XENOX
Privacy Policy
Last updated: July 2026
XENOX ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI messenger agent service for WhatsApp and Instagram.
1. Information We Collect
We collect the following types of information to provide and improve our service:
- Account Information: When you sign up, we collect your email address and any information you provide via Google OAuth.
- Business Credentials: To enable automated replies, you provide your WhatsApp Phone Number ID, Permanent Access Token, and Instagram Account ID and Access Token. These are stored securely to send replies on your behalf.
- AI Persona Data: You may provide a description of your business and how you want the AI to reply (e.g., tone, style, product details). This is used solely to generate context‑appropriate responses.
- Message Content: When a customer messages your business, we receive the message text and process it through our AI to generate a reply. We do not store message content beyond what is necessary to process the reply, unless required for debugging or legal compliance.
2. How We Use Your Information
We use your information exclusively to:
- Authenticate your account and manage your session.
- Connect your WhatsApp and/or Instagram Business accounts to our platform.
- Receive incoming customer messages and generate AI‑based replies using Groq's AI models.
- Send automated replies back to your customers through the respective messaging APIs.
- Improve our service (e.g., analyzing usage patterns, but always in an aggregated and anonymized manner).
We do not sell, rent, or share your personal information with third parties for their own marketing purposes.
3. Data Storage & Security
Your data is stored in a secure database (Supabase) hosted in the cloud. We implement industry‑standard security measures, including encryption of sensitive credentials and secure transmission via HTTPS. Access to your data is restricted to authorized personnel only, and we regularly review our security practices.
🔒 Your Access Tokens are stored encrypted and are only used to send replies through the official Meta APIs. We never use them for any other purpose.
4. Third‑Party Services
XENOX relies on the following third‑party services to function:
- Meta (Facebook) WhatsApp Business API – for sending and receiving WhatsApp messages. See their Privacy Policy.
- Meta Instagram Graph API – for handling Instagram DMs and comments. See their Privacy Policy.
- Groq – AI model provider that generates replies based on your persona data. See their Privacy Policy.
- Supabase – our database and authentication backend. See their Privacy Policy.
- Render – hosting our backend server. See their Privacy Policy.
- Cloudflare Pages – hosting our frontend website. See their Privacy Policy.
We choose partners that uphold strong privacy standards, and we process data only as necessary to deliver the service.
5. Data Retention & Deletion
You retain full control over your data. You may request deletion of your account and all associated data at any time. When you delete your account:
- Your account information (email, credentials, AI persona) will be permanently removed from our active database within 7 days.
- Any stored message logs (if any) will be deleted.
- We may retain anonymized usage statistics for analytical purposes, but these cannot be tied back to you.
To request deletion, please contact us at xenox.ai@gmail.com from the email associated with your account.
6. Children's Privacy
Our service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such data, we will delete it promptly.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of our service constitutes your acceptance of the updated policy.
8. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please reach out to us:
- Email: xenox.ai@gmail.com
- Business Address: XENOX, MG Road, Bangalore, India (for correspondence purposes only)