Xenyyo

Privacy Policy

How we collect, use, and protect your personal information

Last updated: February 2026

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Email address
  • Display name
  • Password (encrypted)
  • Profile information you choose to share

When you sign in using Google, we receive your name, email address, and profile picture from Google. We use this information to create or link your account. We do not access any other Google account data.

1.2 Creator Information

For creators, we additionally collect:

  • Creator profile details and bio
  • Tax identification information (as required)

When creators set up payouts, they are onboarded through Stripe Connect. Personal and financial information (legal name, address, tax identification number, bank account details) is collected directly by Stripe and subject to Stripe's Privacy Policy. Xenyyo does not store this financial information.

1.3 Content and Code

  • Code files and projects you upload
  • Tool descriptions and metadata
  • Tool reviews and ratings you submit

1.4 Usage Data

  • Platform usage patterns and analytics
  • Purchase history and transaction data
  • Performance metrics and error logs
  • IP addresses and device information

1.5 Payment Information

  • Payment processing handled by Stripe
  • We do not store credit card information
  • Transaction records for accounting purposes

2. How We Use Your Information

2.1 Platform Operation

  • Providing marketplace and creator services
  • Processing payments and payouts
  • Generating AI-powered content analysis
  • Customer support and communication

2.2 Platform Improvement

  • Analytics to improve user experience
  • Performance monitoring and optimization
  • Feature development and testing
  • Security and fraud prevention

2.3 Communication

  • Transaction confirmations and receipts
  • Platform updates and announcements
  • Marketing communications (with consent)
  • Support and customer service

3. AI Analysis and Processing

3.1 Code Analysis

  • Your uploaded code is analyzed by AI services
  • Analysis generates product descriptions and metadata
  • Uploaded code is also screened for quality standards and content safety compliance
  • Processed data is used to create marketplace listings
  • Original code remains your intellectual property

3.2 AI Service Providers

  • We use OpenAI and Anthropic services for analysis
  • These services may process your code according to their privacy policies
  • We maintain data processing agreements with AI providers
  • No code is used to train public AI models

4. Information Sharing

4.1 Public Information

  • Published tool listings and descriptions
  • Creator profile information (as configured)
  • Tool reviews and ratings
  • Aggregated, non-personal analytics

4.2 Service Providers

We share information with:

  • Payment processors (Stripe) for transaction processing
  • AI services (OpenAI, Anthropic) for code analysis
  • Cloud hosting providers (AWS) for platform operation
  • Analytics services for platform improvement

4.3 Legal Requirements

We may disclose information when required by:

  • Legal process or court orders
  • Law enforcement requests
  • Protection of rights and safety
  • Compliance with applicable laws

4.4 Business Transfers

In the event of merger, acquisition, or sale:

  • User information may be transferred
  • Users will be notified of any changes
  • Privacy protections will be maintained

5. Data Security

5.1 Security Measures

  • Encryption of data in transit and at rest
  • Secure cloud infrastructure (AWS)
  • Regular security audits and monitoring
  • Access controls and authentication

5.2 Payment Security

  • PCI DSS compliant payment processing
  • Secure tokenization of payment information
  • No storage of sensitive payment data
  • Regular security assessments

6. Your Rights and Choices

6.1 Account Control

  • Update or delete your account information
  • Control public profile visibility
  • Manage communication preferences
  • Download your data

6.2 Content Management

  • Delete published tools
  • Control tool visibility and pricing
  • Manage tool listings and descriptions
  • Export your content and data

6.3 Marketing Communications

  • Opt out of marketing emails
  • Control notification preferences
  • Unsubscribe from newsletters
  • Manage communication frequency

7. Data Retention

7.1 Account Data

  • Account information retained while account is active
  • Deleted accounts purged within 90 days
  • Legal obligations may require longer retention
  • Backup systems may retain data for additional periods

7.2 Transaction Data

  • Payment records retained for tax and legal requirements
  • Analytics data anonymized after 24 months
  • Support communications retained for 2 years
  • Security logs retained for 1 year

8. International Data Transfers

8.1 Data Storage and Processing

  • Platform data is stored in AWS US-East-1 (Virginia, United States)
  • Payments are processed by Stripe in the United States
  • AI analysis is performed by OpenAI and Anthropic services in the United States
  • Data may be transferred internationally as necessary for platform operation

8.2 Data Protection Standards

  • EU GDPR compliance for European users
  • Standard Contractual Clauses (SCCs) apply for EU users where applicable
  • Regular assessment of data protection measures
  • Privacy by design principles

9. Cookies and Tracking

9.1 Cookie Usage

Xenyyo currently uses only essential cookies required for platform functionality:

  • Authentication and session management cookies
  • Security cookies for fraud prevention
  • Preference cookies for user settings

Analytics and marketing cookies may be added in the future. If so, we will implement appropriate consent mechanisms before enabling them.

9.2 Tracking Technologies

  • Session management and authentication
  • Security and fraud prevention

10. Children's Privacy

10.1 Age Requirements

  • Platform is not intended for users under 18
  • We do not knowingly collect information from minors
  • Parents may contact us regarding underage accounts
  • Underage accounts will be promptly deleted

11. Privacy Policy Updates

11.1 Changes and Notifications

  • Policy updates will be posted on this page
  • Material changes communicated via email
  • Continued use constitutes acceptance
  • Previous versions available upon request

11.2 Effective Date

  • Changes become effective 30 days after posting
  • Immediate implementation for legal requirements
  • User notification of significant changes
  • Right to object to material changes

12. Regional Privacy Rights

12.1 California Privacy Rights (CCPA)

California residents have the right to:

  • Know what personal information is collected
  • Delete personal information
  • Opt out of sale of personal information
  • Non-discriminatory treatment

12.2 European Privacy Rights (GDPR)

European users have the right to:

  • Access personal data
  • Rectify inaccurate data
  • Erase personal data
  • Restrict or object to processing
  • Data portability

13. Contact Information

13.1 Privacy Questions

For privacy-related questions or concerns, contact us at:

Email: privacy@xenyyo.com

You can also:

  • Use our contact form at xenyyo.com/contact
  • Request data access or deletion
  • Report privacy violations or concerns

13.2 Data Protection Officer

For GDPR-related inquiries, contact:

Email: dpo@xenyyo.com

You may also:

  • Submit formal privacy complaints
  • Request information about data processing
  • Exercise your privacy rights under GDPR or CCPA

This Privacy Policy is effective as of the last updated date above.