Customer agrees that the Services contain trade secrets and valuable proprietary information. Customer will not:\n\n• Alter, copy, modify, translate, or make derivative works of the Services, Documentation, or any component thereof.\n• Attempt to derive the source code for the Services, including by reverse engineering, decompiling, or disassembling.\n• Copy, frame, scrape, license, offer, sell, transfer, rent, or lease the Services or attempt any of the foregoing.\n• Remove, alter, or obfuscate any copyright, trademark, or other proprietary notices.\n• Access or use the Services to develop or build a similar or competitive product.\n• Use data mining, robots, or data gathering or extraction methods.\n• Enable access to the Services by anyone other than an authorized user.\n• Develop scripts or software that interact with the Services without prior written authorization from Xelta.\n• Circumvent or modify any security technologies designed to prevent unauthorized access.\n• Use the Services in a manner that damages, disables, overburdens, or impairs Xelta's servers or networks.\n• Resell, transfer, assign, or sublicense rights under these Terms without authorization.\n• Introduce viruses, corrupted files, or malicious code into the Services.\n• Systematically retrieve data from the Services to compile a database or directory."},{"number":"6.6","title":"Content Monitoring","content":"Xelta does not undertake to review all Customer Input but may: (a) terminate or suspend your access if your Customer Input is likely to violate applicable law or these Terms; (b) take any action necessary to ensure compliance with applicable law or protect third-party rights; or (c) cooperate fully with law enforcement authorities or court orders requesting disclosure of information about anyone submitting materials through the Services."}]},{"number":7,"title":"Acceptable Use Policy","content":"You must use the Platform in compliance with all applicable laws and our Acceptable Use Policy located at https://xelta.ai/legal/acceptable-use. You must not use the Platform to:\n\n• Generate, distribute, or facilitate illegal, harmful, threatening, abusive, harassing, defamatory, or fraudulent content.\n• Produce deepfake media, synthetic impersonations, or non-consensual intimate imagery intended to deceive, harm, or defame any individual.\n• Create content that promotes, glorifies, or facilitates violence, terrorism, extremism, or harm of any individual or group.\n• Generate content constituting hate speech, discrimination, or harassment on the basis of race, ethnicity, religion, gender, sexual orientation, disability, national origin, or any other protected characteristic.\n• Facilitate child exploitation, human trafficking, or any abuse of minors.\n• Violate copyright, trademark, patent, trade secret, or other intellectual property rights of any party.\n• Violate applicable export control laws, sanctions regulations, or trade embargoes.\n• Upload, transmit, or distribute malicious software, viruses, trojans, ransomware, or any harmful code.\n• Exploit platform vulnerabilities, bypass access controls, or engage in unauthorized penetration testing.\n• Use automated scripts, bots, or crawlers to abuse the credit system or circumvent usage limits.\n\nEnforcement of this Acceptable Use Policy is solely at Xelta's discretion, and failure to enforce in some instances does not constitute a waiver of Xelta's right to enforce in other instances. Violations may result in immediate account suspension or termination, removal of content, reporting to law enforcement and regulatory authorities, and civil or criminal legal action."},{"number":8,"title":"Fees, Credits, and Payment Terms","subsections":[{"number":"8.1","title":"Credit-Based Usage Model","content":"Pricing for the Services may be based on compute time (e.g., number of inference steps) or by model output (e.g., by size of generated images, per image, or per video), as described on the Sites. To utilize the Services, Customer will be required to purchase credits in advance. Each time you use the Services (whether through the user interface or through an API call) the cost for such use will be deducted from your credit balance. You are solely responsible for maintaining a sufficient credit balance to use the Services."},{"number":"8.2","title":"Credit Policies","content":"• Credits are deducted upon successful processing of a request.\n• Standard credits expire 365 days from the date of purchase. Free or promotional credits expire in 90 days.\n• Credits are non-refundable except as required by applicable law (see Section 8.5) or as otherwise expressly agreed by Xelta in its sole discretion.\n• Credits are non-transferable between accounts and cannot be exchanged for cash or currency."},{"number":"8.3","title":"Pricing and Taxes","content":"Prices shown on the Sites exclude all applicable taxes. All prices are subject to change at any time without notice, and new pricing will be posted to the Sites. Customer is responsible for paying all applicable taxes (including sales and use taxes), charges, tariffs, and duties, excluding taxes based on Xelta's income."},{"number":"8.4","title":"Payment Methods","content":"Customer may use a payment card or Automated Clearing House (ACH) to pay for credits in U.S. Dollars. Xelta uses a third-party payment processor to process payment transactions. By enabling payment by payment card, Customer: (i) agrees to be bound by the third-party payment processor's terms and conditions; (ii) authorizes Xelta to have the processor charge the payment card in the amount of credits purchased; and (iii) agrees to pay associated processing fees. Xelta will not be responsible for any services or errors of the payment processor. Customer information submitted in connection with payment is collected, processed, and stored by the payment processor and subject to the processor's privacy policy."},{"number":"8.5","title":"Regional Refund Rights","content":"Notwithstanding the general no-refund policy, Users in the following jurisdictions may be entitled to statutory refund rights:\n\n• European Union / United Kingdom: Under the EU Consumer Rights Directive and UK Consumer Rights Act 2015, you may have a 14-day right of withdrawal from digital service subscriptions, which may not apply once the service has commenced with your explicit consent.\n• United Arab Emirates: Applicable refund protections under UAE Consumer Protection Law No. 15 of 2020 apply.\n• United States: Applicable state consumer protection laws will be honored."}]},{"number":9,"title":"Ownership and Intellectual Property","subsections":[{"number":"9.1","title":"Xelta Platform Ownership","content":"Subject to the use rights granted under this Agreement, as between the parties, Xelta exclusively owns and retains all right, title, and interest in and to the Services, including all underlying software, applications, algorithms, models, workflows, methodologies, processes, systems, and other technology, and any improvements, modifications, enhancements, or derivatives thereof, and all intellectual property rights relating to any of the foregoing. Except for rights expressly granted in these Terms, no other rights are granted to Customer."},{"number":"9.2","title":"Trademarks","content":"Xelta and our logos, product or service names, slogans, and the look and feel of the Services are trademarks of Xelta, and you will not copy, imitate, or use any of them without our prior written permission. All other trademarks mentioned on or in connection with the Services are the property of their respective owners and do not imply endorsement, sponsorship, or recommendation by Xelta."},{"number":"9.3","title":"Output Content Ownership","content":"Subject to these Terms, and to the extent permitted by applicable law, AI-generated Output Content produced in response to your inputs is owned by you as the generating User. You acknowledge that AI-generated content may not qualify for copyright protection in all jurisdictions, that similar outputs may be generated for other users, and that Xelta does not warrant the originality or uniqueness of any Output Content. You assume sole responsibility for ensuring generated content does not infringe third-party intellectual property rights before commercial use."},{"number":"9.4","title":"Feedback","content":"You may voluntarily submit questions, comments, suggestions, ideas, or other information about Xelta or our Services (collectively, \"Feedback\"). You understand that we may use such Feedback for any purpose, commercial or otherwise, without acknowledgment or compensation to you. Xelta will exclusively own all improvements to, or new, Xelta products, services, or features based on any Feedback. Xelta may treat Feedback as non-confidential."},{"number":"9.5","title":"Third-Party Content Restrictions","content":"You may not: (a) use or access Third-Party Materials or outputs derived from such materials to develop, modify, or train competing products; (b) reproduce or redistribute training data used in any AI incorporated into Third-Party Materials; or (c) generate content that replicates or closely mimics original assets used to train any AI incorporated into Third-Party Materials."}]},{"number":10,"title":"Data Privacy, Protection, and User Rights","subsections":[{"number":"10.1","title":"Privacy Commitment","content":"Xelta is committed to protecting the privacy, security, and rights of individuals with respect to their personal data. All personal data collected through the Platform is processed in strict accordance with our Privacy Policy (https://xelta.ai/legal/privacy-policy) and applicable data protection legislation."},{"number":"10.2","title":"Legal Bases for Processing","content":"We process personal data on one or more of the following legal bases depending on the nature of the processing and the applicable jurisdiction: performance of contract; legitimate interests (platform security, fraud prevention, service improvement); legal obligation; and consent where required by law."},{"number":"10.3","title":"Data Subject Rights","content":"Depending on your jurisdiction, you may be entitled to the following rights regarding your personal data, exercisable by contacting support@xelta.ai:\n\n• Right of access: Request a copy of the personal data we hold about you (GDPR Article 15).\n• Right to rectification: Request correction of inaccurate or incomplete personal data (GDPR Article 16).\n• Right to erasure (Right to be Forgotten): Request deletion where no legitimate basis for retention exists (GDPR Article 17).\n• Right to restriction of processing in certain circumstances (GDPR Article 18).\n• Right to data portability in a structured, machine-readable format (GDPR Article 20).\n• Right to object to processing based on legitimate interests or for direct marketing (GDPR Article 21).\n• Right to withdraw consent at any time without affecting the lawfulness of prior processing.\n\nWe will respond to all valid requests within the timeframes required by applicable law (typically 30 days, with a possible 60-day extension for complex requests). If you are an EU/UK User whose Personal Data is processed by Xelta as a Processor under a Customer's instruction, please direct your request to the relevant Customer (Controller) in the first instance."},{"number":"10.4","title":"International Data Transfers","content":"Your personal data may be transferred to, stored in, or processed in countries outside your country of residence. Where such transfers occur, we implement appropriate safeguards including: Standard Contractual Clauses (SCCs) approved by the European Commission; UK International Data Transfer Agreement (IDTA) or UK Addendum to SCCs for UK transfers; adequacy decisions where applicable; and equivalent contractual protections for UAE and GCC user data transfers."}]},{"number":11,"title":"Regional Regulatory Compliance","content":"Xelta complies with regional data protection and privacy laws across multiple jurisdictions to ensure legal compliance for all users globally.","subsections":[{"number":"11.1","title":"European Union, Ireland, and United Kingdom (GDPR / UK GDPR)","content":"Section 12 of this Agreement constitutes a full Data Processing Agreement (DPA) for EU/UK Users. For purposes of this section, we comply with GDPR (EU) 2016/679 and UK GDPR as incorporated by the Data Protection Act 2018. Our specific commitments include:\n\n• We have designated a Data Protection Officer (DPO) contactable at support@xelta.ai.\n• We maintain Records of Processing Activities (RoPAs) as required under Article 30 GDPR.\n• We conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities per Article 35 GDPR.\n• We provide data breach notifications to supervisory authorities within 72 hours and to affected individuals without undue delay where required.\n• We transfer personal data outside the EEA only using legally approved mechanisms (SCCs, adequacy decisions).\n• EU/UK Users may lodge a complaint with their competent Supervisory Authority. A list of EU Supervisory Authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en."},{"number":"11.2","title":"United Arab Emirates (UAE PDPL)","content":"For users in the UAE, we comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations. Our UAE-specific commitments include:\n\n• We process UAE user data only for lawful purposes with appropriate legal bases.\n• We obtain required consents for sensitive data categories as defined under the PDPL.