Privacy policy
XPAI Privacy Policy
Last Updated: August 28, 2026
XPAI ("XPAI", "we", "us", or "our") respects your privacy and is committed to protecting your personal information.
XPAI is a brand owned and operated by Shenzhen Xiaopai Technology Co., Ltd. For information regarding the XPAI trademark, please refer to the official United States Patent and Trademark Office (USPTO) trademarkdatabase. [XPAI Trademark Record].
This Privacy Policy explains how XPAI collects, uses, stores, discloses, transfers, and protects personal information when you use XPAI products and services, including XPAI security cameras, the XPAI mobile application ("XPAI App"), XPAI cloud services, websites, customer support services, subscription services, and related products, features, and technologies (collectively, the "Services").
This Privacy Policy applies globally. Additional rights and disclosures may apply depending on where you live. If you are located in the European Economic Area ("EEA"), the United Kingdom ("UK"), Switzerland, California, or another jurisdiction with applicable privacy laws, please also review the jurisdiction-specific sections of this Privacy Policy.
Please read this Privacy Policy carefully before using our Services.
1. WHO WE ARE
The entity responsible for processing your personal information is:
Shenzhen Xiaopai Technology Co., Ltd.
Address: Unit A 8F 806, Skyworth Bldg, Gaoxin Ave. 1.S., Nanshan District, Shenzhen, China
Privacy Contact: support@xpaihome.com
Customer Support: support@xpaihome.com
Website: xpaihome.com
Where required by applicable law, XPAI may appoint a Data Protection Officer ("DPO") and/or a representative in a relevant jurisdiction.
2. SCOPE OF THIS PRIVACY POLICY
This Privacy Policy applies to personal information processed in connection with:
XPAI security cameras and other connected devices;
XPAI App;
XPAI cloud and cloud storage services;
XPAI websites and online services;
device registration and account services;
device setup and configuration;
live video viewing;
remote device control;
video and audio recording;
cloud storage;
AI-powered detection and analysis;
device sharing;
push notifications;
customer support and after-sales services;
product purchases;
subscriptions and payments;
firmware updates;
device diagnostics;
third-party integrations;
smart home services; and
other services that refer to this Privacy Policy.
This Privacy Policy does not apply to third-party websites, applications, platforms, or services that are not controlled by XPAI.
Third-party services may have their own privacy policies and terms.
3. INFORMATION WE COLLECT
The information we collect depends on the products and Services you use, the features you enable, your interactions with us, and the permissions you grant.
We seek to collect only information that is reasonably necessary for the purposes described in this Privacy Policy.
4. ACCOUNT INFORMATION
When you create or use an XPAI account, we may collect:
email address;
phone number, where applicable;
account ID;
authentication information;
verification information;
country or region;
language preference;
time-zone preference;
account settings;
profile information; and
information you voluntarily provide.
We use this information to create and manage your account, authenticate you, provide Services, protect your account, and communicate with you.
5. DEVICE INFORMATION
When you add, configure, or manage an XPAI device, we may collect:
device serial number;
device ID;
product model;
firmware version;
hardware version;
MAC address;
device configuration;
device status;
device ownership information;
device sharing status;
battery information;
power status;
storage information;
SD card status;
network connection status;
diagnostic information; and
other technical information generated by the device.
This information is used to provide device management, device binding, troubleshooting, maintenance, security, and related Services.
6. NETWORK AND CONNECTIVITY INFORMATION
Depending on your device and network configuration, we may process:
IP address;
Wi-Fi network information;
Wi-Fi signal strength;
network connection status;
network type;
cellular network information;
mobile network operator;
signal quality;
network band;
cell information;
connection logs;
connection errors;
network diagnostic information; and
related timestamps.
For 4G-enabled devices, technical cellular network information may be processed to provide connectivity, diagnose network problems, improve connection stability, and maintain device functionality.
7. LOCATION INFORMATION
Certain XPAI features may require location-related permissions on your mobile device.
For example, your mobile operating system may require location permission during Wi-Fi setup or device discovery.
