Privacy Policy

1. Introduction

Xpoze ("we," "us," "our") operates the website at xpoze.ai ("Site"). This Privacy Policy explains what personal data we receive through the Site and when you email us, why we receive it, how we keep it, and your rights.

The Xpoze software runs entirely in its users' own environments. Source code, analysis results, and exchanges with a customer's LLM provider stay in that environment and are never sent to us. Use of the software is governed by a separate written agreement.

2. Data We Collect

2.1 Visiting the Site

The Site has no accounts, sign-in, or forms. We do not set cookies, and we do not use analytics, advertising pixels, or third-party trackers. Fonts and other assets are served from the Site itself.

The Site is hosted on Cloudflare. To deliver and protect the Site, Cloudflare processes standard technical data for each request, such as your IP address, browser user agent, the page requested, and the time of the request, and may use strictly necessary security cookies to guard against abuse. Cloudflare handles this data under its own privacy policy.

2.2 Emails You Send Us

If you email us at hi@xpoze.ai, we receive your email address, your name if you include it, and whatever you choose to write or attach.

2.3 The Xpoze Software

We do not collect data from installations of the Xpoze software. It has no telemetry, and it does not send code, findings, or LLM traffic to us.

3. How We Use Your Data

• Reply to you: answer your questions and continue the conversation you started.
• Evaluate beta participation: if you ask to join the beta, discuss whether it is a fit for your organization.
• Operate and secure the Site: through our hosting provider, as described in section 2.1.

We do not send marketing emails, add you to mailing lists, or build profiles of visitors.

4. Data Sharing

We do not sell your personal data or share it for cross-context behavioral advertising. We share data only:

• With service providers: Cloudflare, which hosts the Site, and our email provider, which receives and stores the emails you send us. They process data on our behalf to provide those services.
• When required by law: in response to valid legal process, such as a subpoena or court order. We will notify you before disclosure unless prohibited by law.

5. Data Retention

We keep your emails for as long as needed to reply and to continue the conversation or beta discussion. We delete them on request at any time. Cloudflare retains its request data according to its own policies.

6. Data Security

The Site is served only over HTTPS, and access to our email is limited to the people who reply to it. No system is perfectly secure. If we discover a breach that affects your data, we will notify you within 72 hours.

7. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data.
• Object to processing beyond replying to you.

California residents also have the right to know what personal information we collect, use, and disclose; to opt out of its sale or sharing (we do neither); and not to be discriminated against for exercising these rights.

To exercise any of these rights, email hi@xpoze.ai. We will respond within 30 days.

8. International Data Transfers

We are based in the United States. If you email us from outside the US, your data will be processed in the US. Cloudflare serves the Site from its global network.

9. Children's Privacy

The Site is not directed to anyone under 18, and we do not knowingly collect data from minors. If you believe a minor has sent us data, email hi@xpoze.ai and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy at xpoze.ai/privacy and update the effective date. If we make material changes and have your email address from a conversation with us, we will also let you know by email.

11. Contact

For privacy questions or requests, email hi@xpoze.ai.