Privacy Policy for XBae
Operator: NEROVIA DIGITAL LTD · Contact: [email protected]
1. Overview
This Privacy Policy explains how XBae collects, uses, and protects your information. We align with GDPR and CCPA.
2. Information We Collect
- Account information: email/identifier from Google sign-in.
- Conversations & content: your messages with AI characters, character settings, uploaded material, and the content generated for you (text, voice, images).
- Payment information: handled by third-party PCI-compliant payment processors; we do not receive or store your full card number.
- Usage & log data: IP, device/browser information, activity logs (for security and abuse prevention).
3. How We Use Information
To provide and improve the Service (including your companions' memory of past conversations), process payments, ensure security and prevent abuse, meet legal obligations, and prevent content involving minors or non-consensual material.
4. Retention & Deletion
- Your conversations, character settings, and generated content are retained without a fixed expiry, so your companions can remember your past interactions.
- You may request deletion of this content or of your account at any time via [email protected] (see §8).
- Content flagged by our safety systems or reported by users may be retained as required by law for review and reporting.
5. Third Parties
We use third parties only as necessary to provide the Service:
- Cloud infrastructure & CDN — encrypted transport/storage.
- Payment processing — third-party PCI DSS-compliant processors (we do not store card data).
- Analytics — Google Tag Manager, to understand usage and improve the Service.
6. Sharing
We do not sell, rent, or trade your personal information. We share only with service providers necessary to deliver the Service, or where required by law or to protect rights and safety.
7. International Transfers
Your information may be processed outside your country; we use contractual and technical safeguards to comply with applicable law.
8. Your Rights
Under GDPR / CCPA you may request access, correction, or deletion of your data, or object to/restrict processing. Contact [email protected].
9. Minors
The Service is for adults 18+. We do not knowingly collect data from minors; suspected minor content is terminated immediately and reported as required by law (see Terms of Use §7).
10. Security
We use encrypted transport, isolated processing, and access controls. No system is perfectly secure.
11. Changes
Updates are posted here with a new "Last updated" date.
12. Contact
NEROVIA DIGITAL LTD
Bridge Tower, 2–4 Alexandreias, 3013 Limassol, Cyprus
General: [email protected]
Your privacy is fundamental to our Service. By using XBae, you acknowledge that you have read and understood this Privacy Policy.