Xorventa.ai ("Company", "we", "our") provides AI automation services. We take data protection seriously and operate under principles aligned with GDPR, CCPA, and recognized industry best practices.
1
Data We Collect
User-provided content, including prompts, inputs, files, and workflow data
Account and contact information, if provided
Usage, diagnostic, and interaction data
Which pages of this website and of your account portal are viewed, and in what order, recorded with an anonymous identifier for each visit, and, when the link that brought you here carried a campaign label (for example a link in one of our emails), that label — we do not set a cookie for it, and we do not record your name, your IP address, or anything typed into a page address
The steps of signing up and choosing a product that you reach — for example clicking a sign-up button, opening the sign-up page, verifying your phone, confirming a plan, or starting setup — with the product, plan and offer involved, the page the button was on, and the same anonymous visit identifier, recorded with the IP address of the request. We never record anything you type into these forms, such as your name, email address, phone number, password, verification code or card details
Device, browser, network, and IP metadata
For a business that uses the Xorventa Assist phone line: a record of each call to that line — the caller’s phone number, when the call started and how long it lasted, and how it ended (handled by the assistant, a meeting booked, or put through to the business). During a call, what the caller says is converted to text as they speak by our service providers (speech recognition, the AI that writes the reply, and the voice that speaks it) so the assistant can answer. It is not recorded or kept after the call.
2
AI & Processing Disclosure
Your inputs may be processed by third-party AI and infrastructure providers to generate responses, operate automations, and deliver services. By using the service, you acknowledge and consent to this processing.
What Xora remembers for a signed-in account owner. When you are signed in to your Xorventa account, Xora — the assistant on your account pages — can keep context you choose to save and preferences you have confirmed and, only if you turn it on, samples of your writing that you paste in so she can match how you write. This is used only to help you in your own account. You can review, export or delete what Xora remembers, or switch it off, at any time from your account.
3
Purpose of Use
Operate, maintain, and deliver services
Improve performance, reliability, and user experience
Security monitoring, fraud detection, and abuse prevention
Product development and service improvement
4
Data Sharing
We share data only with service providers necessary to operate the platform, such as cloud infrastructure and AI providers, and with third parties you direct us to share it with, such as an AI assistant you connect to your account (see section 6). We do not sell personal data.
If a government agency, court or other third party asks us for customer data, we review every request with counsel and disclose only what the law requires.
Mobile phone numbers and text message opt-in information are never shared with or sold to third parties or affiliates for their marketing or promotional purposes.
You can also connect your own website so Xorventa can work on it directly. Wix, WordPress, Webflow and Shopify sites can be connected today, and everything described here applies to each of them in the same way. On Webflow, Xorventa works only through Webflow’s official Custom Code API — it registers one script of its own, applies it at the site level, and removes that same script when you disconnect, leaving any other code on your site untouched. It never asks you to paste anything in yourself. With your permission, Xorventa can install your Assist chat window and propose changes to the SEO information on your live pages — the page title and the description shown in search results, and, where your platform provides them, the canonical address and whether a page should be indexed. Xorventa does not rewrite the body content of your pages. You approve each website change, or switch on automatic changes so the ones that qualify are applied without a click; automatic changes start only once you pay for Xorventa SEO or Xorventa Persona, and a free trial prepares changes without publishing them. You can ask Xorventa to reverse an applied change — the reversal is checked against the live page, shown to you first, and refused if it would overwrite newer work — and you can disconnect at any time. You can connect one website at a time.
Connecting your website uses that platform’s own authorization, and for WordPress an application password you create and can revoke yourself — we never see or store your website password. We store the connection and a credential scoped to that one site, encrypted at rest. Data exchanged with your website platform goes to the platform you already use for your site; Xorventa does not move your website or its content anywhere else. Disconnecting stops all future access; it does not remove anything already installed on your site, which you remove separately.