Depending on your operating system and the functions you use, the XPAI App may request access to:
approximate location;
precise location;
nearby Wi-Fi networks;
Bluetooth;
local network access; and
other system permissions required for device setup.
You may manage or disable these permissions through your device settings. Disabling certain permissions may prevent some functions from operating properly.
8. VIDEO, AUDIO AND CAMERA DATA
XPAI provides security camera products. Depending on the product and features you use, XPAI Services may process:
live video;
recorded video;
snapshots;
audio;
two-way audio;
event recordings;
motion-detection recordings;
human-detection recordings;
AI event information;
video thumbnails;
device-generated metadata; and
related timestamps.
8.1 Local Storage
If your XPAI camera stores recordings on an SD card or other local storage, those recordings may remain directly on your device.
Local recordings are not automatically transmitted to XPAI unless you enable a feature that requires transmission, remote access, cloud storage, or another network-based function.
9. CLOUD STORAGE
If you enable or purchase XPAI Cloud Storage, recordings generated by your camera may be transmitted to and stored in XPAI's cloud infrastructure.
The storage period and capacity depend on the cloud service plan and configuration applicable to your account.
10. LIVE VIEWING
When you use live viewing, XPAI may process relevant device, network, account, and connection information to establish and maintain the connection between your XPAI App and camera.
Depending on the technical architecture, live video may be transmitted through XPAI cloud infrastructure, P2P connectivity infrastructure, relay servers, or other connection technologies.
11. AI AND SMART DETECTION
Certain XPAI products provide AI-powered functions, which may include:
human detection;
motion detection;
object detection;
AI event classification;
automatic tracking;
activity detection;
event filtering;
smart alerts; and
other AI-based camera functions.
AI processing may occur:
on the camera;
within the XPAI App;
on XPAI cloud infrastructure; or
through a combination of these environments.
AI processing may generate:
detection type;
event time;
event classification;
detection confidence;
event thumbnails; and
technical metadata.
Unless specifically disclosed, XPAI does not use camera data to identify individuals by name.
If an AI feature involves processing that is legally classified as biometric information, sensitive personal information, special-category personal data, or another specially protected category, XPAI will apply the additional requirements applicable to that processing.
For the avoidance of doubt, the AI processing described in this section does not authorize XPAI to use data obtained through the Google Home Developer Platform to train artificial intelligence models, machine learning models, generative AI models, or other related artificial intelligence tools. Such Google Home integration data is subject to the restrictions described in Section 19.1 of this Privacy Policy.
12. DEVICE SHARING
XPAI allows users to share access to certain devices with other users.
When you use device sharing, we may process:
device owner's account ID;
invited user's account ID or contact information;
device ID;
permissions;
invitation status;
access records;
sharing history;
permission changes; and
related timestamps.
The device owner is responsible for determining who may access the device.
You are responsible for ensuring that your use of device sharing complies with applicable privacy and surveillance laws.
13. CUSTOMER SUPPORT
When you contact XPAI customer support, we may collect:
name;
email address;
phone number;
account information;
order information;
device information;
device serial number;
screenshots;
videos;
troubleshooting information;
support conversations;
support tickets;
diagnostic logs; and
other information you provide.
We use this information to provide customer service, troubleshoot technical problems, process warranty claims, investigate complaints, improve our products, and protect the security of our Services.
14. PURCHASES, PAYMENTS AND SUBSCRIPTIONS
When you purchase XPAI products or subscribe to XPAI Services, we may process:
name;
email address;
shipping address;
billing address;
telephone number;
order information;
product information;
subscription information;
transaction amount;
payment status;
refund information; and
fraud-prevention information.
Payment card information may be processed directly by third-party payment providers.
Unless necessary for a particular payment function, XPAI does not need to receive or store your complete payment card number.
15. APP USAGE AND DIAGNOSTIC INFORMATION
We may automatically collect technical information relating to your use of the XPAI App and Services, including:
App version;
operating system;
mobile device model;
language;
country or region;
device type;
crash reports;
error logs;
performance information;
network information;
login records;
device connection records;
feature usage information;
timestamps; and
other diagnostic information.
