Welcome to XTEND Reality Expansion Ltd.'s (XTEND) website (the "Website"). XTEND ("we", "us", "our" or the "Company") is committed to protecting your privacy. This Privacy Notice (the "Privacy Notice"), together with our Terms of Use available at www.xtend.me governs how we collect, process, use and transfer personal data in connection with our Services (as defined in the Terms of Use). This Privacy Notice applies to all users ("Users" or "you") accessing or using the Services. Please note that this Privacy Notice applies to where XTEND acts as a Data Controller. Any processing of Personal Data which occures in XOS and deployed product environments on behalf of customers is governed by contractual arrangements and is outside of the scope of this Privacy Notice.

I. Definitions

"Users" of XTEND's Website and/or Services may be (part or all):

Visitors (whether occasional or purposely), prospective customers or partners ("Visitors") who visit or interact with our website, social media pages, participate in our events, online ads and content, emails or communications under our control;
Customers and/or partners (together "Customers") who have engaged with XTEND and their authorized users ("Customer Representative"), and visit and interact with our website;
Job Applicants ("Applicants") who wish to apply for opening jobs and/or submitting their resumes to XTEND with respect to an opening.

We strive to make all Users' experiences with our Services safe and satisfying. Your privacy is of utmost importance to us. In this Privacy Notice, we explain how XTEND collects and uses personal data, and for what purposes.

II. Introduction

This Privacy Notice applies whenever you access XTEND's Website and use XTEND's Services. Any terms not defined in this Privacy Notice shall be given the meaning ascribed to them in the Terms and Conditions in the website: www.xtend.me

Please read this Privacy Notice before using XTEND's Services, since by using XTEND Services, you express your agreement to this Privacy Notice. If you do not agree to the terms of this Privacy Notice, please do not use XTEND Website and/or Services. By using the Services, you acknowledge and freely agree that your personal data will be collected and processed as described in this Privacy Notice. You are not legally required to provide us with your Personal data. If you do not consent to the collection or processing of your Personal data, we may be unable to provide you with certain features of the Services, and in some cases, may be unable to provide access to the Services altogether.

For your convenience, below are highlights from our Privacy Notice:

Personal data we collect, how we collect it, and why
The legal basis for personal data processing done by our Services
The use of such personal data and with whom we share it
Your rights: How you can access, manage and update your personal data
The choices you can make about how we collect, use, and share your personal data
How we protect your personal data

If you do not want us to collect, store, use or share your personal data in the ways described in this Privacy Notice, you may not use XTEND Website and/or Services.

III. Data We Collect and How We Collect it

As part of providing XTEND Services, we will collect personal data to the extent necessary for providing the Services. Personal data may be collected, combined and used for the purposes of maintaining and developing XTEND Services, contacting Users, providing services and products, providing information regarding Company's products, Customers' support, managing Customer's and/or Visitors', sending information to Users, conducting research and creating reports for internal use and Customers' use.

1. User Data: We collect User data through our Website when you interact with us, including when you submit information through our "Contact Us" forms, request a demonstration, subscribe to communications, or apply for employment. The type and scope of personal data we collect depends on the nature of your interaction with us.

We may collect the following categories of personal data, as applicable:

Identification and Contact Information:

Full name
Email address
Organization
Job title
Country
Message

2. Visitors: When Users visit our Website, interact with or use our Services, we may collect or generate certain technical data about such Visitors. Such personal data is gathered by us independently or with the help of our service providers, including through the use of "cookies" and other tracking technologies (as further detailed in Section V below).

Such data mainly consists of technical or aggregated usage data, such as IP address, non-identifying data regarding a device, operating system and browser, location and language settings used. Such data mostly serves us to improve engagements, as well as the overall performance of our Services.

3. Customers: As an XTEND Customer or prospective customer or XTEND's partner, you may wish to contact us through the means on our Website.

In such cases, you may need to provide us (not all details are mandatory):

Full name
Email address
Organization
Phone number

XTEND's representatives will contact you following your approach and facilitate your request. In addition, the business organization you're linked to (such as your employer), may be required to provide your email address. We are not responsible for any of the data provided by third parties, as such business organization. We take no responsibility for the accuracy or correctness of User personal data that the business organization may submit to XTEND or that you submitted to XTEND on its Website.

