Privacy & Data Protection Policy

1 Information We Collect

When utilizing the XoSo application and TerraSys Studio ecosystem services, we may collect the following categories of information:

• a) Account Information: Full name, email address, phone number upon registration. If logging in via Google, Facebook, or Apple OAuth, we only receive public profile identifiers (name, email, avatar).
• b) Scanned OCR Ticket Data: Ticket images captured through your camera are processed strictly for real-time 60FPS number recognition on the server, then safely stored in your private Ticket Wallet.
• c) Technical & Device Telemetry: Anonymous device push tokens, OS versions, and diagnostic error reports used solely to guarantee app stability and service delivery.

2 Purpose of Data Processing

Data collected by TerraSys Studio is strictly utilized for the following functional purposes:

3 Data Security & Encryption Standards

• • All network traffic between client devices and servers is encrypted via industry-standard TLS/SSL (HTTPS).
• • Authentication tokens are securely persisted in hardware-backed storage (iOS Keychain / Android Keystore).
• • Passwords are cryptographically salted and hashed one-way; plain text credentials are never persisted.
• • Cloud database clusters are hosted on MongoDB Atlas with automatic 90-day time-to-live (TTL) expiration policies.

4 Zero Third-Party Data Monetization Guarantee

TerraSys Studio strictly never sells, rents, or shares your personal identifiable information with third-party advertising vendors. Information is processed exclusively to deliver product functionality or comply with lawful governmental requests.

5 User Rights & Controls

You maintain full authority over your personal information at all times:

• Access, inspect, or update your profile details anytime within the Account tab.
• Opt out of push notifications directly via system settings or in-app preferences.
• Request permanent deletion of your account and associated ticket history.

6 Contact Privacy Officer

For privacy questions or data deletion requests, contact TerraSys Studio: