<?xml version="1.0" encoding="UTF-8"?>
<!--
  Canonical routes only. The alias routes in App.jsx (/privacy, /terms, /returns,
  /deleteaccount, ...) are client-side redirects to these, so listing them here
  would just feed Google duplicates.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://www.itsaro.com/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://www.itsaro.com/pricing</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.8</priority>
  </url>
  <!-- Trailing slashes required: these two have real static directories under
       public/, so the S3 website endpoint 302s the slashless form. That is a
       directory-index redirect, not a 404, so the CloudFront fallback never
       sees it. -->
  <url>
    <loc>https://www.itsaro.com/delete-account/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://www.itsaro.com/privacy-policy/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://www.itsaro.com/terms-and-conditions</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://www.itsaro.com/return-policy</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.3</priority>
  </url>
</urlset>