Upon request, we will remove any personal data that is claimed to infringe any of your rights and/or rights of a third party.

4. Job Applicants: Beside personal data generally collected regarding Visitors, Applicants wishing to send their resumes through our Website, shall provide us data directly and we will store such User personal data on our systems and use it if such applicant is found suitable for an opening job at XTEND. Applicant specific information may include:

User full name
User e-mail address
User phone number
Linkedin Profile URL
Personal website and resume

5. Customer Support Correspondence: When you ask for help from our customer support team, we will collect and store the contact personal data you give them (generally, your name, business organization, and e-mail address) and information about your activity with XTEND Products. We may also store the communications you have with the customer support team and any personal data in those communications in order to provide support and improve XTEND services.

IV. How We Use the Data We Collect (Legal Basis for Processing)

The main use of the personal data we collect and store is to provide the Services through our Website, as well as providing a better service experience. Our legal basis for processing under the GDPR (where applicable) may include performance of a contract, our legitimate interests, compliance with legal obligations, and consent (where required by law).

Additional purposes for which we may collect and store your personal data include:

Respond to your request, provide the Services and provide technical support and respond to User inquiries;
To monitor and analyse the use of XTEND Services;
To protect the safety and well-being of our Users;
To protect XTEND's rights and property in connection with the Services;
To prevent fraud or potentially illegal activities, and to enforce the Terms of Service;
To notify users of updates, new products or promotional offers;
To comply with our legal obligations, resolve any disputes We may have with you or other users, and to enforce our agreements with third parties;
To send communications and direct marketing;
To conduct research;
To improve and develop our Website and Services;
To comply with regulatory and audit requirements;
To handle complaints and manage legal claims;
To verify your identity when you request to exercise your rights under applicable privacy laws;

Marketing Communications: We may send you marketing communications about our products, services, events, and updates where permitted by applicable law. Where required (including in the EEA and the United Kingdom), we will do so based on our legitimate interests or, where legally required, your consent. You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us at info@xtend.me. Please note that opting out of marketing communications will not affect service-related or transactional messages, such as responses to your inquiries, security notices, or contractual communications.

Service Communications: We use your personal data to communicate with you about the Services. If you provide your email address, we will use it to respond to inquiries and support requests, and to send service-related notices, security alerts, and administrative messages related to your account and use of the Services.

XTEND does not sell your personal data to any third party. XTEND may transfer your personal data to its affiliates in the XTEND group, to provide you with better services and/or to provide you with additional offers related to your approach to XTEND (for example, if an Applicant asked to apply to a job opening, an Affiliate of XTEND may respond to such Applicant's approach).

V. Cookies and Automated personal data Collection

We and other service providers (for example, browser service provider as Chrome, Google, Safari), may use cookies, beacons, pixels, tags, and scripts, which are small pieces of data transferred to your computer for record-keeping purposes; and local shared objects, also known as flash cookies, which help us to reduce fraud, remember your preferences, speed up loading times, to optimize our offerings and marketing and personalized your experience of our Website.

We and our third-party service providers use cookies, web beacons, pixels, tags, scripts and similar tracking technologies (collectively "Cookies") to collect and analyze technical data, personalize your experience, and enable core functionality of our Services.

These technologies may collect personal data such as:

IP addresses.
Device identifiers (including MAC Address, IDFA, and/or IMEI).
Browser type and settings.
Operating system details.
Language preferences.
Referring and exit pages/URLs.
Usage data and browsing patterns your browser types.
Platform type.
The amount of time spent on particular pages.

Non-essential cookies (such as analytics and advertising cookies) will be used only where required by applicable law and after you provide your consent through our cookie banner or preference settings. You may manage your cookie preferences at any time as described in our Cookie Policy. You're able to opt-out or change the use of cookies, by adjusting your browser/device settings (as applicable) and you may delete all/part stored cookies on your computer/mobile device. For additional information regarding our use of cookies and similar tracking technologies, including the types of cookies we use and how you can manage your preferences, please refer to our Cookie Policy.

