State of the Art Compliance

Privacy Policy

Our commitment to data sovereignty, AI ethics, and institutional privacy standards.

Last Updated: May 24, 2024Version 1.0.4

1. Data Collection & Usage

We collect only the essential data required to provide a high-performance educational experience. This includes:

  • Identity Data: Name, professional email address, and institutional affiliation (e.g., School Name).
  • Usage Metrics: Aggregated, anonymized data regarding question generation frequency and feature utilization.
  • Authentication Data: Secure tokens managed exclusively via Google Firebase.

2. AI & Data Ethics Guarantee

The core of XAM is powered by the Google Gemini API. We maintain a "Zero Training" architecture:

  • Non-Training Policy: We explicitly contract with our AI providers to ensure that your uploaded "Source Material" (PDFs, DOCX, TXT) is not used to train, retrain, or improve the base AI models.
  • In-Memory Processing: Document analysis occurs in transient memory buffers. Once the session is closed, the document text is flushed from the processing layer.
  • Privacy by Design: Your educational materials remain your intellectual property and are never accessible to other users or used for cross-platform data synthesis.

3. Third-Party Data Processors

We rely on world-class infrastructure providers to ensure security and availability:

Compute & AI

Google Cloud (Gemini)

Auth & DB

Google Firebase

Payments

Stripe Inc.

4. Your Legal Rights (GDPR/CCPA)

Regardless of your location, we honor the highest global privacy standards. You have the right to:

  • Access & Portability: Request a export of all your stored repository data.
  • Right to be Forgotten: Permanently delete your account and all associated metadata via the Profile dashboard.
  • Correction: Update your institutional details at any time.

5. Data Retention

We retain your Repository data (saved questions) for as long as your account is active. Inactive accounts with no subscription will be flagged for archival after 24 months of total inactivity. All billing data is retained in accordance with legal financial requirements via Stripe.

By continuing to use XAM, you acknowledge that you have read and understood these documents in their entirety.