\n• We comply with data localization requirements where applicable and mandated by UAE law.\n• We respect rights of UAE data subjects to access, correct, and request deletion of their personal data.\n• We register with the UAE Data Office where required and cooperate fully with regulatory authorities."},{"number":"11.3","title":"GCC Countries (Saudi Arabia, Qatar, Kuwait, Bahrain, Oman)","content":"For users in GCC member states, we comply with applicable national data protection and cybersecurity legislation including:\n\n• Saudi Arabia: Personal Data Protection Law (PDPL) under Royal Decree No. M/19, enforced by the Saudi Data and AI Authority (SDAIA) and National Data Management Office (NDMO).\n• Qatar: Personal Data Privacy Protection Law No. 13 of 2016 and National Cybersecurity Agency (NCSA) framework.\n• Kuwait, Bahrain, Oman: Applicable cybersecurity, e-commerce, and data protection regulations in effect.\n\nWe undertake to cooperate with applicable GCC regulatory authorities and respond to data subject requests within legally required timeframes."},{"number":"11.4","title":"United States","content":"For users in the United States, we comply with applicable federal and state privacy laws including:\n\n• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): California residents have rights to know what personal data is collected, request deletion, opt out of sale, and be free from discrimination for exercising privacy rights.\n• Virginia CDPA and Colorado Privacy Act (CPA): Rights including access, correction, deletion, portability, and opt-out of targeted advertising.\n• Children's Online Privacy Protection Act (COPPA): We do not knowingly collect personal data from children under 13.\n• Federal Trade Commission (FTC) Act: We maintain fair information practices and do not engage in deceptive or unfair data practices.\n• Health Insurance Portability and Accountability Act (HIPAA): Where applicable to health-related processing."},{"number":"11.5","title":"Other Jurisdictions","content":"Users in other jurisdictions are responsible for ensuring their use of the Platform complies with local laws. Xelta makes reasonable efforts to comply with applicable law globally and reserves the right to restrict or modify access in regions where legal compliance cannot be maintained."}]},{"number":12,"title":"GDPR Data Processing Agreement (DPA)","content":"This Section 12 applies to Customers and End Users in the EEA, United Kingdom, or Switzerland (\"EU/UK Users\"), and to any processing of personal data subject to GDPR, UK GDPR, or the Swiss Federal Act on Data Protection (FADP). In the event of any conflict between this Section 12 and other provisions of these Terms with respect to personal data, this Section 12 shall prevail.","subsections":[{"number":"12.1","title":"Roles of the Parties","content":"Customer acts as the Controller of Personal Data relating to its customers, employees, or other individuals whose Personal Data Customer submits to the Services. Xelta acts as the Processor of such Personal Data, processing it solely on behalf of and under the documented instructions of Customer. Where Xelta independently determines the purposes and means of processing (e.g., for its own legitimate business interests), Xelta acts as a Controller with respect to such processing."},{"number":"12.2","title":"Xelta Obligations as Processor","content":"Where Xelta acts as a Processor, Xelta agrees to:\n\n• Process Personal Data only on documented instructions from Customer, including with regard to international transfers, unless required by applicable law.\n• Ensure that persons authorized to process Personal Data are bound by appropriate confidentiality obligations.\n• Implement appropriate technical and organizational measures including: (i) pseudonymisation and encryption of Personal Data; (ii) ongoing confidentiality, integrity, availability, and resilience of processing systems; (iii) ability to restore availability and access to Personal Data in a timely manner following an incident; and (iv) regular testing and evaluation of security measures.\n• Assist Customer in fulfilling its obligations to respond to Data Subject rights requests.\n• Assist Customer in ensuring compliance regarding security, breach notification, DPIAs, and prior consultation with Supervisory Authorities.\n• At Customer's choice, delete or return all Personal Data after the end of the provision of services, and delete existing copies unless applicable law requires storage.\n• Make available all information necessary to demonstrate compliance with this Section 12, and allow for and contribute to audits, including inspections, conducted by Customer or an auditor mandated by Customer."},{"number":"12.3","title":"Lawful Basis for Processing","content":"Customer, as Controller, is solely responsible for ensuring that Personal Data submitted to the Services is processed on a valid lawful basis under Article 6 GDPR (and Article 9 for special categories). Customer represents and warrants that it has obtained all necessary consents or has another valid legal basis, has provided Data Subjects with appropriate privacy notices, and will not submit special categories of Personal Data without appropriate safeguards and prior notice to Xelta."},{"number":"12.4","title":"Data Subject Rights Assistance","content":"Xelta shall provide reasonable assistance to Customer to enable Customer to comply with Data Subject requests under GDPR Chapter III, including rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18), portability (Article 20), and objection (Article 21). If Xelta receives a Data Subject request directly, Xelta will notify Customer within five (5) business days and will not respond without Customer's prior written authorization unless required by law."},{"number":"12.5","title":"Sub-processors","content":"Customer hereby grants Xelta a general written authorization to engage Sub-processors. Xelta maintains its current sub-processor list at https://xelta.ai/legal/sub-processors. Xelta shall: (i) provide at least 30 days' prior written notice of any new or replacement Sub-processor; (ii) impose data protection obligations on Sub-processors equivalent to those in this Section 12; and (iii) remain liable for Sub-processor performance. Customer may object to new Sub-processors on reasonable data protection grounds within 14 days of notice. If unresolved, either party may terminate the affected Services without penalty."},{"number":"12.6","title":"International Data Transfers","content":"Where Xelta transfers Personal Data outside the EEA, UK, or Switzerland, Xelta shall ensure an appropriate transfer mechanism is in place, including: adequacy decisions; Standard Contractual Clauses (SCCs) per Commission Decision 2021/914/EU; UK IDTA or UK Addendum to SCCs; or other safeguards permitted under Articles 46 or 47 GDPR. By accepting these Terms, Customer enters into the applicable SCCs with Xelta for EEA transfers to countries without adequacy decisions. The SCCs are available at https://xelta.ai/legal/scc."},{"number":"12.7","title":"Personal Data Breach Notification","content":"Xelta shall notify Customer without undue delay, and in any event within 72 hours of becoming aware of a personal data breach affecting Customer's Personal Data. Notification shall include: the nature of the breach; categories and approximate number of Data Subjects and records concerned; name and contact details for the DPO; likely consequences of the breach; and measures taken or proposed to address the breach. Customer shall determine whether to notify the relevant Supervisory Authority and/or affected Data Subjects."},{"number":"12.8","title":"Data Retention and Deletion","content":"Xelta will retain Personal Data processed on behalf of Customer only as long as necessary to provide the Services or as required by applicable law. Upon termination or Customer's written request, Xelta will, at Customer's election, securely delete or return all Personal Data within 30 days, and certify such deletion or return in writing. Xelta may retain Personal Data for additional periods required by applicable legal obligations, subject to confidentiality and security obligations."},{"number":"12.9","title":"Privacy by Design and Default","content":"Xelta implements privacy by design and by default per Article 25 GDPR, including: collecting and processing only minimum necessary Personal Data; integrating data protection safeguards into the design and operation of the Services; and ensuring Personal Data is not made accessible to an indefinite number of individuals without Data Subject intervention."},{"number":"12.10","title":"Data Protection Impact Assessments","content":"Where Customer intends to use the Services for processing likely to result in high risk to Data Subjects (per Article 35 GDPR), Customer shall notify Xelta and conduct a DPIA prior to commencing such processing. Xelta agrees to cooperate with and provide reasonable assistance to Customer in carrying out any DPIA."},{"number":"12.11","title":"Audit Rights","content":"Upon Customer's written request and at Customer's expense, Xelta shall make available information necessary to demonstrate compliance with this Section 12, including third-party audit reports (e.g., ISO 27001, SOC 2 Type II), responses to security assessments, and reasonable on-site audits upon at least 30 days' prior written notice during normal business hours, subject to reasonable confidentiality obligations. Customer may not conduct audits more than once per calendar year absent reasonable grounds to believe a material breach has occurred."},{"number":"12.12","title":"Data Protection Officer","content":"Xelta has designated a Data Protection Officer for GDPR matters. The DPO can be reached at: support@xelta.ai | www.xelta.ai/legal/gdpr."},{"number":"12.13","title":"Separately Executed DPA","content":"Customers requiring a separately executed DPA may request one by contacting support@xelta.ai. The executed DPA, together with applicable SCCs and annexes, shall be deemed incorporated into and form part of these Terms. In any conflict between the executed DPA and these Terms with respect to Personal Data, the DPA shall prevail."}]},{"number":13,"title":"Data Storage, Retention, and Restoration","subsections":[{"number":"13.1","title":"Storage Architecture","content":"Xelta employs cloud-based infrastructure with geographically distributed data centers. Where data residency is a legal or regulatory requirement in your jurisdiction, we will use commercially reasonable efforts to store data within the applicable region upon request and subject to technical feasibility."},{"number":"13.2","title":"Generated Content Retention","content":"Your creation will be stored temporarily and automatically removed after  (30 days). Users must download important files before this deadline. Extended retention may be available under certain subscription tiers. Content automatically deleted under this policy is permanently deleted and cannot be restored."},{"number":"13.3","title":"Retention Schedule by Data Category","content":"• Generated content and AI outputs: Up to 30 days, then permanently deleted.\n• Account and profile data: Duration of account plus up to 3 years following closure, unless longer retention is required by law.\n• Transaction and billing records: Minimum 7 years to comply with financial record-keeping, tax, accounting, and anti-money laundering laws.\n• Security and system logs: Up to 12 months for security monitoring, fraud prevention, and incident response.\n• Legal hold data: Retained indefinitely where required by law, court order, or ongoing legal proceedings."},{"number":"13.4","title":"Data Backup and Business Continuity","content":"Xelta maintains automated backup procedures to support business continuity and disaster recovery. Backup data is encrypted and stored in geographically redundant locations. Backup services are provided for system integrity purposes and do not substitute for users' own responsibility to download and maintain copies of important generated content."},{"number":"13.5","title":"Data Restoration Policy","content":"Xelta will use commercially reasonable efforts to restore data in the event of system failure, data corruption, or disaster, subject to the following conditions:\n\n• Restoration requests must be submitted to support@xelta.ai within 30 days of the data loss event.\n• Restoration is subject to technical feasibility and the existence of viable backup copies.\n• Data stored beyond applicable retention periods cannot be restored.\n• Content automatically deleted per Section 13.2 or 13.3 is permanently deleted and cannot be restored.\n• Xelta's liability for data loss is limited as set out in Section 16 of these Terms."},{"number":"13.6","title":"Data Deletion upon Account Termination","content":"Upon account termination, personal data will be deleted or anonymized within 90 days, except where retention is required for legal compliance, ongoing dispute resolution, or legitimate business purposes. You may request expedited deletion by contacting support@xelta.ai. Anonymized or aggregated data derived from your usage may be retained indefinitely for analytics and model improvement."}]},{"number":14,"title":"Security Measures and Incident Response","subsections":[{"number":"14.1","title":"Technical and Organizational Measures","content":"Xelta implements and maintains comprehensive technical and organizational security measures including:\n\n• End-to-end encryption of data in transit using TLS 1.2 or higher.