Privacy Policy
Last updated: July 21, 2026
This Privacy Policy explains how XenorAI ("we," "us," "our"), a product of DevXcript, collects, uses, and protects information when you use our website, dashboard, and chatbot widget (collectively, the "Service").
1. Information We Collect
Account information. When you sign up, we collect your name, email address, and authentication details (including via Google Sign-In).
Business and widget data. Information you provide to configure your chatbot, including your website, product listings, business details, and customization settings.
Visitor and conversation data. When visitors interact with your chatbot widget, we collect their messages, a randomly generated visitor identifier, and basic interaction metadata (such as timestamps and page visits) to power conversation history, lead scoring, and analytics.
Lead information. Contact details (such as email addresses) that visitors voluntarily share through the chatbot are stored as leads within your dashboard.
Connected account data. If you choose to connect your Gmail account for email automation, we access only what is necessary to send emails on your behalf, as described in Section 3.
2. How We Use Information
We use collected information to:
- Provide and operate the chatbot, lead capture, and email automation features
- Generate AI-powered responses using your configured knowledge base
- Send campaign emails on your behalf, when you connect an email account
- Improve and maintain the Service
- Communicate with you about your account or the Service
- Comply with legal obligations
3. Google API Services User Data
XenorAI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect your Gmail account, we request the gmail.send scope, which allows XenorAI to send emails on your behalf through your connected Gmail account as part of your campaign and follow-up automation. We do not read, store, or otherwise access the content of your inbox, drafts, or existing emails. This access is used solely to deliver the email-sending feature you explicitly configure and trigger within your dashboard.
You can revoke XenorAI's access to your Google account at any time via your Google Account security settings.
4. Data Sharing
We do not sell your personal information. We may share information with:
- Service providers who help us operate the Service (e.g., hosting, database, email delivery, and AI model providers), under confidentiality obligations
- Legal authorities, if required by law
5. Data Retention
We retain account and conversation data for as long as your account is active, or as needed to provide the Service. You may request deletion of your account and associated data by contacting us.
6. Security
We implement reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is completely secure.
7. Your Rights
Depending on your location, you may have rights to access, correct, or delete your personal information. To exercise these rights, contact us using the details below.
8. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or email.