Where appropriate, we may use aggregated or pseudonymized information for analytics and service improvement.
16. COOKIES AND SIMILAR TECHNOLOGIES
XPAI websites and online services may use:
cookies;
pixels;
SDKs;
local storage;
device identifiers; and
similar technologies.
These technologies may be used for:
essential website functions;
authentication;
security;
preferences;
analytics;
performance measurement;
service improvement; and
advertising or marketing where permitted by applicable law.
Where applicable law requires consent for non-essential technologies, we will obtain consent before activating them.
For clarity, XPAI does not use data obtained through the Google Home Developer Platform for advertising, targeted advertising, behavioral advertising, or marketing purposes.
17. HOW WE USE PERSONAL INFORMATION
We may use personal information for the following purposes.
Providing Services
create and manage accounts;
authenticate users;
connect devices;
configure devices;
provide live video;
provide remote control;
provide cloud storage;
provide video playback;
provide notifications;
provide device sharing;
provide AI functions;
process subscriptions; and
provide customer support.
Security and Fraud Prevention
protect accounts;
detect unauthorized access;
prevent fraud;
investigate abuse;
protect our infrastructure; and
maintain device and network security.
Product Improvement
diagnose technical problems;
improve device reliability;
improve App performance;
improve cloud services;
analyze aggregated or pseudonymized service usage; and
develop new features and products.
Legal Compliance
We may process personal information when necessary to comply with applicable laws, respond to lawful government requests, enforce our terms, establish or defend legal claims, maintain accounting and tax records, or protect our rights, property, and safety.
Marketing
Where required by applicable law, we will obtain your consent before sending marketing communications.
18. HOW WE DISCLOSE PERSONAL INFORMATION
XPAI does not sell personal information for monetary consideration.
We may disclose personal information to the following categories of recipients when necessary:
Service Providers
Service providers may include:
cloud infrastructure providers;
hosting providers;
CDN providers;
P2P connectivity providers;
relay providers;
push notification providers;
analytics providers;
payment providers;
customer support providers;
email providers;
security providers;
logistics providers; and
professional advisers.
These providers are permitted to process information only as necessary to perform their services for XPAI, subject to applicable contractual and legal requirements.
Third-Party Integrations
When you enable a third-party integration, we may disclose information necessary to provide that functionality, as described in Section 19.
Legal Authorities
We may disclose information where required by applicable law, court order, legal process, or lawful government request.
Corporate Transactions
Personal information may be transferred as part of a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, subject to applicable law.
19. THIRD-PARTY INTEGRATIONS
XPAI products may support third-party platforms and smart home ecosystems, including, where supported:
Amazon Alexa;
Google Home / Google Assistant;
Matter-compatible ecosystems;
Apple or other smart home platforms; and
other third-party services.
When you enable an integration, XPAI may exchange information with the relevant third party as necessary to provide the requested functionality.
Third parties may independently process information according to their own privacy policies and terms.
19.1 GOOGLE HOME INTEGRATION
If you choose to connect your XPAI devices or Services with Google Home, XPAI may process and exchange information necessary to establish, maintain, secure, and operate the integration and provide the functionality you request.
Depending on the devices and features you use, this information may include:
XPAI account or account-linking information;
device identifiers, such as device ID or serial number;
device name;
device type and model;
device capabilities;
device configuration;
device status;
connectivity and technical information;
information necessary to process commands and requests initiated through Google Home;
information necessary to provide device control and status functionality;
technical logs necessary to maintain and troubleshoot the integration; and
where supported and requested by you, information necessary to provide camera or live-view functionality.
We use Google Home integration information only as necessary to:
establish and maintain account linking;
connect your XPAI account and devices with Google Home;
provide device discovery and control;
process commands and requests initiated through Google Home;
provide device status and supported camera functionality;
maintain and secure the integration;
troubleshoot technical problems; and
comply with applicable legal obligations.