VI. How We Share Your Personal Data with Third Parties

We may disclose aggregated data (data about you and other users collectively that is not intended to specifically identify you) and other non-personal data about our users for industry analysis, demographic profiling, marketing, analytics, and other business purposes.

Notwithstanding the foregoing, personal data may be disclosed to third parties if required under any applicable law or regulation or order by competent authorities, or in order to enforce the Terms and Conditions and to investigate possible infringing use of the Services.

Your personal data, and the contents of all of your online communications in the Website (as well as of your Authorized Users) and between you and us may be accessed and monitored by us or disclosed to a third party:

If we have a good faith belief that we have to disclose the personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements, or legal process (for example, a court order, search warrant or subpoena);
To satisfy any laws or regulations that apply;
Where we believe that the Services are being used in committing a crime, including to report such criminal activity or to share personal data with other companies and organizations for the purposes of fraud protection, credit risk reduction, and other security precautions;
When we have a good faith belief that there is an emergency that poses a threat to the health and/or safety of you, another person or the public generally; and
If we become involved in a merger, acquisition, or any form of sale of some or all of our assets.
To protect the rights or property of XTEND and applicable third parties, including to enforce the Terms and Conditions.
We may share personal data with business partners where necessary to provide integrated services or joint offerings, subject to applicable data protection requirements.

VII. Affiliates and Group Companies

In addition to the third-party disclosures described above, we may share your personal data with companies within the XTEND group:

To provide and improve our Services;
To respond to your inquiries and requests;
To manage recruitment processes;
To provide related products or services that may be of interest to you, where permitted by applicable law and subject to your communication preferences.

All such entities will process personal data in accordance with this Privacy Notice and applicable data protection laws.

VIII. Third-Party Service Providers

We may share your personal data with third-party companies (such as Google, JIRA, Comeet, IT services, data storage etc.) to perform services on our behalf, such as analyzing data, hosting services, management of Applicant applications, communicating with our Customers through our customers portal or providing customer support and service. We contractually require these third-party service providers to maintain the confidentiality of the personal data we share with them, and we contractually require them to comply with applicable data protection laws as well as to not use your personal data for anything other than to provide services on our behalf. Some of our service providers may be located in jurisdictions outside your country of residence, and in such cases we ensure that appropriate safeguards are in place, as required by applicable law.

IX. Your Rights: How to Access, Update and Manage Your personal data

As a User of XTEND Services, you have a right to access, update and manage your own personal data under the applicable data protection laws. If you wish to exercise any of the rights defined below, please email us at info@xtend.me.

We may request additional personal data in order to verify your identity, in order to protect your personal data and prevent fraud or unauthorized access. Any identification data provided for verification purposes will be used solely for that purpose and will not be retained longer than necessary. We will respond to your request in accordance with applicable law. Please note that where requests are manifestly unfounded, excessive, or repetitive, we may refuse to act on the request or charge a reasonable fee, as permitted under applicable data protection laws.

EEA/UK Rights (GDPR):

If you are a GDPR or UK GDPR protected individual, the following rights will apply, subject to certain exceptions:

Accessing and Updating Your Personal data: You are entitled to obtain confirmation on whether or not we process personal data about you. You may also have information on our means of processing as well as a copy of the personal data undergoing processing.

We may charge a reasonable fee based on our administrative costs if you request further copies.

Right to rectify your data: You shall have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. You may have your incomplete data completed if you provide us with additional details or statement.

Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, as provided by applicable data protection laws. This may apply, for example, where you contest the accuracy of the personal data, where the processing is unlawful, or where you have objected to the processing and we are considering whether our legitimate grounds override yours.

Right to Object to Processing: You have the right to object to the processing of your personal data where such processing is based on our legitimate interests, for reasons relating to your particular situation. In addition, you have the right to object at any time to the processing of your personal data for direct marketing purposes, and in such case we will cease processing your personal data for such purposes.

Right to Data Portability: Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to request to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format, and to request that we transfer such personal data to another controller, where technically feasible.