Xorventa Social lets you connect third-party accounts — TikTok, Facebook, Instagram, Threads, LinkedIn, X, Pinterest, Bluesky, YouTube and Google Business Profile — so Xorventa can publish content on your behalf and, where the network supports it, read and reply to inbound comments and messages. You choose which accounts to connect, and you can disconnect any of them at any time.
Connecting an account uses that network’s own authorization screen (OAuth). We never see or store your password. The network issues us an access token, which we store encrypted at rest and use only for the actions you have authorized.
For TikTok specifically, Xorventa Social requests three permissions: basic profile information, permission to publish videos and photos, and permission to upload content to your TikTok drafts. Before you post, we read your TikTok account’s current settings — display name, profile image, which audience options are available to you, whether comments, Duet and Stitch are enabled, and the maximum video length your account allows — so the posting form reflects your real settings rather than guessing. We publish only the content you submit, with the audience and interaction settings you select on that form. We do not read your existing TikTok videos, followers or analytics.
You can revoke Xorventa’s access from the network itself at any time — for TikTok: Profile → Menu → Settings and privacy → Security & permissions → Manage app permissions → Xorventa Social → Remove — or by disconnecting the account in your Xorventa account. See our Data Deletion page for what disconnecting removes on our side.
Google user data (Gmail, Calendar, Search Console, Analytics, and YouTube). When you connect a Google account to Xorventa — for Xorventa Assist (Gmail and Google Calendar), Xorventa SEO (Google Search Console and Google Analytics), or Xorventa Social (YouTube) — you do so through Google’s own OAuth consent screen and grant only the permissions shown there. Xorventa asks for each capability separately, so a consent screen shows only the permissions the feature you are switching on actually needs, and you can switch a feature on without granting the others. Xorventa’s use of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including its Limited Use requirements.
Artificial intelligence and your Google data. Xorventa uses Anthropic’s Claude models, through Anthropic’s commercial API, to draft and answer text. Anthropic acts as a data processor for Xorventa under a Data Processing Addendum, and Anthropic’s Commercial Terms of Service state that “Anthropic may not train models on Customer Content from Services” (https://www.anthropic.com/legal/commercial-terms). Xorventa does not enable Anthropic’s optional Development Partner Mode, which is the only setting under which submitted content may be used for training. We do not transfer Google user data to any AI or machine-learning service that uses it to create, train, or improve generalized models, and we do not use Google user data for that purpose ourselves.
What actually reaches an AI model. For a connected Google Calendar, only the start times of free appointment slots are sent to the model — never event titles, descriptions, guests, or locations. For Gmail, Xorventa requests no Gmail read permission at all: the only Gmail permission we request is permission to send on your behalf, and the message text we work from is the copy your own Gmail forwarding rule sends us, not anything read from a Google API. Speech services (Deepgram for transcription, Cartesia for speech) are used only for the voice features of the chat window and telephone assistant and never receive Google user data.
What we access depends on the products you use. For Xorventa Assist: your Google Calendar — your working-hours setting and when you are busy or free, read-only, so the assistant offers only times you are genuinely available, and permission to create, change and cancel the appointment events Xorventa books for you; and permission to send email on your behalf, used only to send the replies you approve, from your own address. Xorventa requests no permission to read your Gmail. For Xorventa SEO: your Google Search Console performance data for your verified sites (clicks, impressions, positions, and queries) and your Google Analytics (GA4) reporting metrics — both read-only — to produce your SEO reports. For Xorventa Social: your YouTube channel, to publish videos you approve and to read and reply to comments on your own videos on your behalf. We use this data only to provide the features you enable. We do not use Google user data for advertising, we do not sell it, and we do not use it to train generalized AI or ML models.
