Legal
Privacy Policy
Last updated: 2026
1. Who we are
XI Labs ("XI", "we", "us") provides AI-powered customer support software to enterprises. This policy explains how we handle personal data on our marketing site, demo platform, and the XI product itself.
2. What we collect
- Lead data from the demo form: name, work email, company, company size, requirements.
- Conversation data processed by the AI agent on behalf of our customers (the data controller).
- Telemetry: IP, browser, page views, and basic event analytics for product improvement.
3. How we use it
We use lead data to schedule demos and respond to sales inquiries. We process conversation data only to provide the support service to our customer and improve quality through aggregated analytics. We never sell personal data.
4. Storage & security
Data is encrypted in transit (TLS 1.2+) and at rest. Production data is hosted in regional environments (LATAM, EU, US) selected by the customer. Access is controlled via least-privilege RBAC and audited.
5. Sub-processors
We use Lovable Cloud (Supabase), Lovable AI Gateway (Google Gemini, OpenAI), and standard cloud providers. A current list is available on request.
6. Your rights (GDPR / LGPD / CCPA)
You can request access, correction, export, or deletion of your personal data at any time by emailing privacy@xi.support. We respond within 30 days.
7. Retention
Lead data is retained for up to 24 months unless you request deletion sooner. Customer conversation data follows the customer's contractual retention policy.
8. Contact
Questions? Email privacy@xi.support.