Restrictions on Google Home Integration Data
XPAI does not sell personal information or data obtained through the Google Home Developer Platform.
XPAI does not use data obtained through the Google Home Developer Platform for advertising, targeted advertising, behavioral advertising, or marketing purposes.
XPAI does not use data obtained through the Google Home Developer Platform to train artificial intelligence models, machine learning models, generative AI models, or other related artificial intelligence tools.
XPAI does not use Google Home integration data for purposes unrelated to providing, maintaining, securing, or troubleshooting the requested Google Home integration, except where otherwise required or permitted by applicable law.
XPAI does not request or access data through Google Home that is not reasonably necessary to provide the supported integration functionality.
Information exchanged with Google may also be processed by Google in accordance with Google's applicable terms and privacy policies.
19.2 AMAZON ALEXA AND OTHER SMART HOME INTEGRATIONS
If you connect XPAI devices or Services to Amazon Alexa, Matter-compatible ecosystems, Apple platforms, or other supported smart home services, XPAI may process and exchange information reasonably necessary to provide the requested functionality.
The information processed may include account-linking information, device identifiers, device names, device capabilities, device status, commands, configuration information, and technical information required to operate and troubleshoot the integration.
Third-party platforms may independently process information according to their own privacy policies and terms.
20. INTERNATIONAL DATA TRANSFERS
XPAI may use service providers, infrastructure, or personnel located in countries outside your country of residence.
If personal information is transferred internationally, XPAI will implement safeguards required by applicable law.
For EEA personal data, where required, transfers to countries without an applicable adequacy decision may rely on mechanisms such as:
European Commission Standard Contractual Clauses;
adequacy decisions;
Binding Corporate Rules; or
another lawful transfer mechanism recognized under applicable law.
Where required, XPAI may conduct transfer risk assessments and implement supplementary safeguards.
21. DATA RETENTION
We retain personal information only for as long as reasonably necessary to provide the Services, maintain your account, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce our agreements, protect our Services, and prevent fraud or abuse.
Retention periods may vary depending on the type of information, the Services you use, your account status, and applicable legal requirements.
For camera recordings and cloud storage, retention periods may depend on your subscription plan, device configuration, storage settings, and the features you use.
For Google Home integration data, XPAI retains such information only for as long as reasonably necessary to provide, maintain, secure, and troubleshoot the integration, or as otherwise required by applicable law.
When personal information is no longer required, XPAI will delete, anonymize, or otherwise securely dispose of it in accordance with applicable law and our data retention practices.
22. DATA SECURITY
XPAI implements reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, destruction, and unlawful processing.
Depending on the Services, safeguards may include:
encryption in transit;
access controls;
authentication;
authorization controls;
security monitoring;
logging;
vulnerability management;
secure development practices;
data minimization;
employee access restrictions; and
incident response procedures.
No Internet-based service can guarantee absolute security.
23. ACCOUNT AND DATA DELETION
You may request deletion of your XPAI account and personal information.
Depending on the Services you use, deletion may result in:
termination of account access;
removal of device associations;
deletion of cloud recordings;
termination of subscriptions; and
deletion or anonymization of account information.
Some information may be retained where required by law or necessary for security, fraud prevention, legal claims, accounting, or other lawful purposes.
Where applicable, XPAI will also process requests to delete personal information associated with supported third-party integrations in accordance with applicable law and the technical requirements of those integrations.
24. DATA RELATING TO OTHER INDIVIDUALS
XPAI cameras may capture individuals other than the camera owner.
You are responsible for ensuring that your use of XPAI cameras complies with applicable privacy, surveillance, employment, property, and other laws.
Depending on your location and circumstances, you may need to:
notify individuals that recording is taking place;
use appropriate signage;
avoid areas where individuals have a reasonable expectation of privacy;
appropriately configure recording areas;
restrict access to recordings; and
comply with local surveillance and privacy requirements.
XPAI provides the technology but does not determine where or how you install or operate your camera.
25. CHILDREN'S PRIVACY
Our Services are not directed to children below the minimum age required under applicable law.