Google access and refresh tokens are stored encrypted at rest and used only for the actions you authorized. For Xorventa Assist, we store the appointments Xorventa books for you — the invitee’s name and email address, and the time — so that you and they can see, reschedule or cancel them, and we delete them when you delete the appointment or your account. Your calendar availability is read when someone asks for times and used to work out which slots to offer; we do not keep a copy of your calendar, and event titles, descriptions, guests and locations are never read. Where a Gmail forwarding rule sends us a copy of an incoming message, the message text is kept only as long as answering needs it and is deleted 72 hours after we receive it, leaving only the record that a message arrived and how it was handled. Search Console and Analytics metrics are stored only as part of the SEO reports we generate for you — we keep a limited number of your most recent reports — and are used solely to provide those reports to you. YouTube data (such as comments on your videos that you choose to review and reply to) is retained no longer than needed to provide the feature and is deleted within 30 days if not acted on. We do not share Google user data with third parties except with providers acting on our behalf to deliver the service, to comply with law, or with your consent. You choose which Google account and permissions to grant, and you can disconnect at any time — from your Xorventa portal or your Google Account security settings — which revokes our access.
Xorventa uses YouTube API Services. When you connect a YouTube channel, Xorventa Social uses the YouTube API Services to upload videos you approve to your own channel, to read comments on your own videos, to post the replies you approve, and to delete a video from your channel at your request. By connecting a YouTube channel you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). Xorventa’s transfer and use of information received from YouTube APIs also complies with the YouTube API Services Terms of Service (https://developers.google.com/youtube/terms/api-services-terms-of-service) and the Google Privacy Policy (https://policies.google.com/privacy).
Deleting your YouTube data, and taking away our access. You can delete the YouTube data Xorventa holds at any time, in two ways. Disconnect the YouTube account in your Xorventa portal (Social → Networks → YouTube → Disconnect), which deletes the stored access tokens and the YouTube comment data held for that connection; or ask us at support@xorventa.ai and we will delete it for you. YouTube data we hold is in any case deleted or refreshed within 30 days. Separately, and without needing us at all, you can revoke Xorventa’s access to your Google and YouTube data directly from your Google Account’s security settings at https://security.google.com/settings/security/permissions — revoking there stops our access immediately. See our Data Deletion page for what disconnecting removes across every network.
Bing Webmaster Tools. For Xorventa SEO you can also connect Bing Webmaster Tools, through its own sign-in, separately from Google. Xorventa reads your site’s search performance on Bing — clicks and impressions — read-only, and uses it only to produce your SEO reports. You can disconnect at any time, which stops our access.
Email and calendar (Email & Appointments). If you add Email & Appointments to Xorventa Assist, you can connect up to five mailboxes — Microsoft 365 work or school, or Gmail — and one calendar, Microsoft 365 or Google, each through that provider’s own sign-in and consent screen. For a Microsoft 365 mailbox, Xorventa reads the messages that arrive in that mailbox to draft or send replies, following the setting you choose for each mailbox (answer automatically, draft for your approval, or off). For a Gmail mailbox, Xorventa does not read your Gmail: you set Gmail to forward a copy of incoming mail to a private Xorventa address, Xorventa reads only those forwarded copies, and replies are sent from your own Gmail using the permission to send on your behalf that you grant at Google’s consent screen — the same per-mailbox setting applies. On the connected calendar Xorventa reads and adds events to offer open times and book appointments. You choose which mailboxes and which calendar to connect, and you can disconnect any of them from your Xorventa account at any time, which stops our access. You can also remove Xorventa’s access from Microsoft directly: for a work or school account at https://myapps.microsoft.com, and for a personal Microsoft account at https://account.live.com/consent/Manage. A connected Gmail account and a connected Google calendar are Google user data, and our use of them follows the Google API Services User Data Policy described above, including its Limited Use requirements. You can also remove Xorventa’s access from Google directly at https://myaccount.google.com/permissions, and turn off the forwarding you set up in your Gmail settings.
You can connect an AI assistant that you already use, such as Claude or Codex, to your Xorventa account through the Xorventa Connector at https://api.xorventa.ai/mcp. The assistant is a product of another company, and you choose to connect it. Nothing is shared with it until you sign in to your Xorventa account and approve the connection on our approval screen, which shows the assistant’s name and web address, the Xorventa account it will connect to, and each permission it asks for. You can untick any permission except reading. A connection request you do not approve within 10 minutes lapses.
