This Privacy Policy explains how Xagent ("Xagent", "we", "us", or "our") collects, uses, stores, and protects information when you use our website and services (the "Service").
1. Information We Collect
We collect the following categories of information:
Account information: name, email address, and password (encrypted) when you register for an account.
Content you provide: tasks, prompts, files, and other content you submit to agents you configure within the Service.
Team & billing information: team membership, invitations, and subscription/billing details (such as plan tier and usage) when you create or join a team, or subscribe to a paid plan.
Google user data: if you choose to connect a Google account (e.g. Gmail, Calendar, Drive) to an agent, we access the data necessary to perform the actions you configure, such as reading, sending, or organizing email messages, or reading and creating calendar events and files, only for the scopes you explicitly authorize via Google's OAuth consent screen.
Usage data: log data, device information, and diagnostic data collected automatically to operate and improve the Service.
2. How We Use Information
We use the information we collect solely to:
Provide, operate, and maintain the Service and the agents you configure;
Perform the specific actions you request (e.g. drafting or sending an email on your behalf, retrieving a file, scheduling an event);
Authenticate you and secure your account;
Process subscriptions, billing, and team invitations;
Diagnose technical issues and improve reliability and performance;
Communicate with you about your account or the Service.
We do not use the information you provide, including Google user data, to serve advertisements, and we do not sell your data to third parties.
3. Google User Data & Limited Use Disclosure
Xagent's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
We only request the Google scopes required to perform the actions you explicitly configure your agent to take (for example, reading or sending email, or managing calendar/drive files you designate).
Google user data is used exclusively to provide user-facing features within the Service that you have requested, and is never used to develop, improve, or train generalized AI/ML models unrelated to your direct use of the Service.
We do not transfer Google user data to third parties except as necessary to provide the Service (e.g. to our infrastructure/hosting providers acting on our behalf, under confidentiality obligations), to comply with applicable law, or as part of a merger or acquisition involving our business, with notice to you.
We do not allow humans to read Google user data unless: (a) we have your affirmative agreement for specific messages/files, (b) it is necessary for security purposes (e.g. investigating abuse), (c) it is necessary to comply with applicable law, or (d) it is aggregated and anonymized and used strictly for internal operations in accordance with Google's policies.
4. Data Storage, Retention & Security
OAuth tokens and other sensitive credentials are encrypted at rest. Data is stored on infrastructure with access controls restricted to personnel who need it to operate the Service. We retain your data only for as long as necessary to provide the Service or as required by law, and delete it upon account deletion or upon your request, subject to reasonable backup retention periods.
You can request access to, correction of, or deletion of your personal data by contacting us at [email protected].
You can delete your account and associated data from your account settings.
6. Children's Privacy
The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children.
7. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "last updated" date.
8. Contact Us
If you have any questions about this Privacy Policy, please contact us at [email protected].