Privacy Policy

Effective Date: January 1, 2025 ย |ย  Last Updated: March 1, 2025

Welcome to xGenerator ("we", "our", or "us"). We are committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights in relation to it.

By using xGenerator (accessible at xgenerator.com), you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

  • Account Data: When you register, we collect your name, email address, and password.
  • User Content: Text, prompts, and other inputs you submit to our AI tools.
  • Communications: Messages or feedback you send us directly.

1.2 Information Collected Automatically

  • Usage Data: Pages visited, tools used, features clicked, and time spent on the platform.
  • Device & Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and referring URL.
  • Geographic Data: Approximate country and region derived from your IP address.
  • Cookies & Tracking: Session cookies, preference cookies, and analytics identifiers. See our Cookies Policy for details.

2. How We Use Your Information

We use your data to:

  • Provide, operate, and improve our AI tools and platform features.
  • Manage your account and authenticate your sessions.
  • Save and organize your generated documents (if you opt in).
  • Analyze usage patterns to improve user experience and platform performance.
  • Send transactional emails (e.g. password resets, account notifications).
  • Send optional product updates or newsletters (only with your consent).
  • Detect, prevent, and address fraud, abuse, or security incidents.
  • Comply with legal obligations.

3. AI Processing & Third-Party APIs

xGenerator uses third-party AI APIs (such as Google Gemini) to process the content you submit. When you use an AI tool, your input is sent to these providers for processing. We do not sell your inputs. Please review the privacy policies of these providers for details on how they handle data:

We never log or expose API keys in responses, error messages, or application logs.

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share data only in these limited circumstances:

  • Service Providers: Trusted third parties that help us operate the platform (e.g., hosting, analytics, email delivery), under strict confidentiality agreements.
  • Legal Requirements: If required by law, court order, or governmental authority.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.
  • Protection of Rights: To enforce our Terms of Service or protect the safety of our users or the public.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).

6. Security

We implement industry-standard security measures including encryption in transit (HTTPS/TLS), hashed passwords, and access controls. However, no system is 100% secure, and we cannot guarantee absolute security of your data.

7. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data ("right to be forgotten").
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests or for direct marketing.
  • Restriction: Request that we restrict processing of your data in certain circumstances.
  • Withdraw Consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please contact us at privacy@xgenerator.com.

8. Children's Privacy

xGenerator is not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will promptly delete it.

9. International Data Transfers

Your data may be processed in countries outside your own. Where this occurs, we ensure appropriate safeguards are in place (such as standard contractual clauses) to protect your data in accordance with applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

  • Email: privacy@xgenerator.com
  • Website: xgenerator.com/contact