The permissions you can grant. Reading lets the assistant see your Xorventa products, settings, setup steps and activity, and ask Xora questions about your business. Changing settings lets it change settings where you have allowed Xora to change settings. Publishing, sending or deleting directly lets it publish posts and replies, send email and delete things for you without asking each time. Drafting for your approval, granted without that last permission, makes every publish, send or delete a proposal that waits for you to confirm it in your Xorventa account; a proposal you do not confirm within 10 minutes lapses and nothing is done (within one minute for an assistant still on the connector's earlier version, 1.1.0).
What a connected assistant can receive. A connected assistant receives the account information needed to answer the requests made through it, and the results of the actions it asks for. Depending on the permissions you granted and the request, this can include: your Xorventa products, your setup status and the number of items waiting for your decision; Xora’s answers, which are drawn from Xorventa’s help material, your approved Business Facts and the number of open items in your work; the actions available to the connection and why any are unavailable; and records held in the products you use, such as your chat window and phone line settings, your Business Facts and knowledge sources, your social drafts, campaigns and scheduled and published posts, your SEO audit findings and website changes, the status of the services you have connected, and your plan, charges and invoices. Each response is limited in size.
What a connected assistant receives, and does not. An assistant you allow to read your account can read each of your products’ own lists, with what is in them, so it can act on them: the text of comments, messages and mentions and who wrote them, Search Console and Google Analytics figures, SEO drafts and the customer questions Xora could not answer, your appointments including the names and email addresses of the people who booked, and the emails waiting for your approval with the reply drafted for each. An assistant still on the Connector’s earlier version, 1.1.0, receives the emails waiting for your approval but not the other lists. A connected assistant can be shown what a plan change would cost, quotes and promotion codes; buying and changing a plan stay with you. It does not receive your private conversations with Xora on your account pages; Xora’s answers to it can draw on what she remembers about you and on your open work items. An assistant on the Connector’s earlier version, 1.1.0, is shown no prices and no remembered details. It never receives your password, two-factor settings or recovery codes, your full payment card details, or the sign-in credentials for the networks and services you have connected.
What stays under your control. Xorventa checks every request from a connected assistant against the permissions you granted, the products your account includes, the services you have connected, your switches on the What Xora knows about you page, and the usage limits of your account. Your switches and the connection itself are checked again at the moment an action runs, so switching something off or disconnecting the assistant stops the next action. A connected assistant cannot reach any other Xorventa account. Configuration and money stay with you: a connected assistant cannot change your password, account email or two-factor settings, add or change a card, buy anything, change or cancel a plan, publish a chat window, close your account, sign in to a social network, mailbox, Google, Bing or a website platform on your behalf, or widen its own access.
What happens to information after it reaches the assistant. Information a connected assistant receives is handled by the company that provides that assistant, under that company’s own terms and privacy policy, including any choice it offers about whether your conversations are used to improve its models. That company is not our service provider and does not act on our behalf. Review its terms before you connect it.
What we keep, and for how long. The access credential we issue to a connected assistant expires after 15 minutes and is renewed with a refresh credential that lasts 30 days and is replaced each time it is used; we store only a one-way hash of each credential, never the credential itself. When a connected assistant asks Xora a question, we keep that connection’s last eight questions and answers, encrypted, so it can continue the conversation; they stop being used 24 hours after the last question. Every action a connected assistant requests, including any we refused, is recorded in the list of what Xora did on your What Xora knows about you page, marked as coming from that assistant, and is kept like every other Xora action until you delete it there or close your account. We also keep a record of each connection — the assistant’s name and web address, the permissions you granted, and when it was connected, last used and disconnected — with your other account records, and connecting, declining and disconnecting are recorded in our security audit log.