\n• Encryption of data at rest using AES-256 or equivalent standards.\n• Multi-factor authentication (MFA) for administrative access to production systems.\n• Role-based access control (RBAC) ensuring employees access only data necessary for their function.\n• Regular third-party penetration testing and vulnerability assessments.\n• Continuous security monitoring, intrusion detection, and automated threat response.\n• Secure Software Development Lifecycle (SSDLC) practices for all platform updates.\n• Annual security training for all employees with access to user data."},{"number":"14.2","title":"Incident Response","content":"In the event of a confirmed security incident or data breach, Xelta will: investigate and contain the breach promptly; notify affected users and relevant supervisory authorities within timeframes required by applicable law; provide affected users with information regarding the nature of the breach, data affected, and recommended protective actions; and cooperate with investigations by competent authorities."},{"number":"14.3","title":"User Security Obligations","content":"No system is completely immune to attack. You are responsible for maintaining security of your own devices, keeping credentials confidential, promptly updating passwords if compromise is suspected, and not accessing the Platform from unsecured or public networks without appropriate precautions. Xelta shall not be liable for security breaches arising from your failure to exercise reasonable security practices."}]},{"number":15,"title":"Third-Party Services and Integrations","content":"The Platform may integrate with or rely upon Third-Party Materials including cloud infrastructure providers, payment processors, AI model providers, communications technologies, and social media platforms. You acknowledge that: (i) the use and availability of the Services may depend on third-party vendors; and (ii) these Third-Party Materials may not operate reliably 100% of the time.\n\nXelta is not responsible for and will have no liability with respect to your use or inability to use any Third-Party Materials. We have no obligation to monitor Third-Party Materials and may block or disable access to any Third-Party Materials at any time. Your use of such Third-Party Materials may be subject to additional terms and policies of the respective third-party providers.\n\nWhere third-party services process personal data on Xelta's behalf, Xelta enters into appropriate data processing agreements to ensure equivalent levels of data protection."},{"number":16,"title":"Disclaimers, Limitation of Liability, and Release","subsections":[{"number":"16.1","title":"Disclaimer of Warranties","content":"YOUR USE OF OUR SERVICES, INCLUDING ANY ASSOCIATED CONTENT OR MATERIALS WE PROVIDE, IS AT YOUR SOLE RISK. THE SERVICES ARE PROVIDED \"AS IS\" AND TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, XELTA, ON BEHALF OF ITSELF AND ITS LICENSORS, HEREBY EXPRESSLY DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES WITH RESPECT TO THE SERVICES, WHETHER STATUTORY, EXPRESS, IMPLIED, OR THROUGH A COURSE OF DEALING, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. XELTA DOES NOT WARRANT THAT THE SERVICES WILL OPERATE UNINTERRUPTED, BE ERROR-FREE, OR THAT ALL DEFECTS WILL BE CORRECTED. XELTA MAKES NO WARRANTY CONCERNING TIMELINESS, ACCURACY, PERFORMANCE, QUALITY, RELIABILITY, OR COMPLETENESS OF ANY INFORMATION OR RESULTS OBTAINED THROUGH THE USE OF THE SERVICES, INCLUDING WITH RESPECT TO ANY OUTPUT CONTENT. OUTPUT CONTENT MAY INCLUDE ERRORS, INACCURACIES, OR HALLUCINATED INFORMATION. USE OF SUCH OUTPUT CONTENT IS AT CUSTOMER'S SOLE RISK."},{"number":"16.2","title":"Limitation of Liability","content":"TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, XELTA AND THE OTHER XELTA PARTIES WILL NOT BE LIABLE TO YOU UNDER ANY THEORY OF LIABILITY — WHETHER BASED IN CONTRACT, TORT, NEGLIGENCE, WARRANTY, OR OTHERWISE — FOR ANY INDIRECT, CONSEQUENTIAL, INCIDENTAL, PUNITIVE, OR SPECIAL DAMAGES OR LOST PROFITS, EVEN IF XELTA HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.\n\nTHE TOTAL LIABILITY OF XELTA AND THE OTHER XELTA PARTIES FOR ANY CLAIM ARISING OUT OF OR RELATING TO THESE TERMS OR OUR SERVICES, REGARDLESS OF THE FORM OF THE ACTION, IS LIMITED TO THE GREATER OF $50 OR THE AMOUNT PAID BY YOU TO USE OUR SERVICES IN THE 12-MONTH PERIOD BEFORE THE EVENT GIVING RISE TO THE CLAIM.\n\nTHE LIMITATIONS SET FORTH IN THIS SECTION WILL NOT LIMIT OR EXCLUDE LIABILITY FOR THE GROSS NEGLIGENCE, FRAUD, OR INTENTIONAL MISCONDUCT OF XELTA OR FOR ANY OTHER MATTERS IN WHICH LIABILITY CANNOT BE EXCLUDED OR LIMITED UNDER APPLICABLE LAW. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU."},{"number":"16.3","title":"Release","content":"To the fullest extent permitted by applicable law, you release Xelta and the other Xelta Parties from responsibility, liability, claims, demands, and/or damages (actual and consequential) of every kind and nature, known and unknown (including claims of negligence), arising out of or related to disputes between users and the acts or omissions of third parties. If you are a consumer who resides in California, you hereby waive your rights under California Civil Code § 1542."}]},{"number":17,"title":"Indemnification","content":"To the fullest extent permitted by applicable law, you will indemnify, defend, and hold harmless Xelta and our subsidiaries and affiliates, and each of our respective officers, directors, agents, partners, and employees (individually and collectively, the \"Xelta Parties\") from and against any losses, liabilities, claims, demands, damages, expenses, or costs (\"Claims\") arising out of or related to:\n\n• Any claims that Customer Input infringes or violates any third-party right, including intellectual property rights, right to privacy or publicity rights, or data privacy rights or laws.\n• Your breach of any of these Terms.\n• Your misconduct in connection with the Services.\n• Any End Users or the Customer Solution.\n\nYou will promptly notify Xelta Parties of any third-party Claims, cooperate with Xelta Parties in defending such Claims, and pay all fees, costs, and expenses associated with defending such Claims (including attorneys' fees). The Xelta Parties will have control of the defense or settlement, at Xelta's sole option, of any third-party Claims."},{"number":18,"title":"Term, Termination, and Suspension","subsections":[{"number":"18.1","title":"Term","content":"These Terms will continue for the Term, unless we terminate these Terms or your account is deactivated as permitted by these Terms. Xelta may deactivate your account if you fail to log in or otherwise use the Services for more than one year. Any such deactivation will require you to reactivate your account."},{"number":"18.2","title":"Termination for Breach","content":"Either party may terminate these Terms upon written notice to the other party if such other party commits a material breach of these Terms and fails to cure such breach within 30 days of having received notice. Xelta may terminate these Terms with immediate effect if required to do so by applicable law or for any breach by Customer of Section 6 or Section 8."},{"number":"18.3","title":"Suspension Rights","content":"Xelta may suspend or limit access to the Services at any time: (i) if Customer is using the Services in violation of applicable law, these Terms, or in connection with fraudulent activity; (ii) if Customer's use adversely affects or interferes with normal operation of the Services; (iii) if Xelta is prohibited by a court or governmental order from providing the Services; (iv) for non-payment of fees within 10 days of demand; or (v) if Xelta reasonably believes there exists malicious code or a security incident threatening the Services. Xelta will use commercially reasonable efforts to notify Customer before suspension but reserves the right to act without prior notice where necessary to protect the integrity or security of the Services. Xelta will have no liability for damages as a result of suspension in accordance with this section."},{"number":"18.4","title":"Post-Termination","content":"Upon termination: your right to access the Platform ceases immediately; unused credits are forfeited without refund except where applicable law requires otherwise; all licenses granted to you terminate immediately; and you must cease all use of the Platform. Provisions that by their nature should survive termination shall continue to apply, including intellectual property rights, disclaimers, limitations of liability, indemnification, and governing law."}]},{"number":19,"title":"Dispute Resolution; Binding Arbitration","content":"PLEASE READ THIS SECTION CAREFULLY BECAUSE IT REQUIRES YOU AND XELTA TO ARBITRATE CERTAIN DISPUTES AND LIMITS THE MANNER IN WHICH YOU AND XELTA CAN SEEK RELIEF FROM EACH OTHER. ARBITRATION PRECLUDES YOU AND XELTA FROM SUING IN COURT OR HAVING A JURY TRIAL. YOU AND XELTA AGREE THAT ARBITRATION WILL BE SOLELY ON AN INDIVIDUAL BASIS AND NOT AS A CLASS ARBITRATION, CLASS ACTION, OR ANY OTHER KIND OF REPRESENTATIVE PROCEEDING. YOU AND XELTA ARE EACH WAIVING THE RIGHT TO TRIAL BY A JURY. FOLLOW THE INSTRUCTIONS BELOW IF YOU WISH TO OPT OUT OF ARBITRATION.","subsections":[{"number":"19.1","title":"Claims Covered","content":"These dispute resolution and binding arbitration terms apply to all Claims between you and Xelta whether based in contract, tort, statute, fraud, misrepresentation, or any other legal theory, including privacy or data-security claims and claims related to the validity, enforceability, or scope of the arbitration requirement."},{"number":"19.2","title":"Informal Resolution","content":"Before initiating formal dispute resolution, you agree to contact Xelta at support@xelta.ai and make a good-faith effort to resolve the dispute informally within 30 days (or such longer period as mutually agreed in writing) of providing a written notice (\"Claimant Notice\") describing the claim. Xelta will similarly attempt to resolve disputes through informal negotiation."},{"number":"19.3","title":"Binding Arbitration","content":"If the dispute is not resolved informally, both parties agree to resolve it through binding individual arbitration. The parties acknowledge that these arbitration terms are intended to reduce the financial burdens associated with resolving disputes and are not intended to delay adjudication of any party's claims."},{"number":"19.4","title":"Opt-Out","content":"You may opt out of the requirement of arbitration on an individual basis by contacting support@xelta.ai within 30 days of first agreeing to these Terms, stating your name, account information, and that you wish to opt out of arbitration. Opting out will not affect any other provisions of these Terms."},{"number":"19.5","title":"Small Claims and Injunctive Relief","content":"Notwithstanding the arbitration provision, either party may bring an individual action in a small claims court of competent jurisdiction. Either party may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent irreparable harm pending resolution of a dispute."},{"number":"19.6","title":"EU Online Dispute Resolution","content":"EU consumers may access the European Commission's Online Dispute Resolution platform at: https://ec.europa.eu/consumers/odr."},{"number":"19.7","title":"Governing Law","content":"These Terms shall be governed by and construed in accordance with the laws of the jurisdiction in which Xelta's registered operating entity is incorporated, without regard to conflict of law principles. For EU/EEA users: mandatory consumer protection provisions of your country of residence shall apply and cannot be excluded. For UAE users: UAE Federal laws and applicable DIFC/ADGM regulations may apply. For US users: the Federal Arbitration Act governs interpretation and enforcement of the arbitration provisions."}]},{"number":20,"title":"Service Availability and Force Majeure","content":"Xelta strives to maintain the highest possible level of platform availability but does not guarantee uninterrupted or error-free access. The Platform may occasionally be unavailable due to scheduled or emergency maintenance, infrastructure upgrades, technical failures, third-party service disruptions, cyberattacks, or events beyond Xelta's reasonable control.\n\nXelta shall not be liable for any delay or failure to perform obligations where such delay or failure results from circumstances beyond its reasonable control, including: acts of God, natural disasters, pandemics, public health emergencies; acts of government, regulatory action, or legal orders; war, civil unrest, terrorism, or sabotage; power outages, internet service disruptions, or failure of third-party infrastructure; cyberattacks or other malicious interference; or any other event constituting force majeure under applicable law."},{"number":21,"title":"Changes to These Terms","content":"We may update these Terms periodically to reflect changes in applicable law, regulatory requirements, platform functionality, or business practices. Material changes will be communicated through prominent notice on the Platform, by email to your registered address, or through in-app notifications. Your continued use of the Platform following the effective date of any revised Terms constitutes acceptance of the new Terms. If you do not agree to the revised Terms, you must discontinue use and may request account termination. We maintain an archive of previous versions of these Terms, available upon request."