Privacy Policy
Last updated: October 13, 2026
XHIBO ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or interact with our official social media pages (collectively, the "Service"). As used herein, XHIBO includes authorized variations such as Xhibo, xhibo, and XB.
1. Information We Collect
We may collect personal information about you in a variety of ways. The information we may collect includes:
- Personal Data: Personally identifiable information (PII), such as your name, shipping address, email address, and telephone number, provided when you register, place an order, subscribe to our newsletter, redeem a coupon, or contact support.
- Order Data: Details of the items you buy, order totals, and the delivery information needed to get your order to you.
- Derivative Data: Information our servers automatically collect, such as your IP address, browser type, device identifiers, and access times. This helps XHIBO optimize the Service for your specific hardware.
- Financial Data: Data related to your payment method. XHIBO utilizes Stripe for secure payment processing. We do not store full credit card numbers on our servers; all sensitive financial data is tokenized and managed by Stripe.
2. Use of Your Information
Having accurate information permits XHIBO to provide a customized experience. We use your information to:
- Account Management: Create and maintain your user profile across the XHIBO ecosystem.
- Order Fulfillment: Process transactions and facilitate shipping between you and our vetted supply partners. When you place an order, your name and delivery address are shared with the supplier fulfilling your order and the carriers delivering it, as described in Section 3.
- Customer Support: Respond to your questions and help with orders, returns, and refunds.
- Marketing Communications: If you sign up for our newsletter or offers — for example, through a signup form on our site — we use your email address to send you marketing email. You can unsubscribe at any time using the link in any marketing email or by contacting us at support@xhibo.com.
- Security & Fraud Prevention: Detect, investigate, and prevent fraudulent transactions, coupon abuse, and other illegal activities. This is part of our commitment to maintaining a secure marketplace. When a coupon is redeemed, we keep a record of the redemption, including the email address used, so one-per-customer offers cannot be reused unfairly.
3. Who We Share Your Information With
We share personal information with the service providers below, only for the purposes described in this policy. We do not sell your personal information for money, and our providers may not use your information for their own marketing.
| Provider | What they do for us | Information shared |
|---|---|---|
| Stripe | Payment processing | Payment details and order totals. Stripe collects your card information directly; we never store full card numbers. |
| Firebase / Google Cloud | Website hosting, database, and account sign-in | Account, order, and site data needed to operate the Service. |
| Resend | Delivering order, account, and marketing email | Your name and email address. |
| Google Analytics | Website analytics — only after you consent via our cookie banner | Page views and device and usage data. |
| Meta (Facebook and Instagram) and Pinterest | Advertising measurement — only when you consent via our cookie banner | Page views and purchase events used to measure and improve our advertising. |
| AliExpress suppliers and delivery carriers | Fulfilling and delivering your order | Recipient name and delivery address, so your order can be shipped to you. Our suppliers are located outside the United States, so this information is transferred internationally. |
| Google Fonts | Displaying fonts on our website | Your IP address is sent to Google when fonts load. |
We may also disclose information to comply with the law, enforce our Terms of Service, or protect the rights, property, or safety of XHIBO and our customers.
4. Cookies, Tracking, and Your Choices
We use cookies and similar technologies. Some cookies are essential for the Service to work — for sign-in, your cart, and security — and always stay on.
Analytics and advertising cookies are off by default. When you first visit, our cookie banner lets you Accept, Decline, or Manage your choices. We use Google Consent Mode with analytics and advertising storage denied by default, so until you accept, Google Analytics receives only limited, cookieless signals — and the Meta and Pinterest advertising tags do not load at all unless you grant advertising consent.
If your browser sends a Global Privacy Control (GPC) signal, we honor it as an opt-out: advertising stays off. You can change your choices at any time using the "Your Privacy Choices / Do Not Sell or Share" link in our footer, which reopens the cookie banner.
5. "Sale" and "Sharing" of Personal Information
We do not sell your personal information for money. Under California law (the CCPA/CPRA), using advertising services such as Meta and Pinterest can count as "sharing" personal information for cross-context behavioral advertising. We only share in this way when you consent through our cookie banner.
To opt out of sharing, you can decline or adjust your choices in the cookie banner, enable Global Privacy Control in your browser, use the "Your Privacy Choices / Do Not Sell or Share" link in our footer, or email us at support@xhibo.com.
6. Data Retention
We keep personal information only as long as we need it:
- Order records: Kept for 7 years for tax, accounting, and chargeback purposes.
- Account data: Kept until you delete your account.
- Newsletter subscriptions: Kept until you unsubscribe.
- Analytics data: Google Analytics data is retained for 14 months.
- Coupon-redemption records: Records of coupon redemptions, including the email address used, are kept to prevent coupon abuse and to enforce one-per-customer offers.
7. Your Privacy Rights
Depending on where you live, you may have the right to know what personal information we hold about you, to access or export it, to correct it, to delete it, and to opt out of its sale or sharing. We will not discriminate against you for exercising these rights.
You can delete your account yourself from your account page. Deleting your account removes your profile and sign-in, removes your newsletter subscription, and anonymizes your order records: the order history we keep for tax and chargeback reasons is stripped of your name, telephone number, and address.
To export your data or make any other request, contact our support team at support@xhibo.com. We respond to requests within 30 days. To protect your account, we may ask you to verify your identity before completing a request.
8. Children's Privacy
XHIBO is not directed to anyone under the age of 18, and we do not knowingly collect personal information from anyone under 18. If we learn that an account or information belongs to someone under 18, we will delete it. If you believe a minor has provided us with personal information, please contact us at support@xhibo.com.
9. Security of Your Information
XHIBO uses administrative, technical, and physical security measures, including Industry-Standard Encryption (TLS/SSL), to protect your personal information. While we have taken significant steps to secure the data you provide, no system is 100% impenetrable. We encourage users to practice good "Cyber Hygiene" by not sharing passwords and logging out of your XHIBO account on shared devices.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If you have questions about this policy, contact us at support@xhibo.com.