A daily clean-up deletes what is no longer needed: connection requests, sign-in codes and access credentials an hour after they expire; refresh credentials an hour after they expire, or 30 days after they were replaced or cancelled; the stored Xora conversation an hour after it expires; a staged file’s record an hour after it expires unused, or 24 hours after it was used; a disconnected assistant’s remaining credentials, conversations and staged files 30 days after you disconnect it; and, 90 days after an action finishes, the Connector’s own record of that action, including its stored, encrypted result.
Files. A connected assistant can send a file for an action that uses one — an image or video for a post, a logo or banner, a chat window image, or a document for your Business Facts. It can include the file in its request, give us a public https web address that we fetch the file from, show you a card in the chat where you choose the file, or declare the file’s name, type, size and a fingerprint of its contents and then send it once to a link that works for 10 minutes. However it arrives, we read the file’s type from the file itself and apply the same type and size limits; a declared file is accepted only if it matches its declaration. When we fetch a web address, the site that serves the file sees a request from Xorventa’s servers, and we record the site’s name with what Xora did. The file is held on temporary storage for no more than an hour until it is used, and deleted from there; once it is used, it is stored and handled as the product it was added to stores any file you add yourself.
Service providers (subprocessors). The Connector adds no new subprocessor. Xora’s answers to a connected assistant are produced with the AI model provider Xorventa already uses for Xora, described in section 5. Connection records, the stored Xora conversation and the Connector’s record of each action are stored with Xorventa’s existing hosting and database providers; the conversation and each action’s stored result are encrypted using the key-management service of its existing cloud provider; and a staged file is held temporarily on Xorventa’s own servers with its hosting provider. These are among the subprocessors disclosed in section 23 of our Terms of Service, and a current list of material subprocessors is available on request at support@xorventa.ai.
Disconnecting. You can see every connected assistant, and when each was last used, under Connected AI assistants on the Profile Settings page of your Xorventa account, and disconnect any of them there at any time. Disconnecting takes effect immediately: every credential the assistant holds stops working, requests it made that have not yet reached another service are cancelled, and its Xora conversation is erased. An action that had already been handed to another service before you disconnected cannot be recalled by disconnecting. You can also remove Xorventa from the assistant’s own connector settings; that stops the assistant from calling us, and disconnecting in Xorventa is what ends the access on our side. When you delete your Xorventa account, every connected assistant is disconnected at once.
We retain data only as long as reasonably necessary to provide services, meet legal obligations, enforce agreements, and improve system performance. You may request deletion where applicable.
Phone call records on an Xorventa Assist phone line — the caller’s number, the time, the length and how the call ended — are shown to the business that owns the line and are deleted 30 days after the call.
When you delete your account, sign-in is locked immediately and your subscriptions end at the close of the current paid period. The access tokens and data we hold from services you connected are deleted as each service’s terms require. Your other account records — including your configuration, your Business Facts, and the customer record held by our payment processor — are kept for no longer than twelve (12) months after deletion, after which they are permanently and irreversibly purged from our active systems. Invoices and other billing records are kept as long as the law requires, and records may be kept longer where needed to resolve disputes or enforce our agreements. Routine backups and audit logs may persist for their normal rotation period before being overwritten.
8
User Responsibilities
You agree not to submit sensitive personal, financial, healthcare, regulated, or confidential data unless explicitly permitted by contract and supported by the service.
9
Security
We implement administrative, technical, and organizational safeguards, including encryption, access controls, and monitoring. No system can be guaranteed 100% secure.
To protect sign-in, sign-up, and account-recovery pages from automated abuse, we use Cloudflare Turnstile, a bot-detection challenge that may run invisibly and processes limited client-side signals (such as IP address, user-agent, and browser characteristics) solely for that purpose. Your interaction with Turnstile is also governed by Cloudflare’s Turnstile Privacy Addendum, available at https://www.cloudflare.com/turnstile-privacy-policy/.