},{"number":22,"title":"Children's Safety and Minor Protection","content":"The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect, process, or retain personal data from minors. If we become aware that a minor has created an account or provided personal data, we will immediately delete such data and terminate the account. If you believe a minor has registered on the Platform, please contact us at support@xelta.ai. Parents and guardians are responsible for supervising minors' internet use and preventing unauthorized access to the Platform."},{"number":23,"title":"Anti-Bribery, Export Controls, and Sanctions Compliance","content":"You agree to comply with all applicable anti-bribery, anti-corruption, export control, and economic sanctions laws, including but not limited to the US Foreign Corrupt Practices Act (FCPA), UK Bribery Act 2010, UAE anti-corruption legislation, US Export Administration Regulations (EAR), and OFAC sanctions programs. You represent that you are not listed on any government-maintained sanctions list, and you agree not to use the Platform in any manner that would violate applicable export control or sanctions regulations."},{"number":24,"title":"General Provisions","subsections":[{"number":"24.1","title":"Entire Agreement","content":"These Terms, together with the Privacy Policy, Acceptable Use Policy, any executed DPA, and any applicable order forms or subscription agreements, constitute the entire agreement between you and Xelta with respect to the subject matter herein and supersede all prior agreements, representations, and understandings."},{"number":"24.2","title":"Severability","content":"If any provision of these Terms is found to be invalid, illegal, or unenforceable, such provision shall be modified to the minimum extent necessary to make it enforceable, or if modification is not possible, severed. The remaining provisions shall continue in full force and effect."},{"number":"24.3","title":"Waiver","content":"Our failure to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision. Any waiver must be in writing and signed by an authorized representative of Xelta."},{"number":"24.4","title":"Assignment","content":"You may not assign, delegate, or transfer any rights or obligations under these Terms without prior written consent from Xelta. Xelta may assign or transfer its rights and obligations at any time in connection with a merger, acquisition, corporate restructuring, or sale of assets."},{"number":"24.5","title":"Language","content":"These Terms are drafted in the English language. Any translations provided are for convenience only. In the event of any inconsistency between the English version and any translation, the English version shall prevail, except where local law requires otherwise."}]},{"number":25,"title":"Contact Information","content":"For all inquiries relating to these Terms and Conditions, the platform, or your data, please contact us at:","contactInfo":[{"label":"General Support & All Inquiries","value":"support@xelta.ai"},{"label":"Website","value":"www.xelta.ai"},{"label":"Legal Policy Reference","value":"https://xelta.ai/privacy-policy"}]}],"content":"{\n  \"metadata\": {\n    \"platformName\": \"XELTA PLATFORM\",\n    \"documentTitle\": \"Terms and Conditions of Use\",\n    \"version\": \"3.0\",\n    \"lastUpdated\": \"March 3, 2026\",\n    \"applicableRegions\": [\n      \"United States\",\n      \"European Union / Ireland\",\n      \"United Arab Emirates\",\n      \"GCC\",\n      \"United Kingdom\",\n      \"Worldwide\"\n    ],\n    \"contact\": \"support@xelta.ai\",\n    \"website\": \"www.xelta.ai\"\n  },\n  \"notices\": [\n    {\n      \"type\": \"legal\",\n      \"title\": \"IMPORTANT LEGAL NOTICE\",\n      \"content\": \"Please read these Terms carefully before using the Xelta platform. By accessing or using any part of the Services, you agree to be bound by all provisions herein. These Terms constitute a legally binding agreement between you and Xelta.\"\n    },\n    {\n      \"type\": \"arbitration\",\n      \"title\": \"ARBITRATION NOTICE\",\n      \"content\": \"By agreeing to these Terms, you and Xelta agree to resolve most disputes solely on an individual basis and not as a class arbitration, class action, or representative proceeding. See Section 19 for full details including opt-out instructions.\"\n    }\n  ],\n  \"sections\": [\n    {\n      \"number\": 1,\n      \"title\": \"Introduction\",\n      \"content\": \"These Terms and Conditions (\\\"Terms\\\" or \\\"Agreement\\\") govern your access to and use of the Xelta platform, including all associated websites, web and mobile applications, APIs, AI models, automation tools, digital infrastructure, and services (collectively, the \\\"Services\\\"). Xelta is an AI-powered technology platform providing a comprehensive suite of capabilities including but not limited to:\\n\\n• AI content generation, intelligent writing, and text automation tools\\n• Image editing, enhancement, and AI image generation\\n• Video generation, synthesis, editing, and processing tools\\n• Automation workflows and process orchestration engines\\n• AI agents, conversational bots, and voice automation\\n• Business productivity and enterprise workflow tools\\n• AI Studio and digital media asset management\\n• APIs, SDKs, and developer integration services\\n\\nBy accessing or using the Services, creating an account, subscribing to a plan, or purchasing credits, you acknowledge that you have read, understood, and agreed to be legally bound by these Terms, our Privacy Policy, our Acceptable Use Policy (https://xelta.ai/legal/acceptable-use), and any supplemental policies incorporated herein by reference.\\n\\nWe may make changes to these Terms. The \\\"Last Updated\\\" date above indicates when these Terms were last changed. If we make future changes, we will provide you with notice such as by sending an email, providing a notice through our Services, or updating the date at the top of these Terms. Your continued use of our Services after we provide notice will confirm your acceptance of the changes. If you do not agree to the amended Terms, you must immediately stop using our Services.\"\n    },\n    {\n      \"number\": 2,\n      \"title\": \"Defined Terms\",\n      \"content\": \"Capitalized terms have the meanings provided below or as otherwise defined in these Terms.\\n\\n• \\\"Platform\\\" means the Xelta website, applications, APIs, SDKs, and all associated services.\\n• \\\"User\\\" or \\\"you\\\" means any individual or legal entity accessing, registering for, or using the Platform, whether on a free or paid basis.\\n• \\\"Customer\\\" means a User who has agreed to these Terms for personal or internal business use.\\n• \\\"Business User\\\" means a User accessing the Platform on behalf of a company, organization, or legal entity.\\n• \\\"Customer Solution\\\" means your product or services that integrate or interface with the Services through APIs and is made available to your End Users.\\n• \\\"End Users\\\" means your end user customers who use the Customer Solution.\\n• \\\"Customer Input\\\" means any text, images, audio, video, prompts, data, files, or other materials submitted by Users through the Platform.\\n• \\\"Output Content\\\" or \\\"Generated Content\\\" means any data, text, sound, video, images, media, or other content produced by the AI services in response to Customer Input.\\n• \\\"Credits\\\" means the usage units required to operate AI workflows, purchased or allocated as part of a subscription or one-time purchase.\\n• \\\"Usage Data\\\" means anonymized or aggregated data collected, computed, originated, or stored by Xelta resulting from use of the Services, which may include data based on or derived from Customer Input.\\n• \\\"Personal Data\\\" means any information that identifies or can be used to identify a natural person, as defined under applicable data protection legislation.\\n• \\\"Subscription\\\" means a recurring paid plan providing access to specified Services for a defined period.\\n• \\\"Term\\\" means the period during which you have an account with us and are allowed to access and use the Services.\\n• \\\"Documentation\\\" means any user manuals, API materials, and other instructional or technical materials relating to the Services provided in electronic form or via the Sites.\\n• \\\"Third-Party Materials\\\" means third-party products and services that the Platform may integrate with, including cloud storage, communications technologies, ML models, and payment services.\"\n    },\n    {\n      \"number\": 3,\n      \"title\": \"Eligibility and Legal Capacity\",\n      \"content\": \"To access or use the Platform, you must:\\n\\n• Be at least 18 years of age, or the age of legal majority in your jurisdiction, whichever is higher.\\n• Possess full legal capacity and authority to enter into a binding agreement.\\n• Not be subject to trade sanctions, export restrictions, or equivalent regulatory prohibitions imposed by the US, EU, UAE, or any other applicable authority.\\n• Not have been previously suspended or permanently banned from the Platform.\\n• Comply with all applicable laws, regulations, and ordinances in your jurisdiction.\\n\\nIf you are a parent or guardian and believe your child under 18 is using our Services without your consent, please contact us at support@xelta.ai immediately.\\n\\nIf you are accessing the Services on behalf of a company, organization, government body, or other legal entity, you represent and warrant that you have authority to legally bind such entity to these Terms. In such cases, \\\"you\\\" shall refer to both the individual and the entity.\\n\\nIf you are a Customer with a Customer Solution for your own End Users, or if you create a Team Organization account, you are responsible for ensuring that your End Users are at least 18 years of age (or the age of legal majority in the applicable jurisdiction).\"\n    },\n    {\n      \"number\": 4,\n      \"title\": \"Account Registration, Teams, and Security\",\n      \"subsections\": [\n        {\n          \"number\": \"4.1\",\n          \"title\": \"Account Creation and Accuracy\",\n          \"content\": \"You must create a registered account to access certain features. By registering, you agree to provide accurate, current, and complete information and to maintain its accuracy throughout your use of the Platform. Providing false or misleading information may result in immediate suspension or termination.\\n\\nYou may not share or permit others to use your individual account credentials. You must use a strong password for your account. We reserve the right to reject, require that you change, or reclaim usernames, including on behalf of businesses or individuals that hold legal claim in those usernames.\"\n        },\n        {\n          \"number\": \"4.2\",\n          \"title\": \"Team Organization Accounts\",\n          \"content\": \"Xelta may allow you to create a \\\"Team Organization\\\" account to which you can invite team members who will create their own individual accounts associated with the Team Organization for centralized billing and Services access. As Team Organization administrator, you agree that:\\n\\n• You are responsible for your use of the Services and for your team members' use of the Services.\\n• You are responsible for ensuring each team member accepts Xelta's Privacy Policy and agrees to comply with these Terms, including the Acceptable Use Policy.\\n• You are responsible for ensuring team members are eligible to use the Services, including age requirements.\\n• You will cooperate in good faith with Xelta's response to actual or suspected violations by team members, including by providing information about individual accounts and immediately suspending or terminating accounts when directed by Xelta.\"\n        },\n        {\n          \"number\": \"4.3\",\n          \"title\": \"Account Security\",\n          \"content\": \"You are solely responsible for: (a) maintaining strict confidentiality of your login credentials, API keys, and authentication tokens; (b) restricting access to your account; (c) all activities and charges incurred under your account; and (d) immediately notifying Xelta at support@xelta.ai upon discovery of any unauthorized access or suspected breach of your account.\\n\\nWe will not be liable for any loss or damage arising from your failure to comply with this section, including losses resulting from unauthorized use of your account.\"\n        }\n      ]\n    },\n    {\n      \"number\": 5,\n      \"title\": \"Services, AI Features, and License Grant\",\n      \"subsections\": [\n        {\n          \"number\": \"5.1\",\n          \"title\": \"License Grant\",\n          \"content\": \"Subject to your payment of the required fees or credits, Xelta grants you a limited, non-exclusive, non-transferable, revocable right to access and use the Services in accordance with these Terms and applicable Documentation for your own personal or internal business use. Xelta will use commercially reasonable efforts to provide the Services in material conformance with these Terms.