Legal Protocol

Legal Documents

Master Service Agreement, Product Terms, and Privacy Notice governing your use of the XBandGlobal platform.

Last updated: May 1, 2026

Section I

Master Service Agreement

Core terms governing the relationship between XBandGlobal, Clients, and Providers.

01

Definitions

"Platform" means the XBandGlobal website, web application, APIs, and all associated tools and services operated by XBandGlobal Ltd.

"Provider" means any entity or individual that has created a verified service-provider account on the Platform and offers professional services to Clients.

"Client" means any individual or corporate entity that accesses the Platform to discover, evaluate, or engage Providers.

"Services" means the professional incorporation, compliance, accounting, legal, or related services offered by Providers independently of XBandGlobal.

"Engagement" means a confirmed agreement between a Client and a Provider, facilitated through the Platform, under which the Provider delivers Services to the Client.

"Credits" means the platform-native units of exchange that Clients purchase to initiate contact or request proposals from Providers.

02

Platform Role & Limitations

XBandGlobal operates exclusively as a business-to-business marketplace and discovery platform. XBandGlobal does not itself provide legal, tax, accounting, compliance, or any other professional services.

All professional Services accessible through the Platform are delivered solely by independent third-party Providers. XBandGlobal is not a party to any Engagement between a Client and a Provider and bears no responsibility for the quality, accuracy, legality, or timeliness of Services delivered.

Information presented on Provider listing pages, including jurisdictions, credentials, pricing, and service descriptions, is supplied by Providers and has not been independently verified by XBandGlobal. Clients acknowledge that Platform content does not constitute professional advice.

XBandGlobal reserves the right to modify, suspend, or discontinue any feature of the Platform at any time with reasonable notice where practicable.

03

Provider Obligations

Providers must ensure that all information submitted to the Platform — including company details, service descriptions, jurisdictions covered, licensing status, and pricing — is accurate, current, and not misleading.

Providers must hold all licences, registrations, and authorisations required by applicable law to deliver the Services they advertise on the Platform. Providers are solely responsible for maintaining the currency and validity of such credentials.

Providers must comply with all applicable local, national, and international laws and professional regulations in the jurisdictions in which they operate.

Providers must respond to Client inquiries in a timely and professional manner. Failure to engage with matched inquiries within a reasonable period may result in de-prioritisation or removal from Platform search results.

Providers must not use the Platform to engage in deceptive practices, price-fixing with other Providers, or any conduct that would constitute a breach of competition, consumer protection, or professional conduct rules.

04

Client Obligations

Clients are solely responsible for conducting their own due diligence on any Provider before entering into an Engagement. XBandGlobal does not warrant or guarantee the competence, solvency, or regulatory standing of any Provider.

Clients must provide accurate and complete information when submitting inquiries or onboarding to the Platform. Providing false or misleading information may result in account suspension.

Clients acknowledge that professional services involve inherent complexity and risk, and that outcomes depend on factors outside the Platform's control, including the actions of Providers, regulatory authorities, and third parties.

Clients must not use contact information obtained through the Platform to circumvent the Credit system or conduct future business with Providers outside of Platform terms where Platform terms require otherwise.

05

Fees & Payment

Access to Provider contact details and proposal submissions requires the consumption of Credits. Credits are purchased in advance through the Platform's payment flow, which is processed by Stripe (for USD transactions) or Razorpay (for INR transactions).

All Credit purchases are final. Refunds are available only where (a) a technical error on the part of XBandGlobal resulted in Credits not being delivered, or (b) a Provider account is suspended by XBandGlobal for verified misconduct prior to the Client initiating contact. Refund requests must be submitted within 30 days of the transaction.

XBandGlobal does not charge transaction fees on Engagements concluded between Clients and Providers off-platform. There are no hidden fees beyond the published Credit pricing.

Providers on premium tiers pay a listing subscription fee as disclosed in the Provider pricing schedule. Subscription fees are non-refundable except as required by applicable consumer protection law.

