Privacy Policy

What you write. The titles, bodies, and sender/recipient names of the Xpologies you publish. Depending on your choice during creation, an Xpology may be public or private. Public Xpologies can be viewed by anyone with the link. Private Xpologies are only accessible to their intended recipients.

Account details. If you create an account, we store your email address and an encrypted password (or your Google account identifier, if you sign in with Google). A verified account is required to create Xpologies.

Early Adopter communications. If you choose to become an Early Adopter, we store the email address associated with your account so we can contact you about important product updates, invitations, and Early Adopter communications.

Optional survey responses. We may collect optional survey responses to help improve Xpology and guide future product development.

Technical data. We also collect certain technical information to protect the platform, investigate abuse, respond to reports, and maintain the security and integrity of Xpology.

Oracle conversations. Conversations with Oracle may be stored to support your drafting experience, improve Xpology, and help us continue developing Oracle responsibly.

We don't ask for the recipient's email, phone number, or address. Xpology doesn't send anything to the recipient — you choose if and how to share the link. There is no recipient tracking, no read receipts, no acceptance metrics.

We don't sell your data. We don't run ad networks. We don't profile you for advertising.

• To run the product — show, share, and moderate your Xpologies.
• To protect the platform, investigate abuse, respond to reports, and maintain security and integrity.
• To improve the Oracle and the product, in aggregate.
• To contact you about your account, product updates, or Early Adopter communications when needed.

We use a small set of trusted infrastructure providers:

• Hosting and database — for storing and serving the app.
• An AI provider — to power the Oracle's writing suggestions and the cover image generator.
• An authentication provider — for accounts and Google sign-in.

They process data on our behalf, under their own security and privacy terms.

Public Xpologies remain until deleted by their owner or removed for policy reasons. Account information is retained while the account remains active. Other operational data is retained only as long as reasonably necessary to operate and improve the service.

You can delete any Xpology you own from your profile. You can ask us to delete your account and the Xpologies attached to it. Depending on where you live, you may have additional rights (access, correction, portability, objection). To exercise them, email privacy@xpology.app.

Xpology isn't intended for children under 13. If you believe a child has given us personal data, contact us and we'll remove it.

We'll update this policy as Xpology grows. We'll change the "Last updated" date above when we do.