Personal information we collect
The information we collect depends on how you interact with XORENAI and the Services.
Account information
- Name, email address, username, and authentication information.
- Profile information, phone number where applicable, settings, country or region.
- Subscription, account type, and related account records.
Profile, education, and professional information
Where you voluntarily provide it through onboarding, events, or programs, we may collect:
- College, university, institution, organization, student, or professional status.
- Educational year, professional experience, areas of interest, and technology or AI interests.
- Product-use experience, feedback, event or community affiliation, and other information you choose to provide.
Optional profile information is voluntary unless specifically identified as required.
User content
We may process prompts, conversations, messages, instructions, documents, uploaded files, text, code, images, audio, feedback, generated-content requests, and other information you provide.
AI-generated responses associated with your requests may also be stored and processed where necessary to provide the Services.
Connected services
If you connect XORENAI with another application, account, service, or data source, we may receive information authorized through that connection. The available information depends on the integration, permissions you grant, third-party service, and selected settings.
Review permissions before connecting external accounts. You can revoke access through XORENAI or the third-party service where controls are available.
Payment information
Payment transactions may be handled by third-party payment providers. We may receive billing name and address, transaction identifiers, subscription type, payment status, partial card information, and transaction history.
XORENAI may not directly receive or store complete payment-card details when an external processor handles the transaction.
Communications and support
If you contact us, join a survey, or communicate with XORENAI, we may collect your contact details, support messages, correspondence, responses, feedback, bug reports, and other information you voluntarily provide.
Events, challenges, and community programs
For onboarding programs, hackathons, challenges, referrals, student programs, promotions, or community initiatives, we may collect registration, institution, submission, public-link, platform, referral, feedback, reward-eligibility, and fulfillment information.
Separate promotional terms may apply.
Technical and usage information
Certain information may be collected automatically when you use the Services:
- IP address, browser, device, operating system, app version, identifiers, and language settings.
- Approximate location derived from network information, login timestamps, referral URLs, and accessed pages or features.
- Model or feature usage, interactions, performance information, diagnostics, error logs, and security events.
We use this information to operate, secure, understand, and improve the Services.
Information from third parties
We may receive information from authentication providers, payment processors, security providers, analytics services, enterprise administrators, integration providers, marketing partners, public sources, and users who interact with or refer you to XORENAI.
How we use personal information
We may use personal information to:
- Provide, personalize, maintain, and administer the Services and integrations.
- Evaluate performance, identify errors, improve reliability, develop features, and evaluate AI quality.
- Secure accounts and infrastructure; detect fraud, abuse, malicious activity, and policy violations.
- Provide support, investigate technical problems, and process complaints.
- Process transactions, subscriptions, credits, promotions, and payment-fraud prevention.
- Send security, account, service-change, product, and legally permitted marketing communications.
- Comply with law, respond to valid requests, enforce rights, and protect users.
AI improvement and model training
XORENAI may use certain information from consumer Services to evaluate and improve AI systems, safety systems, and related technology. Depending on the product, account type, and settings, this may include User Content.
Where product controls allow you to opt out of model improvement or training, we will respect those controls under the applicable product terms.
Information may also be processed for safety evaluation, abuse detection, quality assurance, benchmarking, research, and reliability.
Business and API data
Content submitted through enterprise, business, or API products is governed by the applicable commercial agreement, Data Processing Agreement, customer configuration, and product settings.
Human review
Authorized personnel or service providers may review limited User Content where reasonably necessary to investigate abuse, provide support, evaluate reported content, improve safety, comply with legal obligations, or investigate technical problems. Access should be limited by role and business need.
Sale of personal information
XORENAI does not sell personal information for monetary consideration as part of the ordinary operation of the Services. If future advertising or data practices constitute a sale, sharing, or targeted advertising under applicable law, we will update this Policy and relevant controls.
Data retention
We retain information only as long as reasonably necessary to provide Services, maintain accounts, fulfill transactions, prevent abuse, comply with law, resolve disputes, enforce agreements, maintain security, and conduct legitimate operations.
Retention varies by information type, product, settings, account status, legal requirements, security needs, and technical considerations. When information is no longer required, we may delete, anonymize, or de-identify it. Deleted information may remain temporarily in backups or security systems during normal retention cycles.
Account and conversation deletion
Where supported, you may delete conversations, uploaded content, or your account through available controls. Requests remain subject to law, security, fraud prevention, contracts, legal-rights preservation, and backup cycles.
Data controls
Depending on the Service, available controls may let you delete conversations or accounts, export data, update profile information, manage history and integrations, control model-improvement preferences, manage marketing communications, and manage cookie settings.
Your privacy rights
Depending on your location, you may have rights to know whether we process your data; access, copy, correct, or delete it; restrict or object to processing; withdraw consent; request portability; opt out of certain processing; or complain to a data-protection authority.
Rights may be subject to legal exceptions. We may verify your identity, and authorized agents may submit requests where permitted.
Legal bases for processing
Where applicable law requires a legal basis, we may rely on:
- Contract: processing necessary to provide requested Services.
- Legitimate interests: securing and improving the Services, operating our business, preventing fraud, and protecting users where those interests are not overridden by your rights.
- Consent: where requested for a particular activity.
- Legal obligations: where processing is necessary to comply with law.
International data transfers
XORENAI and service providers may process information in countries with different data-protection laws. Where required, we use recognized safeguards such as contractual protections, approved transfer mechanisms, adequacy decisions, or other lawful safeguards.
Data security
We use administrative, organizational, and technical safeguards designed to protect personal information, which may include access controls, authentication, encryption where appropriate, monitoring, logging, vulnerability management, infrastructure protection, backups, and internal restrictions.
No online service can guarantee absolute security. Use strong credentials and protect your devices and accounts.
Sensitive information
Unless required for a supported feature, do not provide unnecessary government identifiers, financial credentials, passwords, detailed medical records, biometric identifiers, highly sensitive records, or confidential information belonging to another person.
Children’s privacy
The Services are not intended for children under 13 or any higher minimum age required by local law. Users under 18 must have parent or guardian permission where required. If we learn that information was collected from a child contrary to applicable law, we will take reasonable steps to delete it.
Educational use
Students, educational institutions, and academic-program participants may use XORENAI. Managed educational products may be governed by additional agreements addressing student information, administration, security, retention, and educational privacy.
Third-party websites and services
The Services may link to or integrate with independent third parties. XORENAI does not control their privacy practices. Review their policies before providing personal information.
Automated systems and profiling
Automated processing may support AI responses, personalization, fraud detection, safety, abuse prevention, recommendations, and security. XORENAI should not use solely automated processing for legally significant decisions unless that use complies with applicable law and includes appropriate safeguards.
De-identified and aggregated information
We may use aggregated or de-identified information for analytics, research, statistics, Service improvement, model evaluation, and other lawful purposes. Where required, we will not attempt to re-identify information maintained in de-identified form.
Changes to this Privacy Policy
We may update this Policy to reflect products, technology, data practices, legal requirements, or operations. Where changes materially affect your rights or our processing, we will provide notice as required by law. The “Last updated” date identifies the latest version.
Privacy requests
To exercise an available privacy right or submit a privacy question, email [email protected]. Depending on your jurisdiction, you may also contact your local data-protection authority.
Data controller
For applicable data-protection law, XORENAI is responsible for personal information processed through its consumer Services. Where a business customer controls information processed through an enterprise or API Service, XORENAI may act as a processor or service provider under the applicable agreement. Formal controller inquiries can be sent to [email protected].
Contact us
For privacy questions or rights requests, contact [email protected].
For product support, contact [email protected].