06

Intellectual Property

All technology, software, branding, design, trade marks, content (excluding Provider-supplied materials), and databases comprising or embedded in the Platform are the exclusive property of XBandGlobal Ltd or its licensors. No licence to any such intellectual property is granted by these terms beyond the limited right to use the Platform for its intended purpose.

Providers retain all intellectual property rights in materials they submit to the Platform, including service descriptions, credentials, logos, and pricing schedules. By uploading such materials, Providers grant XBandGlobal a non-exclusive, royalty-free, worldwide licence to display and reproduce those materials on the Platform solely for the purpose of facilitating Client discovery.

Clients must not copy, scrape, republish, or otherwise exploit Platform content or Provider data beyond what is reasonably necessary to evaluate and engage a Provider for legitimate business purposes.

07

Confidentiality

In the course of using the Platform, Clients and Providers may share commercially sensitive information including business plans, financial data, regulatory filings, and proprietary processes. Each party receiving such information agrees to treat it as confidential, not to disclose it to third parties without the originating party's written consent, and to use it solely for the purpose of evaluating or executing an Engagement.

Confidentiality obligations do not apply to information that (a) is or becomes publicly known other than through a breach of this clause, (b) was known to the receiving party before disclosure, (c) is independently developed by the receiving party, or (d) is required to be disclosed by law or regulatory order.

XBandGlobal's own handling of personal data and platform usage data is governed by the Privacy Notice set out in Section III of this document.

08

Limitation of Liability

To the maximum extent permitted by applicable law, XBandGlobal's aggregate liability to any user arising out of or in connection with these terms or use of the Platform shall not exceed the total amount of fees paid by that user to XBandGlobal in the twelve months preceding the claim.

XBandGlobal shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, loss of data, loss of goodwill, business interruption, or procurement of substitute services, whether arising in tort, contract, or otherwise, even if advised of the possibility of such damages.

XBandGlobal expressly excludes all liability arising from the quality, outcome, or legality of Services delivered by Providers. Any dispute concerning a completed Engagement is a matter between the relevant Client and Provider.

09

Indemnification

Each user (whether Client or Provider) agrees to indemnify, defend, and hold harmless XBandGlobal, its officers, employees, contractors, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or in connection with: (a) that user's use of the Platform; (b) any Engagement entered into through the Platform; (c) any breach of these terms; or (d) any infringement of third-party rights.

XBandGlobal reserves the right to assume exclusive control of any matter subject to indemnification. Users agree to co-operate fully in asserting any available defences.

10

Term & Termination

These terms commence on the date a user creates an account and continue until the account is closed or terminated.

Users may close their accounts at any time through the Account Settings section of the dashboard. Upon closure, Provider listings are removed from public search. Client data is handled in accordance with the Privacy Notice.

XBandGlobal may suspend or terminate any account immediately if the account holder breaches these terms, engages in fraudulent activity, violates applicable law, or poses a risk to the safety or integrity of the Platform or its users.

Termination does not affect any accrued rights or liabilities. Clauses relating to intellectual property, confidentiality, limitation of liability, indemnification, and dispute resolution survive termination.

11

Governing Law & Dispute Resolution

These terms are governed by and construed in accordance with the laws of England and Wales, without regard to conflict-of-law principles.

In the event of a dispute arising out of or in connection with these terms or the use of the Platform, the parties agree to first attempt resolution through good-faith negotiation for a period of 30 days.

If negotiation fails, the dispute shall be referred to and finally resolved by binding arbitration under the rules of the London Court of International Arbitration (LCIA). The arbitration shall be conducted in English and seated in London. The decision of the arbitrator shall be final and binding.

Nothing in this clause prevents either party from seeking urgent injunctive or other equitable relief from a court of competent jurisdiction.

Section II

Product Terms

Rules and guidelines for using the XBandGlobal platform, its features, and integrations.