\"\n        },\n        {\n          \"number\": \"5.2\",\n          \"title\": \"API and Customer Solution Access\",\n          \"content\": \"If your use case involves accessing the Services through a Customer Solution using Xelta APIs:\\n\\n• Xelta grants you a limited, worldwide, non-exclusive right to (a) access and use the Services through an integration with the Customer Solution using Xelta-approved APIs; (b) use the Documentation in connection with the Services; and (c) allow End Users to access the Services through the Customer Solution in accordance with these Terms.\\n• The API license is non-transferable and non-sublicensable, granted solely to develop an interface or integration and to provide Customer Input and obtain Output Content.\\n• Xelta may limit API calls if the volume is excessive, constitutes abusive usage, or interferes with the proper functioning of the Services.\\n• You will not expose any Services APIs directly to any End Users.\\n• Your or your End Users' use of API services is governed by our API Services Supplemental Terms at https://xelta.ai/legal/api-terms.\\n• Your or your End Users' use of compute infrastructure services is governed by our Compute Infrastructure Supplemental Terms at https://xelta.ai/legal/compute-terms.\"\n        },\n        {\n          \"number\": \"5.3\",\n          \"title\": \"AI Features and Output Content\",\n          \"content\": \"The Services provide AI content generation features (\\\"AI Features\\\") that allow submission of Customer Input as prompts and generate Output Content based on those prompts. You acknowledge that:\\n\\n• AI outputs are generated using probabilistic algorithms and may vary with each generation.\\n• Output Content may not be unique across users, and the AI Features may generate the same or similar content for other users.\\n• The AI Features are not error-free, may not work as expected, and may generate incorrect, inaccurate, or fabricated (\\\"hallucinated\\\") information.\\n• Xelta does not represent, warrant, or covenant that any Output Content will be original, will not infringe third-party rights, or will be suitable for any particular purpose.\\n• Use of Output Content is at Customer's sole risk.\\n\\nXelta may make commercially reasonable updates to the Services from time to time. Such updates will not result in a material adverse impact to your use of the Services.\"\n        }\n      ]\n    },\n    {\n      \"number\": 6,\n      \"title\": \"Customer Input and Use of Services\",\n      \"subsections\": [\n        {\n          \"number\": \"6.1\",\n          \"title\": \"License to Customer Input\",\n          \"content\": \"Customer grants Xelta a non-exclusive, non-sublicensable, royalty-free license to reproduce, use, access, store, display, adapt, translate, modify, create derivative works from, and otherwise process any Customer Input to provide the Services.\"\n        },\n        {\n          \"number\": \"6.2\",\n          \"title\": \"Customer Ownership of Input\",\n          \"content\": \"Subject to the license granted to Xelta, Customer owns and retains all right, title, and interest in and to the Customer Input.\"\n        },\n        {\n          \"number\": \"6.3\",\n          \"title\": \"Usage Data\",\n          \"content\": \"Customer acknowledges and agrees that Xelta may generate, collect, store, use, transfer, and/or disclose to third parties Usage Data and use Usage Data to: perform data analytics; monitor, improve, and support the Services; design, develop, and offer Xelta products, services, and AI models; and for any other lawful purposes. Xelta owns and retains all rights to Usage Data, and no rights are granted to Customer there in, Your creation will be stored temporarily and automatically removed after 1 week. \"\n        },\n        {\n          \"number\": \"6.4\",\n          \"title\": \"Customer Representations and Responsibilities\",\n          \"content\": \"Customer acknowledges that Customer (not Xelta) has control over Customer Input. Customer represents and warrants that it has all rights, consents, licenses, and permissions necessary to grant the license in Section 6.1 and to provide Customer Input to Xelta. Customer will:\\n\\n• Not upload content protected by copyright, privacy rights, or intellectual property rights without obtaining the owner's permission.\\n• Not upload any illegal content and will comply with all applicable laws including data privacy and the transmission of personal data.\\n• Be solely responsible for ensuring that Customer and Xelta, acting on Customer's behalf, have the right to collect, store, use, process, and share Customer Input in connection with the Services.\"\n        },\n        {\n          \"number\": \"6.5\",\n          \"title\": \"Prohibited Actions on Platform\",\n          \"content\": \"Customer agrees that the Services contain trade secrets and valuable proprietary information. Customer will not:\\n\\n• Alter, copy, modify, translate, or make derivative works of the Services, Documentation, or any component thereof.\\n• Attempt to derive the source code for the Services, including by reverse engineering, decompiling, or disassembling.\\n• Copy, frame, scrape, license, offer, sell, transfer, rent, or lease the Services or attempt any of the foregoing.\\n• Remove, alter, or obfuscate any copyright, trademark, or other proprietary notices.\\n• Access or use the Services to develop or build a similar or competitive product.\\n• Use data mining, robots, or data gathering or extraction methods.\\n• Enable access to the Services by anyone other than an authorized user.\\n• Develop scripts or software that interact with the Services without prior written authorization from Xelta.\\n• Circumvent or modify any security technologies designed to prevent unauthorized access.\\n• Use the Services in a manner that damages, disables, overburdens, or impairs Xelta's servers or networks.\\n• Resell, transfer, assign, or sublicense rights under these Terms without authorization.\\n• Introduce viruses, corrupted files, or malicious code into the Services.\\n• Systematically retrieve data from the Services to compile a database or directory.\"\n        },\n        {\n          \"number\": \"6.6\",\n          \"title\": \"Content Monitoring\",\n          \"content\": \"Xelta does not undertake to review all Customer Input but may: (a) terminate or suspend your access if your Customer Input is likely to violate applicable law or these Terms; (b) take any action necessary to ensure compliance with applicable law or protect third-party rights; or (c) cooperate fully with law enforcement authorities or court orders requesting disclosure of information about anyone submitting materials through the Services.\"\n        }\n      ]\n    },\n    {\n      \"number\": 7,\n      \"title\": \"Acceptable Use Policy\",\n      \"content\": \"You must use the Platform in compliance with all applicable laws and our Acceptable Use Policy located at https://xelta.ai/legal/acceptable-use. You must not use the Platform to:\\n\\n• Generate, distribute, or facilitate illegal, harmful, threatening, abusive, harassing, defamatory, or fraudulent content.\\n• Produce deepfake media, synthetic impersonations, or non-consensual intimate imagery intended to deceive, harm, or defame any individual.\\n• Create content that promotes, glorifies, or facilitates violence, terrorism, extremism, or harm of any individual or group.\\n• Generate content constituting hate speech, discrimination, or harassment on the basis of race, ethnicity, religion, gender, sexual orientation, disability, national origin, or any other protected characteristic.\\n• Facilitate child exploitation, human trafficking, or any abuse of minors.\\n• Violate copyright, trademark, patent, trade secret, or other intellectual property rights of any party.\\n• Violate applicable export control laws, sanctions regulations, or trade embargoes.\\n• Upload, transmit, or distribute malicious software, viruses, trojans, ransomware, or any harmful code.\\n• Exploit platform vulnerabilities, bypass access controls, or engage in unauthorized penetration testing.\\n• Use automated scripts, bots, or crawlers to abuse the credit system or circumvent usage limits.\\n\\nEnforcement of this Acceptable Use Policy is solely at Xelta's discretion, and failure to enforce in some instances does not constitute a waiver of Xelta's right to enforce in other instances. Violations may result in immediate account suspension or termination, removal of content, reporting to law enforcement and regulatory authorities, and civil or criminal legal action.\"\n    },\n    {\n      \"number\": 8,\n      \"title\": \"Fees, Credits, and Payment Terms\",\n      \"subsections\": [\n        {\n          \"number\": \"8.1\",\n          \"title\": \"Credit-Based Usage Model\",\n          \"content\": \"Pricing for the Services may be based on compute time (e.g., number of inference steps) or by model output (e.g., by size of generated images, per image, or per video), as described on the Sites. To utilize the Services, Customer will be required to purchase credits in advance. Each time you use the Services (whether through the user interface or through an API call) the cost for such use will be deducted from your credit balance. You are solely responsible for maintaining a sufficient credit balance to use the Services.\"\n        },\n        {\n          \"number\": \"8.2\",\n          \"title\": \"Credit Policies\",\n          \"content\": \"• Credits are deducted upon successful processing of a request.\\n• Standard credits expire 365 days from the date of purchase. Free or promotional credits expire in 90 days.\\n• Credits are non-refundable except as required by applicable law (see Section 8.5) or as otherwise expressly agreed by Xelta in its sole discretion.\\n• Credits are non-transferable between accounts and cannot be exchanged for cash or currency.\"\n        },\n        {\n          \"number\": \"8.3\",\n          \"title\": \"Pricing and Taxes\",\n          \"content\": \"Prices shown on the Sites exclude all applicable taxes. All prices are subject to change at any time without notice, and new pricing will be posted to the Sites. Customer is responsible for paying all applicable taxes (including sales and use taxes), charges, tariffs, and duties, excluding taxes based on Xelta's income.\"\n        },\n        {\n          \"number\": \"8.4\",\n          \"title\": \"Payment Methods\",\n          \"content\": \"Customer may use a payment card or Automated Clearing House (ACH) to pay for credits in U.S. Dollars. Xelta uses a third-party payment processor to process payment transactions. By enabling payment by payment card, Customer: (i) agrees to be bound by the third-party payment processor's terms and conditions; (ii) authorizes Xelta to have the processor charge the payment card in the amount of credits purchased; and (iii) agrees to pay associated processing fees. Xelta will not be responsible for any services or errors of the payment processor. Customer information submitted in connection with payment is collected, processed, and stored by the payment processor and subject to the processor's privacy policy.\"\n        },\n        {\n          \"number\": \"8.5\",\n          \"title\": \"Regional Refund Rights\",\n          \"content\": \"Notwithstanding the general no-refund policy, Users in the following jurisdictions may be entitled to statutory refund rights:\\n\\n• European Union / United Kingdom: Under the EU Consumer Rights Directive and UK Consumer Rights Act 2015, you may have a 14-day right of withdrawal from digital service subscriptions, which may not apply once the service has commenced with your explicit consent.\\n• United Arab Emirates: Applicable refund protections under UAE Consumer Protection Law No. 15 of 2020 apply.\\n• United States: Applicable state consumer protection laws will be honored.\"\n        }\n      ]\n    },\n    {\n      \"number\": 9,\n      \"title\": \"Ownership and Intellectual Property\",\n      \"subsections\": [\n        {\n          \"number\": \"9.1\",\n          \"title\": \"Xelta Platform Ownership\",\n          \"content\": \"Subject to the use rights granted under this Agreement, as between the parties, Xelta exclusively owns and retains all right, title, and interest in and to the Services, including all underlying software, applications, algorithms, models, workflows, methodologies, processes, systems, and other technology, and any improvements, modifications, enhancements, or derivatives thereof, and all intellectual property rights relating to any of the foregoing. Except for rights expressly granted in these Terms, no other rights are granted to Customer.\"\n        },\n        {\n          \"number\": \"9.2\",\n          \"title\": \"Trademarks\",\n          \"content\": \"Xelta and our logos, product or service names, slogans, and the look and feel of the Services are trademarks of Xelta, and you will not copy, imitate, or use any of them without our prior written permission. All other trademarks mentioned on or in connection with the Services are the property of their respective owners and do not imply endorsement, sponsorship, or recommendation by Xelta.\"\n        },\n        {\n          \"number\": \"9.3\",\n          \"title\": \"Output Content Ownership\",\n          \"content\": \"Subject to these Terms, and to the extent permitted by applicable law, AI-generated Output Content produced in response to your inputs is owned by you as the generating User. You acknowledge that AI-generated content may not qualify for copyright protection in all jurisdictions, that similar outputs may be generated for other users, and that Xelta does not warrant the originality or uniqueness of any Output Content. You assume sole responsibility for ensuring generated content does not infringe third-party intellectual property rights before commercial use.