Right to Withdraw Consent: Where we rely on your consent to process personal data, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Right to erasure: If you no longer want us to actively process your personal data, you can have us delete your personal data if:

Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
If you withdraw your consent;
If you object to the processing and there are no overriding legitimate grounds for the processing;
The personal data have been unlawfully processed; or
The personal data have to be erased for compliance with a legal obligation in applicable law.

Please note that certain records, for example those relating to payments or customer service matters, will be held for legal and accounting purposes.

If you are protected under the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with the competent supervisory authority in your place of residence, including in the United Kingdom, where applicable.

California Privacy Rights (CCPA/CPRA):

If you are a California resident, you may have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), subject to certain exceptions:

Right to Know/Access: You may request that we disclose the categories and specific pieces of personal information we collected about you, the categories of sources, our business or commercial purposes for collecting, and the categories of third parties to whom we disclose personal information.
Right to Delete: You may request that we delete personal information we collected from you, subject to applicable exceptions.
Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
Right to Opt Out of Sale/Sharing/Targeted Advertising: Where applicable, you may request to opt out of the "sale" or "sharing" of your personal information (as those terms are defined under California law) and/or certain targeted advertising activities.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Requests may also be submitted by an authorized agent, where permitted by law. We will respond within the timeframes required by applicable law (generally within 45 days, and we may extend once where permitted).

X. Privacy Policies of Linked Third-Party Services

Our Platforms and Services may contain links to third-party services, which are companies other than XTEND that may link to their own websites, online services or applications. We are not responsible for the privacy practices or the content of these third-party services. If you have any questions about how these third-party services use your personal data, you should review their policies and contact them directly. If we receive an inquiry relating to a third-party service, we will make reasonable efforts to direct you to the relevant third party, where appropriate.

XI. Data Location and Transfers of Data

XTEND and its Service Providers maintain, store and process personal data in the United States, the European Union, Israel and other locations as reasonably necessary for the proper performance and delivery of its Services, or as may be required by law.

In addition, XTEND may transfer your personal data to affiliated entities or to other third parties outside of your local state of citizenship. Please note that these countries and jurisdictions may not have the same data protection laws as your own jurisdiction, and XTEND takes steps to ensure adequate safeguards are in place to enable transfer of personal data to these third countries, all as required by law.

We ensure that a legal basis for such a transfer exists and that adequate protection for the personal data is provided as required by applicable law. We use standard contractual clauses and require that the receiving party uses appropriate technical and organizational data security measures. For more information about how we protect personal data, please see Section XIII (Security of Your Personal Data).

XII. How Long We Keep Your personal data

We will not retain your personal data for longer than is necessary for the defined purpose of the processing of personal data or for legal requirements. Certain records, for example those relating to payments, will be retained for accounting purposes for six years after the end of the year during which the financial year ended.

XIII. Security of Your personal data

We implement technical and organisational security measures to help protect the security of your personal data both online and offline. We take steps to ensure that your personal data is treated securely and in accordance with this Privacy Notice. These measures vary based upon the sensitivity of your data. Therefore, while we strive to protect your personal data, we implement appropriate technical and organizational security measures designed to protect it against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access, including:

Password protection and access controls.
Encryption of data in transit and at rest.
Regular security assessments and audits.
Employee training and confidentiality obligations.

While we take precautions against possible security breaches of XTEND Services and our customer databases and records, no website or Internet transmission is completely secure. We cannot guarantee that unauthorised access, hacking, data loss, or other breaches will never occur, and we cannot guarantee the security of your personal data while it is being transmitted to XTEND Services and Website. Any transmission is at your own risk. If you have questions about the security of our websites, please contact us at info@xtend.me.

XIV. Changes to the Privacy Notice

If we decide to make material changes to this Privacy Notice, we will tell you by placing a notice on our Website, or by sending you a notice to the e-mail address we have on file for you prior to the change becoming effective. You should periodically check our Terms and Conditions and this Privacy Notice for updates.

XV. Contact Us

If you have any questions, comments or concerns regarding the Privacy Notice or practices, please send an e-mail to info@xtend.me.

Last updated: April 2026