01

Eligibility & Account Requirements

To create an account on the Platform, you must be at least 18 years of age and legally capable of entering into binding contracts in your jurisdiction.

Provider accounts must be associated with a validly incorporated or registered business entity. Sole practitioners operating under a recognised professional licence may also register as Providers. Personal or consumer accounts are not eligible for Provider status.

You must provide accurate, current, and complete information during the registration process and maintain the accuracy of that information throughout your use of the Platform. Accounts created with false or fictitious information will be suspended.

One natural person may hold one account per role (Client / Provider). Organisations may hold one Provider account. Multiple accounts created to circumvent Platform limits or policies will be removed.

02

Service Description

The Platform enables Clients to discover and compare Providers across 70+ jurisdictions using structured filters including service category, jurisdiction, language, and pricing tier.

Jurisdiction Research Tools provide non-advisory overviews of typical regulatory requirements in covered markets. This content is informational only and does not constitute legal or professional advice.

The Matching & Proposal System allows Clients to submit structured service inquiries to Providers. Providers receive inquiry details and may respond with proposals. Both parties communicate through the Platform's controlled messaging environment until they agree to proceed.

The Credit-Based Contact System ensures that Provider contact and proposal exchange is metered through Credits, maintaining service quality and preventing spam. Clients purchase Credits to initiate inquiries; Providers do not pay per contact.

03

Subscription Tiers & Credits

Clients may browse the Platform and view Provider listings for free. Initiating contact with a Provider or requesting a proposal requires Credits.

Credits are available for purchase in bundles through the Credits section of the Client dashboard. Purchased Credits are non-transferable and do not expire within 24 months of purchase.

Providers may list their services under Standard or Premium tiers. Premium listings receive elevated placement in search results, a visual premium badge, and access to advanced profile customisation. Tier pricing is published on the Provider pricing page and is subject to change with 30 days' advance notice.

XBandGlobal reserves the right to issue promotional Credits, adjust tier pricing, or modify tier benefits. Existing subscriptions are not affected by pricing changes until the next renewal period.

04

Acceptable Use Policy

You must not use the Platform to transmit spam, unsolicited commercial messages, or automated bulk requests that circumvent the Credit system.

Providers must not create fictitious credentials, fake reviews, or misleading service descriptions. Any attempt to misrepresent competence, coverage, or pricing constitutes a material breach and will result in immediate account termination.

You must not scrape, crawl, or systematically extract data from the Platform by automated means. Accessing Platform data through methods other than the documented interface is prohibited.

You must not harass, threaten, defame, or engage in discriminatory conduct toward other Platform users. XBandGlobal reserves the right to remove content and suspend accounts that violate this policy.

You must not attempt to circumvent Platform security controls, gain unauthorised access to other accounts, or introduce malicious code. Such activities will result in immediate termination and may be reported to law enforcement.

05

Content & Listing Standards

All Provider listing content — including company name, service categories, jurisdictional coverage, credentials, pricing, and profile photographs — must be accurate and kept current. XBandGlobal may conduct periodic audits of listings.

XBandGlobal reserves the right to review, edit, or remove any listing content that is inaccurate, misleading, illegal, or inconsistent with Platform standards, at our sole discretion and without prior notice.

Providers must hold and maintain valid professional credentials for every service and jurisdiction advertised. Credential documentation may be requested by XBandGlobal at any time; failure to supply requested documentation within 14 days will result in the relevant services or jurisdictions being removed from the listing.

Reviews and ratings submitted by Clients must reflect genuine Engagement experiences. XBandGlobal prohibits solicitation of fraudulent or incentivised reviews.

06

Data Handling

When a Client submits an inquiry, the relevant Provider receives the inquiry details including the Client's stated requirements and contact context. Providers must use this data solely to respond to the inquiry and must not add Clients to external marketing lists without explicit consent.

Messaging conducted through the Platform's controlled messaging environment is stored by XBandGlobal and may be reviewed for safety, dispute resolution, and quality-assurance purposes.