\"\n        },\n        {\n          \"number\": \"9.4\",\n          \"title\": \"Feedback\",\n          \"content\": \"You may voluntarily submit questions, comments, suggestions, ideas, or other information about Xelta or our Services (collectively, \\\"Feedback\\\"). You understand that we may use such Feedback for any purpose, commercial or otherwise, without acknowledgment or compensation to you. Xelta will exclusively own all improvements to, or new, Xelta products, services, or features based on any Feedback. Xelta may treat Feedback as non-confidential.\"\n        },\n        {\n          \"number\": \"9.5\",\n          \"title\": \"Third-Party Content Restrictions\",\n          \"content\": \"You may not: (a) use or access Third-Party Materials or outputs derived from such materials to develop, modify, or train competing products; (b) reproduce or redistribute training data used in any AI incorporated into Third-Party Materials; or (c) generate content that replicates or closely mimics original assets used to train any AI incorporated into Third-Party Materials.\"\n        }\n      ]\n    },\n    {\n      \"number\": 10,\n      \"title\": \"Data Privacy, Protection, and User Rights\",\n      \"subsections\": [\n        {\n          \"number\": \"10.1\",\n          \"title\": \"Privacy Commitment\",\n          \"content\": \"Xelta is committed to protecting the privacy, security, and rights of individuals with respect to their personal data. All personal data collected through the Platform is processed in strict accordance with our Privacy Policy (https://xelta.ai/legal/privacy-policy) and applicable data protection legislation.\"\n        },\n        {\n          \"number\": \"10.2\",\n          \"title\": \"Legal Bases for Processing\",\n          \"content\": \"We process personal data on one or more of the following legal bases depending on the nature of the processing and the applicable jurisdiction: performance of contract; legitimate interests (platform security, fraud prevention, service improvement); legal obligation; and consent where required by law.\"\n        },\n        {\n          \"number\": \"10.3\",\n          \"title\": \"Data Subject Rights\",\n          \"content\": \"Depending on your jurisdiction, you may be entitled to the following rights regarding your personal data, exercisable by contacting support@xelta.ai:\\n\\n• Right of access: Request a copy of the personal data we hold about you (GDPR Article 15).\\n• Right to rectification: Request correction of inaccurate or incomplete personal data (GDPR Article 16).\\n• Right to erasure (Right to be Forgotten): Request deletion where no legitimate basis for retention exists (GDPR Article 17).\\n• Right to restriction of processing in certain circumstances (GDPR Article 18).\\n• Right to data portability in a structured, machine-readable format (GDPR Article 20).\\n• Right to object to processing based on legitimate interests or for direct marketing (GDPR Article 21).\\n• Right to withdraw consent at any time without affecting the lawfulness of prior processing.\\n\\nWe will respond to all valid requests within the timeframes required by applicable law (typically 30 days, with a possible 60-day extension for complex requests). If you are an EU/UK User whose Personal Data is processed by Xelta as a Processor under a Customer's instruction, please direct your request to the relevant Customer (Controller) in the first instance.\"\n        },\n        {\n          \"number\": \"10.4\",\n          \"title\": \"International Data Transfers\",\n          \"content\": \"Your personal data may be transferred to, stored in, or processed in countries outside your country of residence. Where such transfers occur, we implement appropriate safeguards including: Standard Contractual Clauses (SCCs) approved by the European Commission; UK International Data Transfer Agreement (IDTA) or UK Addendum to SCCs for UK transfers; adequacy decisions where applicable; and equivalent contractual protections for UAE and GCC user data transfers.\"\n        }\n      ]\n    },\n    {\n      \"number\": 11,\n      \"title\": \"Regional Regulatory Compliance\",\n      \"content\": \"Xelta complies with regional data protection and privacy laws across multiple jurisdictions to ensure legal compliance for all users globally.\",\n      \"subsections\": [\n        {\n          \"number\": \"11.1\",\n          \"title\": \"European Union, Ireland, and United Kingdom (GDPR / UK GDPR)\",\n          \"content\": \"Section 12 of this Agreement constitutes a full Data Processing Agreement (DPA) for EU/UK Users. For purposes of this section, we comply with GDPR (EU) 2016/679 and UK GDPR as incorporated by the Data Protection Act 2018. Our specific commitments include:\\n\\n• We have designated a Data Protection Officer (DPO) contactable at support@xelta.ai.\\n• We maintain Records of Processing Activities (RoPAs) as required under Article 30 GDPR.\\n• We conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities per Article 35 GDPR.\\n• We provide data breach notifications to supervisory authorities within 72 hours and to affected individuals without undue delay where required.\\n• We transfer personal data outside the EEA only using legally approved mechanisms (SCCs, adequacy decisions).\\n• EU/UK Users may lodge a complaint with their competent Supervisory Authority. A list of EU Supervisory Authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.\"\n        },\n        {\n          \"number\": \"11.2\",\n          \"title\": \"United Arab Emirates (UAE PDPL)\",\n          \"content\": \"For users in the UAE, we comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations. Our UAE-specific commitments include:\\n\\n• We process UAE user data only for lawful purposes with appropriate legal bases.\\n• We obtain required consents for sensitive data categories as defined under the PDPL.\\n• We comply with data localization requirements where applicable and mandated by UAE law.\\n• We respect rights of UAE data subjects to access, correct, and request deletion of their personal data.\\n• We register with the UAE Data Office where required and cooperate fully with regulatory authorities.\"\n        },\n        {\n          \"number\": \"11.3\",\n          \"title\": \"GCC Countries (Saudi Arabia, Qatar, Kuwait, Bahrain, Oman)\",\n          \"content\": \"For users in GCC member states, we comply with applicable national data protection and cybersecurity legislation including:\\n\\n• Saudi Arabia: Personal Data Protection Law (PDPL) under Royal Decree No. M/19, enforced by the Saudi Data and AI Authority (SDAIA) and National Data Management Office (NDMO).\\n• Qatar: Personal Data Privacy Protection Law No. 13 of 2016 and National Cybersecurity Agency (NCSA) framework.\\n• Kuwait, Bahrain, Oman: Applicable cybersecurity, e-commerce, and data protection regulations in effect.\\n\\nWe undertake to cooperate with applicable GCC regulatory authorities and respond to data subject requests within legally required timeframes.\"\n        },\n        {\n          \"number\": \"11.4\",\n          \"title\": \"United States\",\n          \"content\": \"For users in the United States, we comply with applicable federal and state privacy laws including:\\n\\n• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): California residents have rights to know what personal data is collected, request deletion, opt out of sale, and be free from discrimination for exercising privacy rights.\\n• Virginia CDPA and Colorado Privacy Act (CPA): Rights including access, correction, deletion, portability, and opt-out of targeted advertising.\\n• Children's Online Privacy Protection Act (COPPA): We do not knowingly collect personal data from children under 13.\\n• Federal Trade Commission (FTC) Act: We maintain fair information practices and do not engage in deceptive or unfair data practices.\\n• Health Insurance Portability and Accountability Act (HIPAA): Where applicable to health-related processing.\"\n        },\n        {\n          \"number\": \"11.5\",\n          \"title\": \"Other Jurisdictions\",\n          \"content\": \"Users in other jurisdictions are responsible for ensuring their use of the Platform complies with local laws. Xelta makes reasonable efforts to comply with applicable law globally and reserves the right to restrict or modify access in regions where legal compliance cannot be maintained.\"\n        }\n      ]\n    },\n    {\n      \"number\": 12,\n      \"title\": \"GDPR Data Processing Agreement (DPA)\",\n      \"content\": \"This Section 12 applies to Customers and End Users in the EEA, United Kingdom, or Switzerland (\\\"EU/UK Users\\\"), and to any processing of personal data subject to GDPR, UK GDPR, or the Swiss Federal Act on Data Protection (FADP). In the event of any conflict between this Section 12 and other provisions of these Terms with respect to personal data, this Section 12 shall prevail.\",\n      \"subsections\": [\n        {\n          \"number\": \"12.1\",\n          \"title\": \"Roles of the Parties\",\n          \"content\": \"Customer acts as the Controller of Personal Data relating to its customers, employees, or other individuals whose Personal Data Customer submits to the Services. Xelta acts as the Processor of such Personal Data, processing it solely on behalf of and under the documented instructions of Customer. Where Xelta independently determines the purposes and means of processing (e.g., for its own legitimate business interests), Xelta acts as a Controller with respect to such processing.\"\n        },\n        {\n          \"number\": \"12.2\",\n          \"title\": \"Xelta Obligations as Processor\",\n          \"content\": \"Where Xelta acts as a Processor, Xelta agrees to:\\n\\n• Process Personal Data only on documented instructions from Customer, including with regard to international transfers, unless required by applicable law.\\n• Ensure that persons authorized to process Personal Data are bound by appropriate confidentiality obligations.\\n• Implement appropriate technical and organizational measures including: (i) pseudonymisation and encryption of Personal Data; (ii) ongoing confidentiality, integrity, availability, and resilience of processing systems; (iii) ability to restore availability and access to Personal Data in a timely manner following an incident; and (iv) regular testing and evaluation of security measures.\\n• Assist Customer in fulfilling its obligations to respond to Data Subject rights requests.\\n• Assist Customer in ensuring compliance regarding security, breach notification, DPIAs, and prior consultation with Supervisory Authorities.\\n• At Customer's choice, delete or return all Personal Data after the end of the provision of services, and delete existing copies unless applicable law requires storage.\\n• Make available all information necessary to demonstrate compliance with this Section 12, and allow for and contribute to audits, including inspections, conducted by Customer or an auditor mandated by Customer.\"\n        },\n        {\n          \"number\": \"12.3\",\n          \"title\": \"Lawful Basis for Processing\",\n          \"content\": \"Customer, as Controller, is solely responsible for ensuring that Personal Data submitted to the Services is processed on a valid lawful basis under Article 6 GDPR (and Article 9 for special categories). Customer represents and warrants that it has obtained all necessary consents or has another valid legal basis, has provided Data Subjects with appropriate privacy notices, and will not submit special categories of Personal Data without appropriate safeguards and prior notice to Xelta.\"\n        },\n        {\n          \"number\": \"12.4\",\n          \"title\": \"Data Subject Rights Assistance\",\n          \"content\": \"Xelta shall provide reasonable assistance to Customer to enable Customer to comply with Data Subject requests under GDPR Chapter III, including rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18), portability (Article 20), and objection (Article 21). If Xelta receives a Data Subject request directly, Xelta will notify Customer within five (5) business days and will not respond without Customer's prior written authorization unless required by law.\"\n        },\n        {\n          \"number\": \"12.5\",\n          \"title\": \"Sub-processors\",\n          \"content\": \"Customer hereby grants Xelta a general written authorization to engage Sub-processors. Xelta maintains its current sub-processor list at https://xelta.ai/legal/sub-processors. Xelta shall: (i) provide at least 30 days' prior written notice of any new or replacement Sub-processor; (ii) impose data protection obligations on Sub-processors equivalent to those in this Section 12; and (iii) remain liable for Sub-processor performance. Customer may object to new Sub-processors on reasonable data protection grounds within 14 days of notice. If unresolved, either party may terminate the affected Services without penalty.