XPAI does not knowingly collect personal information from children in violation of applicable law.
If you believe that a child has provided personal information to XPAI in violation of applicable law, please contact us so that we can take appropriate action.
26. AUTOMATED DECISION-MAKING AND PROFILING
XPAI may use automated technologies for:
motion detection;
human detection;
object classification;
event filtering;
technical diagnostics;
fraud prevention; and
security.
These technologies are primarily used to provide requested product functions and maintain system security.
Unless otherwise disclosed, XPAI does not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
27. YOUR PRIVACY RIGHTS
Depending on your location and applicable law, you may have rights regarding your personal information, including:
right to access;
right to know;
right to correction;
right to deletion;
right to restriction;
right to object;
right to data portability;
right to withdraw consent where processing is based on consent;
right to opt out of certain targeted advertising;
right to opt out of certain profiling;
right to opt out of the sale of personal information; and
right to appeal certain privacy request decisions.
Not every right applies in every jurisdiction, and some rights are subject to exceptions and eligibility requirements.
28. HOW TO EXERCISE YOUR PRIVACY RIGHTS
You may contact us at:
Privacy Email: support@xpaihome.com
To exercise applicable privacy rights, please contact us using the email address above and describe your request.
When necessary, we may ask for information to verify your identity and protect your account.
We will respond within the period required by applicable law.
We generally do not charge a fee for privacy requests unless permitted by applicable law.
29. GDPR / EEA PRIVACY RIGHTS
This section applies to individuals located in the European Economic Area.
Where GDPR applies, you may have the following rights:
Right of Access
You may request confirmation of whether we process your personal data and obtain a copy of that data.
Right to Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data where the requirements of GDPR are satisfied.
Right to Restriction
You may request restriction of processing in circumstances provided by GDPR.
Right to Object
You may object to processing based on legitimate interests and, where applicable, other grounds.
You have an absolute right to object to direct marketing.
Right to Data Portability
Where applicable, you may request your personal data in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time.
Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
30. THIRD-PARTY WEBSITES AND SERVICES
Our Services may contain links to third-party websites, applications, platforms, or services.
XPAI does not control the privacy practices of third parties.
You should review the applicable third party's privacy policy before using the service or providing personal information.
31. DATA PROCESSING ON BEHALF OF CUSTOMERS
In certain circumstances, XPAI may process personal information contained in customer-controlled content on behalf of a customer.
For example, where an organization uses XPAI Services to manage cameras or cloud recordings, the organization may determine the purposes and means of processing.
In such cases, XPAI may act as a data processor or service provider rather than an independent controller or business, depending on applicable law and the specific relationship.
The relevant processing relationship may be further governed by a Data Processing Agreement ("DPA") or other contractual terms.
32. U.S. STATE PRIVACY RIGHTS
This section applies to residents of U.S. states that provide applicable consumer privacy rights.
Depending on the state in which you reside, you may have rights including:
right to know/access personal information;
right to delete personal information;
right to correct inaccurate personal information;
right to obtain a copy of personal information;
right to data portability;
right to opt out of certain targeted advertising;
right to opt out of certain profiling;
right to opt out of the sale of personal information;
right to limit certain processing of sensitive personal information;
right to appeal a privacy request decision; and
right to non-discrimination for exercising applicable privacy rights.
Not every right applies in every state, and some rights are subject to exceptions and eligibility requirements.
33. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect:
changes to our Services;
changes in technology;
changes in applicable law;
changes in data processing activities; and
improvements to our privacy practices.
When required, we will provide appropriate notice before material changes take effect.
The updated Privacy Policy will be published on this page with a new "Last Updated" date.
Where required by law, we will obtain your consent before implementing changes that require consent.
34. CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal information, please contact us:
Shenzhen Xiaopai Technology Co., Ltd.
Address: Unit A 8F 806, Skyworth Bldg, Gaoxin Ave. 1.S., Nanshan District, Shenzhen, China
Privacy Email: support@xpaihome.com
Customer Support: support@xpaihome.com
Website: xpaihome.com