Upon account deletion, active service inquiry data is archived for a retention period to support audit and dispute-resolution obligations. Personal data is anonymised in accordance with the Privacy Notice.

Full details of how personal data is collected, processed, and retained are set out in the Privacy Notice in Section III of this document.

07

Third-Party Integrations

Stripe (stripe.com) and Razorpay (razorpay.com) process credit card and net-banking payments made on the Platform. By making a payment, you agree to those processors' terms of service. XBandGlobal does not store full payment card data.

Platform infrastructure is hosted on Supabase (supabase.com) and deployed via Vercel (vercel.com). These infrastructure providers process Platform data under data processing agreements with XBandGlobal.

XBandGlobal may use third-party analytics tools to collect aggregated, anonymised usage data to improve the Platform. We do not permit analytics providers to use Platform data for their own commercial purposes.

Integrations with additional third-party services will be disclosed in this section before they are activated.

08

Service Availability & Modifications

The Platform is provided "as is" and "as available". XBandGlobal does not guarantee uninterrupted availability and is not liable for downtime caused by maintenance, infrastructure failure, or events beyond our reasonable control.

XBandGlobal may modify, update, add, or remove Platform features at any time. Where a change materially reduces existing functionality for paying subscribers, we will provide at least 30 days' advance notice via email or in-app notification.

Planned maintenance windows will be communicated in advance where reasonably practicable. Emergency maintenance required to address security vulnerabilities may proceed without prior notice.

Deprecated features will be identified in advance communications with a sunset date. Where deprecation affects an active workflow, alternative functionality will be provided where technically feasible.

Section III

Privacy Notice

How XBandGlobal collects, uses, and protects your personal data.

01

Data Controller

XBandGlobal Ltd is the data controller responsible for personal data processed through the Platform. We are a company incorporated under the laws of England and Wales.

For privacy-related enquiries, to exercise your data subject rights, or to report a data concern, please contact our data protection team at: privacy@xbandglobal.com. We aim to respond to all substantive enquiries within 10 business days.

02

Categories of Data Collected

Account registration data: name, email address, company name, country of incorporation, phone number, and role (Client or Provider).

Provider profile data: company details, registered address, services offered, jurisdictions covered, professional credentials, document uploads (e.g. licences), profile photographs, and pricing information.

Client inquiry data: service requirements, preferred jurisdictions, budget ranges, and communication content exchanged through the Platform messaging system.

Transaction records: Credit purchase history, payment amounts, payment processor references, and subscription status. Note: full card numbers are never stored on our infrastructure.

Usage analytics: pages visited, features used, click patterns, session duration, and search queries — collected in aggregated or pseudonymised form.

Device and browser metadata: IP address, browser type and version, operating system, referral URL, and time-zone — collected automatically when you access the Platform.

03

Legal Basis for Processing

Contract performance (Article 6(1)(b) GDPR): We process account registration data, inquiry data, transaction records, and Provider profile data to provide the services you have requested under these terms.

Legitimate interests (Article 6(1)(f) GDPR): We process usage analytics and device metadata to improve Platform security, prevent fraud, and optimise the user experience. We have carried out legitimate-interest assessments to ensure these interests do not override your fundamental rights.

Consent (Article 6(1)(a) GDPR): Where we seek to send promotional communications or deploy non-essential cookies, we will request your explicit consent beforehand. You may withdraw consent at any time.

Legal obligation (Article 6(1)(c) GDPR): Financial transaction records are retained to comply with tax, anti-money-laundering, and financial-reporting obligations.

04

How We Use Your Data

Service delivery: to create and manage your account, process Credit purchases, and facilitate connections between Clients and Providers.

Matching algorithms: to surface relevant Providers to Clients based on jurisdiction, service type, language, and tier preference. No automated decisions with legal effect are made based solely on this processing.

Communication facilitation: to route inquiry and proposal messages between Clients and Providers within the Platform's controlled environment.