\"\n        },\n        {\n          \"number\": \"12.6\",\n          \"title\": \"International Data Transfers\",\n          \"content\": \"Where Xelta transfers Personal Data outside the EEA, UK, or Switzerland, Xelta shall ensure an appropriate transfer mechanism is in place, including: adequacy decisions; Standard Contractual Clauses (SCCs) per Commission Decision 2021/914/EU; UK IDTA or UK Addendum to SCCs; or other safeguards permitted under Articles 46 or 47 GDPR. By accepting these Terms, Customer enters into the applicable SCCs with Xelta for EEA transfers to countries without adequacy decisions. The SCCs are available at https://xelta.ai/legal/scc.\"\n        },\n        {\n          \"number\": \"12.7\",\n          \"title\": \"Personal Data Breach Notification\",\n          \"content\": \"Xelta shall notify Customer without undue delay, and in any event within 72 hours of becoming aware of a personal data breach affecting Customer's Personal Data. Notification shall include: the nature of the breach; categories and approximate number of Data Subjects and records concerned; name and contact details for the DPO; likely consequences of the breach; and measures taken or proposed to address the breach. Customer shall determine whether to notify the relevant Supervisory Authority and/or affected Data Subjects.\"\n        },\n        {\n          \"number\": \"12.8\",\n          \"title\": \"Data Retention and Deletion\",\n          \"content\": \"Xelta will retain Personal Data processed on behalf of Customer only as long as necessary to provide the Services or as required by applicable law. Upon termination or Customer's written request, Xelta will, at Customer's election, securely delete or return all Personal Data within 30 days, and certify such deletion or return in writing. Xelta may retain Personal Data for additional periods required by applicable legal obligations, subject to confidentiality and security obligations.\"\n        },\n        {\n          \"number\": \"12.9\",\n          \"title\": \"Privacy by Design and Default\",\n          \"content\": \"Xelta implements privacy by design and by default per Article 25 GDPR, including: collecting and processing only minimum necessary Personal Data; integrating data protection safeguards into the design and operation of the Services; and ensuring Personal Data is not made accessible to an indefinite number of individuals without Data Subject intervention.\"\n        },\n        {\n          \"number\": \"12.10\",\n          \"title\": \"Data Protection Impact Assessments\",\n          \"content\": \"Where Customer intends to use the Services for processing likely to result in high risk to Data Subjects (per Article 35 GDPR), Customer shall notify Xelta and conduct a DPIA prior to commencing such processing. Xelta agrees to cooperate with and provide reasonable assistance to Customer in carrying out any DPIA.\"\n        },\n        {\n          \"number\": \"12.11\",\n          \"title\": \"Audit Rights\",\n          \"content\": \"Upon Customer's written request and at Customer's expense, Xelta shall make available information necessary to demonstrate compliance with this Section 12, including third-party audit reports (e.g., ISO 27001, SOC 2 Type II), responses to security assessments, and reasonable on-site audits upon at least 30 days' prior written notice during normal business hours, subject to reasonable confidentiality obligations. Customer may not conduct audits more than once per calendar year absent reasonable grounds to believe a material breach has occurred.\"\n        },\n        {\n          \"number\": \"12.12\",\n          \"title\": \"Data Protection Officer\",\n          \"content\": \"Xelta has designated a Data Protection Officer for GDPR matters. The DPO can be reached at: support@xelta.ai | www.xelta.ai/legal/gdpr | [Company registered address].\"\n        },\n        {\n          \"number\": \"12.13\",\n          \"title\": \"Separately Executed DPA\",\n          \"content\": \"Customers requiring a separately executed DPA may request one by contacting support@xelta.ai. The executed DPA, together with applicable SCCs and annexes, shall be deemed incorporated into and form part of these Terms. In any conflict between the executed DPA and these Terms with respect to Personal Data, the DPA shall prevail.\"\n        }\n      ]\n    },\n    {\n      \"number\": 13,\n      \"title\": \"Data Storage, Retention, and Restoration\",\n      \"subsections\": [\n        {\n          \"number\": \"13.1\",\n          \"title\": \"Storage Architecture\",\n          \"content\": \"Xelta employs cloud-based infrastructure with geographically distributed data centers. Where data residency is a legal or regulatory requirement in your jurisdiction, we will use commercially reasonable efforts to store data within the applicable region upon request and subject to technical feasibility.\"\n        },\n        {\n          \"number\": \"13.2\",\n          \"title\": \"Generated Content Retention\",\n          \"content\": \"Your creation will be stored temporarily and automatically removed after 1 week (7 days). Users must download important files before this deadline. Extended retention may be available under certain subscription tiers. Content automatically deleted under this policy is permanently deleted and cannot be restored.\"\n        },\n        {\n          \"number\": \"13.3\",\n          \"title\": \"Retention Schedule by Data Category\",\n          \"content\": \"• Generated content and AI outputs: Up to 7 days, then permanently deleted.\\n• Account and profile data: Duration of account plus up to 3 years following closure, unless longer retention is required by law.\\n• Transaction and billing records: Minimum 7 years to comply with financial record-keeping, tax, accounting, and anti-money laundering laws.\\n• Security and system logs: Up to 12 months for security monitoring, fraud prevention, and incident response.\\n• Legal hold data: Retained indefinitely where required by law, court order, or ongoing legal proceedings.\"\n        },\n        {\n          \"number\": \"13.4\",\n          \"title\": \"Data Backup and Business Continuity\",\n          \"content\": \"Xelta maintains automated backup procedures to support business continuity and disaster recovery. Backup data is encrypted and stored in geographically redundant locations. Backup services are provided for system integrity purposes and do not substitute for users' own responsibility to download and maintain copies of important generated content.\"\n        },\n        {\n          \"number\": \"13.5\",\n          \"title\": \"Data Restoration Policy\",\n          \"content\": \"Xelta will use commercially reasonable efforts to restore data in the event of system failure, data corruption, or disaster, subject to the following conditions:\\n\\n• Restoration requests must be submitted to support@xelta.ai within 30 days of the data loss event.\\n• Restoration is subject to technical feasibility and the existence of viable backup copies.\\n• Data stored beyond applicable retention periods cannot be restored.\\n• Content automatically deleted per Section 13.2 or 13.3 is permanently deleted and cannot be restored.\\n• Xelta's liability for data loss is limited as set out in Section 16 of these Terms.\"\n        },\n        {\n          \"number\": \"13.6\",\n          \"title\": \"Data Deletion upon Account Termination\",\n          \"content\": \"Upon account termination, personal data will be deleted or anonymized within 90 days, except where retention is required for legal compliance, ongoing dispute resolution, or legitimate business purposes. You may request expedited deletion by contacting support@xelta.ai. Anonymized or aggregated data derived from your usage may be retained indefinitely for analytics and model improvement.\"\n        }\n      ]\n    },\n    {\n      \"number\": 14,\n      \"title\": \"Security Measures and Incident Response\",\n      \"subsections\": [\n        {\n          \"number\": \"14.1\",\n          \"title\": \"Technical and Organizational Measures\",\n          \"content\": \"Xelta implements and maintains comprehensive technical and organizational security measures including:\\n\\n• End-to-end encryption of data in transit using TLS 1.2 or higher.\\n• Encryption of data at rest using AES-256 or equivalent standards.\\n• Multi-factor authentication (MFA) for administrative access to production systems.\\n• Role-based access control (RBAC) ensuring employees access only data necessary for their function.\\n• Regular third-party penetration testing and vulnerability assessments.\\n• Continuous security monitoring, intrusion detection, and automated threat response.\\n• Secure Software Development Lifecycle (SSDLC) practices for all platform updates.\\n• Annual security training for all employees with access to user data.\"\n        },\n        {\n          \"number\": \"14.2\",\n          \"title\": \"Incident Response\",\n          \"content\": \"In the event of a confirmed security incident or data breach, Xelta will: investigate and contain the breach promptly; notify affected users and relevant supervisory authorities within timeframes required by applicable law; provide affected users with information regarding the nature of the breach, data affected, and recommended protective actions; and cooperate with investigations by competent authorities.\"\n        },\n        {\n          \"number\": \"14.3\",\n          \"title\": \"User Security Obligations\",\n          \"content\": \"No system is completely immune to attack. You are responsible for maintaining security of your own devices, keeping credentials confidential, promptly updating passwords if compromise is suspected, and not accessing the Platform from unsecured or public networks without appropriate precautions. Xelta shall not be liable for security breaches arising from your failure to exercise reasonable security practices.\"\n        }\n      ]\n    },\n    {\n      \"number\": 15,\n      \"title\": \"Third-Party Services and Integrations\",\n      \"content\": \"The Platform may integrate with or rely upon Third-Party Materials including cloud infrastructure providers, payment processors, AI model providers, communications technologies, and social media platforms. You acknowledge that: (i) the use and availability of the Services may depend on third-party vendors; and (ii) these Third-Party Materials may not operate reliably 100% of the time.\\n\\nXelta is not responsible for and will have no liability with respect to your use or inability to use any Third-Party Materials. We have no obligation to monitor Third-Party Materials and may block or disable access to any Third-Party Materials at any time. Your use of such Third-Party Materials may be subject to additional terms and policies of the respective third-party providers.\\n\\nWhere third-party services process personal data on Xelta's behalf, Xelta enters into appropriate data processing agreements to ensure equivalent levels of data protection.\"\n    },\n    {\n      \"number\": 16,\n      \"title\": \"Disclaimers, Limitation of Liability, and Release\",\n      \"subsections\": [\n        {\n          \"number\": \"16.1\",\n          \"title\": \"Disclaimer of Warranties\",\n          \"content\": \"YOUR USE OF OUR SERVICES, INCLUDING ANY ASSOCIATED CONTENT OR MATERIALS WE PROVIDE, IS AT YOUR SOLE RISK. THE SERVICES ARE PROVIDED \\\"AS IS\\\" AND TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, XELTA, ON BEHALF OF ITSELF AND ITS LICENSORS, HEREBY EXPRESSLY DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES WITH RESPECT TO THE SERVICES, WHETHER STATUTORY, EXPRESS, IMPLIED, OR THROUGH A COURSE OF DEALING, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. XELTA DOES NOT WARRANT THAT THE SERVICES WILL OPERATE UNINTERRUPTED, BE ERROR-FREE, OR THAT ALL DEFECTS WILL BE CORRECTED. XELTA MAKES NO WARRANTY CONCERNING TIMELINESS, ACCURACY, PERFORMANCE, QUALITY, RELIABILITY, OR COMPLETENESS OF ANY INFORMATION OR RESULTS OBTAINED THROUGH THE USE OF THE SERVICES, INCLUDING WITH RESPECT TO ANY OUTPUT CONTENT. OUTPUT CONTENT MAY INCLUDE ERRORS, INACCURACIES, OR HALLUCINATED INFORMATION. USE OF SUCH OUTPUT CONTENT IS AT CUSTOMER'S SOLE RISK.\"\n        },\n        {\n          \"number\": \"16.2\",\n          \"title\": \"Limitation of Liability\",\n          \"content\": \"TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, XELTA AND THE OTHER XELTA PARTIES WILL NOT BE LIABLE TO YOU UNDER ANY THEORY OF LIABILITY — WHETHER BASED IN CONTRACT, TORT, NEGLIGENCE, WARRANTY, OR OTHERWISE — FOR ANY INDIRECT, CONSEQUENTIAL, INCIDENTAL, PUNITIVE, OR SPECIAL DAMAGES OR LOST PROFITS, EVEN IF XELTA HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.\\n\\nTHE TOTAL LIABILITY OF XELTA AND THE OTHER XELTA PARTIES FOR ANY CLAIM ARISING OUT OF OR RELATING TO THESE TERMS OR OUR SERVICES, REGARDLESS OF THE FORM OF THE ACTION, IS LIMITED TO THE GREATER OF $50 OR THE AMOUNT PAID BY YOU TO USE OUR SERVICES IN THE 12-MONTH PERIOD BEFORE THE EVENT GIVING RISE TO THE CLAIM.\\n\\nTHE LIMITATIONS SET FORTH IN THIS SECTION WILL NOT LIMIT OR EXCLUDE LIABILITY FOR THE GROSS NEGLIGENCE, FRAUD, OR INTENTIONAL MISCONDUCT OF XELTA OR FOR ANY OTHER MATTERS IN WHICH LIABILITY CANNOT BE EXCLUDED OR LIMITED UNDER APPLICABLE LAW. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU.