What we collect. Account details (name, email, company), business-profile information you provide, publicly available website content we crawl at your direction, AI platform responses generated during testing, and usage/audit logs.
Why. Solely to deliver the Service: running assessments, generating findings and reports, enforcing plan limits, and securing accounts. We collect only what the Service requires.
Third parties. Prompt text is sent to the AI providers you select for testing. Payment details are handled by our billing provider — we never store full card numbers. We do not sell personal data.
Retention & deletion. Data is retained according to your plan's retention settings. You may request export or deletion of your workspace data, subject to legal and billing retention obligations.
Security. Traffic is encrypted in transit; passwords are stored hashed; privileged actions are audit-logged; tenant data is logically isolated.
Contact. Privacy questions: craig@xr1.io.