Fraud prevention and platform integrity: to detect and investigate suspicious activity, enforce the Acceptable Use Policy, and protect other users.

Platform improvement: to understand how features are used, identify usability issues, and prioritise product development — using aggregated and pseudonymised data where possible.

Customer support: to investigate and resolve disputes, answer queries, and provide account assistance.

05

Data Sharing

With matched Providers/Clients: When a Client submits an inquiry, the Provider receives the relevant inquiry details. When a Provider responds, the Client receives the proposal. This sharing is the core mechanism of the service.

With payment processors: Stripe and Razorpay receive the data necessary to process your payment transaction in accordance with their own privacy policies and PCI-DSS obligations.

With infrastructure providers: Supabase (database and authentication), Vercel (hosting and edge network), and monitoring services process Platform data under data processing agreements that include GDPR-standard contractual clauses.

We do not sell personal data to any third party. We do not share personal data with advertisers. We do not use personal data for any purpose not disclosed in this Notice.

We may disclose data to law enforcement or regulatory authorities where required by applicable law or a valid legal order, and only to the extent required.

06

International Data Transfers

XBandGlobal serves users globally. Data may be processed on servers located outside your home country, including in the United States (Supabase, Vercel, Stripe) and in the European Economic Area.

Where personal data is transferred from the EEA, United Kingdom, or Switzerland to a country that does not provide an equivalent level of data protection, we apply appropriate safeguards including European Commission Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA).

You may request a copy of the applicable transfer safeguards by contacting our data protection team.

07

Data Retention

Active accounts: personal data is retained for as long as the account remains active and for a period thereafter to allow for dispute resolution.

Closed accounts: upon account deletion, personally identifiable information (name, email, contact details) is anonymised within 30 days. Financial records (transaction IDs, amounts, dates) are retained for up to 7 years to comply with legal and audit obligations, in non-identifiable form where possible.

Inquiry and messaging data: retained for 2 years after the Engagement is concluded, then anonymised.

Server and access logs: retained on a rolling 90-day basis unless a specific event triggers extended retention for investigation purposes.

08

Your Rights

You have the right to access the personal data we hold about you and to receive a copy in a portable format.

You have the right to rectification — to request correction of inaccurate or incomplete personal data.

You have the right to erasure ('right to be forgotten') — you may request deletion of your personal data. The Platform supports account deletion through the Account Settings page, which triggers anonymisation of your PII. Certain data may be retained where required by law.

You have the right to restrict processing in certain circumstances, including while a rectification request is pending or where you have objected to processing based on legitimate interests.

You have the right to data portability — to receive data you have provided to us in a structured, machine-readable format.

You have the right to object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, contact privacy@xbandglobal.com. We will respond within one month. Where requests are complex or numerous, we may extend this period by a further two months with prior notice.

09

Cookies & Tracking

Session cookies: we use strictly necessary session cookies to maintain your authentication state. These are set automatically and cannot be disabled without breaking Platform functionality.

We do not use third-party advertising cookies or cross-site tracking pixels. We do not partner with advertising networks.

Where we use analytics tools, they are configured to anonymise IP addresses and are subject to data processing agreements. You may opt out of analytics collection at any time through the Platform's privacy settings.

10

Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, legal obligations, or Platform features. Material changes will be communicated by email or prominent in-app notification at least 14 days before they take effect.

The effective date at the top of this page reflects when the current version was last updated. We recommend reviewing this Notice periodically.

11

Contact

Data protection enquiries: privacy@xbandglobal.com

General legal enquiries: legal@xbandglobal.com

Postal address: XBandGlobal Ltd, [Registered Address], London, United Kingdom

If you believe your data protection rights have been infringed and we have not resolved your complaint satisfactorily, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with the supervisory authority in your country of residence.

© 2026 XBandGlobal Ltd. All rights reserved.  ·  Terms of Service  ·  Privacy Policy (legacy)