\"\n        },\n        {\n          \"number\": \"16.3\",\n          \"title\": \"Release\",\n          \"content\": \"To the fullest extent permitted by applicable law, you release Xelta and the other Xelta Parties from responsibility, liability, claims, demands, and/or damages (actual and consequential) of every kind and nature, known and unknown (including claims of negligence), arising out of or related to disputes between users and the acts or omissions of third parties. If you are a consumer who resides in California, you hereby waive your rights under California Civil Code § 1542.\"\n        }\n      ]\n    },\n    {\n      \"number\": 17,\n      \"title\": \"Indemnification\",\n      \"content\": \"To the fullest extent permitted by applicable law, you will indemnify, defend, and hold harmless Xelta and our subsidiaries and affiliates, and each of our respective officers, directors, agents, partners, and employees (individually and collectively, the \\\"Xelta Parties\\\") from and against any losses, liabilities, claims, demands, damages, expenses, or costs (\\\"Claims\\\") arising out of or related to:\\n\\n• Any claims that Customer Input infringes or violates any third-party right, including intellectual property rights, right to privacy or publicity rights, or data privacy rights or laws.\\n• Your breach of any of these Terms.\\n• Your misconduct in connection with the Services.\\n• Any End Users or the Customer Solution.\\n\\nYou will promptly notify Xelta Parties of any third-party Claims, cooperate with Xelta Parties in defending such Claims, and pay all fees, costs, and expenses associated with defending such Claims (including attorneys' fees). The Xelta Parties will have control of the defense or settlement, at Xelta's sole option, of any third-party Claims.\"\n    },\n    {\n      \"number\": 18,\n      \"title\": \"Term, Termination, and Suspension\",\n      \"subsections\": [\n        {\n          \"number\": \"18.1\",\n          \"title\": \"Term\",\n          \"content\": \"These Terms will continue for the Term, unless we terminate these Terms or your account is deactivated as permitted by these Terms. Xelta may deactivate your account if you fail to log in or otherwise use the Services for more than one year. Any such deactivation will require you to reactivate your account.\"\n        },\n        {\n          \"number\": \"18.2\",\n          \"title\": \"Termination for Breach\",\n          \"content\": \"Either party may terminate these Terms upon written notice to the other party if such other party commits a material breach of these Terms and fails to cure such breach within 30 days of having received notice. Xelta may terminate these Terms with immediate effect if required to do so by applicable law or for any breach by Customer of Section 6 or Section 8.\"\n        },\n        {\n          \"number\": \"18.3\",\n          \"title\": \"Suspension Rights\",\n          \"content\": \"Xelta may suspend or limit access to the Services at any time: (i) if Customer is using the Services in violation of applicable law, these Terms, or in connection with fraudulent activity; (ii) if Customer's use adversely affects or interferes with normal operation of the Services; (iii) if Xelta is prohibited by a court or governmental order from providing the Services; (iv) for non-payment of fees within 10 days of demand; or (v) if Xelta reasonably believes there exists malicious code or a security incident threatening the Services. Xelta will use commercially reasonable efforts to notify Customer before suspension but reserves the right to act without prior notice where necessary to protect the integrity or security of the Services. Xelta will have no liability for damages as a result of suspension in accordance with this section.\"\n        },\n        {\n          \"number\": \"18.4\",\n          \"title\": \"Post-Termination\",\n          \"content\": \"Upon termination: your right to access the Platform ceases immediately; unused credits are forfeited without refund except where applicable law requires otherwise; all licenses granted to you terminate immediately; and you must cease all use of the Platform. Provisions that by their nature should survive termination shall continue to apply, including intellectual property rights, disclaimers, limitations of liability, indemnification, and governing law.\"\n        }\n      ]\n    },\n    {\n      \"number\": 19,\n      \"title\": \"Dispute Resolution; Binding Arbitration\",\n      \"content\": \"PLEASE READ THIS SECTION CAREFULLY BECAUSE IT REQUIRES YOU AND XELTA TO ARBITRATE CERTAIN DISPUTES AND LIMITS THE MANNER IN WHICH YOU AND XELTA CAN SEEK RELIEF FROM EACH OTHER. ARBITRATION PRECLUDES YOU AND XELTA FROM SUING IN COURT OR HAVING A JURY TRIAL. YOU AND XELTA AGREE THAT ARBITRATION WILL BE SOLELY ON AN INDIVIDUAL BASIS AND NOT AS A CLASS ARBITRATION, CLASS ACTION, OR ANY OTHER KIND OF REPRESENTATIVE PROCEEDING. YOU AND XELTA ARE EACH WAIVING THE RIGHT TO TRIAL BY A JURY. FOLLOW THE INSTRUCTIONS BELOW IF YOU WISH TO OPT OUT OF ARBITRATION.\",\n      \"subsections\": [\n        {\n          \"number\": \"19.1\",\n          \"title\": \"Claims Covered\",\n          \"content\": \"These dispute resolution and binding arbitration terms apply to all Claims between you and Xelta whether based in contract, tort, statute, fraud, misrepresentation, or any other legal theory, including privacy or data-security claims and claims related to the validity, enforceability, or scope of the arbitration requirement.\"\n        },\n        {\n          \"number\": \"19.2\",\n          \"title\": \"Informal Resolution\",\n          \"content\": \"Before initiating formal dispute resolution, you agree to contact Xelta at support@xelta.ai and make a good-faith effort to resolve the dispute informally within 30 days (or such longer period as mutually agreed in writing) of providing a written notice (\\\"Claimant Notice\\\") describing the claim. Xelta will similarly attempt to resolve disputes through informal negotiation.\"\n        },\n        {\n          \"number\": \"19.3\",\n          \"title\": \"Binding Arbitration\",\n          \"content\": \"If the dispute is not resolved informally, both parties agree to resolve it through binding individual arbitration. The parties acknowledge that these arbitration terms are intended to reduce the financial burdens associated with resolving disputes and are not intended to delay adjudication of any party's claims.\"\n        },\n        {\n          \"number\": \"19.4\",\n          \"title\": \"Opt-Out\",\n          \"content\": \"You may opt out of the requirement of arbitration on an individual basis by contacting support@xelta.ai within 30 days of first agreeing to these Terms, stating your name, account information, and that you wish to opt out of arbitration. Opting out will not affect any other provisions of these Terms.\"\n        },\n        {\n          \"number\": \"19.5\",\n          \"title\": \"Small Claims and Injunctive Relief\",\n          \"content\": \"Notwithstanding the arbitration provision, either party may bring an individual action in a small claims court of competent jurisdiction. Either party may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent irreparable harm pending resolution of a dispute.\"\n        },\n        {\n          \"number\": \"19.6\",\n          \"title\": \"EU Online Dispute Resolution\",\n          \"content\": \"EU consumers may access the European Commission's Online Dispute Resolution platform at: https://ec.europa.eu/consumers/odr.\"\n        },\n        {\n          \"number\": \"19.7\",\n          \"title\": \"Governing Law\",\n          \"content\": \"These Terms shall be governed by and construed in accordance with the laws of the jurisdiction in which Xelta's registered operating entity is incorporated, without regard to conflict of law principles. For EU/EEA users: mandatory consumer protection provisions of your country of residence shall apply and cannot be excluded. For UAE users: UAE Federal laws and applicable DIFC/ADGM regulations may apply. For US users: the Federal Arbitration Act governs interpretation and enforcement of the arbitration provisions.\"\n        }\n      ]\n    },\n    {\n      \"number\": 20,\n      \"title\": \"Service Availability and Force Majeure\",\n      \"content\": \"Xelta strives to maintain the highest possible level of platform availability but does not guarantee uninterrupted or error-free access. The Platform may occasionally be unavailable due to scheduled or emergency maintenance, infrastructure upgrades, technical failures, third-party service disruptions, cyberattacks, or events beyond Xelta's reasonable control.\\n\\nXelta shall not be liable for any delay or failure to perform obligations where such delay or failure results from circumstances beyond its reasonable control, including: acts of God, natural disasters, pandemics, public health emergencies; acts of government, regulatory action, or legal orders; war, civil unrest, terrorism, or sabotage; power outages, internet service disruptions, or failure of third-party infrastructure; cyberattacks or other malicious interference; or any other event constituting force majeure under applicable law.\"\n    },\n    {\n      \"number\": 21,\n      \"title\": \"Changes to These Terms\",\n      \"content\": \"We may update these Terms periodically to reflect changes in applicable law, regulatory requirements, platform functionality, or business practices. Material changes will be communicated through prominent notice on the Platform, by email to your registered address, or through in-app notifications. Your continued use of the Platform following the effective date of any revised Terms constitutes acceptance of the new Terms. If you do not agree to the revised Terms, you must discontinue use and may request account termination. We maintain an archive of previous versions of these Terms, available upon request.\"\n    },\n    {\n      \"number\": 22,\n      \"title\": \"Children's Safety and Minor Protection\",\n      \"content\": \"The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect, process, or retain personal data from minors. If we become aware that a minor has created an account or provided personal data, we will immediately delete such data and terminate the account. If you believe a minor has registered on the Platform, please contact us at support@xelta.ai. Parents and guardians are responsible for supervising minors' internet use and preventing unauthorized access to the Platform.\"\n    },\n    {\n      \"number\": 23,\n      \"title\": \"Anti-Bribery, Export Controls, and Sanctions Compliance\",\n      \"content\": \"You agree to comply with all applicable anti-bribery, anti-corruption, export control, and economic sanctions laws, including but not limited to the US Foreign Corrupt Practices Act (FCPA), UK Bribery Act 2010, UAE anti-corruption legislation, US Export Administration Regulations (EAR), and OFAC sanctions programs. You represent that you are not listed on any government-maintained sanctions list, and you agree not to use the Platform in any manner that would violate applicable export control or sanctions regulations.\"\n    },\n    {\n      \"number\": 24,\n      \"title\": \"General Provisions\",\n      \"subsections\": [\n        {\n          \"number\": \"24.1\",\n          \"title\": \"Entire Agreement\",\n          \"content\": \"These Terms, together with the Privacy Policy, Acceptable Use Policy, any executed DPA, and any applicable order forms or subscription agreements, constitute the entire agreement between you and Xelta with respect to the subject matter herein and supersede all prior agreements, representations, and understandings.\"\n        },\n        {\n          \"number\": \"24.2\",\n          \"title\": \"Severability\",\n          \"content\": \"If any provision of these Terms is found to be invalid, illegal, or unenforceable, such provision shall be modified to the minimum extent necessary to make it enforceable, or if modification is not possible, severed. The remaining provisions shall continue in full force and effect.\"\n        },\n        {\n          \"number\": \"24.3\",\n          \"title\": \"Waiver\",\n          \"content\": \"Our failure to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision. Any waiver must be in writing and signed by an authorized representative of Xelta.\"\n        },\n        {\n          \"number\": \"24.4\",\n          \"title\": \"Assignment\",\n          \"content\": \"You may not assign, delegate, or transfer any rights or obligations under these Terms without prior written consent from Xelta. Xelta may assign or transfer its rights and obligations at any time in connection with a merger, acquisition, corporate restructuring, or sale of assets.\"\n        },\n        {\n          \"number\": \"24.5\",\n          \"title\": \"Language\",\n          \"content\": \"These Terms are drafted in the English language. Any translations provided are for convenience only. In the event of any inconsistency between the English version and any translation, the English version shall prevail, except where local law requires otherwise.\"\n        }\n      ]\n    },\n    {\n      \"number\": 25,\n      \"title\": \"Contact Information\",\n      \"content\": \"For all inquiries relating to these Terms and Conditions, the platform, or your data, please contact us at:\",\n      \"contactInfo\": [\n        {\n          \"label\": \"General Support & All Inquiries\",\n          \"value\": \"support@xelta.ai\"\n        },\n        {\n          \"label\": \"Website\",\n          \"value\": \"www.xelta.ai\"\n        }\n        \n      ]\n    }\n  ]\n}"}}