Privacy Policy

Effective Date: April 24, 2026 | Contact: support@xoxo.ai

This Privacy Policy describes how XOXO AI, Inc. ("XOXO," "Company," "we," "us," or "our") collects, uses, discloses, and protects information in connection with our websites, applications, and related services (collectively, the "Services").

1. Summary

We design the Services to process only the information reasonably necessary to provide them. We do not sell personal information. We do not use third-party advertising cookies or third-party analytics cookies at this time. We do not use User Content to train foundation or generalized artificial intelligence models unless you expressly opt in. Privacy requests may be sent to support@xoxo.ai.

2. Information We Collect

We may collect the following categories of information:

Account and contact information. Information such as your name, email address, and other contact details if you create an account, join a waitlist, or contact us.

Technical and usage information. Information such as IP address, device and browser information, log data, and usage information, which we use to operate, secure, troubleshoot, and improve the Services.

User Content. Prompts, messages, files, and other content that you submit to the Services.

Google user data. If you choose to connect your Google account, we may collect and process Gmail and Google Calendar data as described in Section 13 below.

3. How We Use Information

We use information to:

  • provide, operate, maintain, secure, and troubleshoot the Services;
  • communicate with you about the Services, including administrative and service-related messages;
  • respond to inquiries and privacy requests;
  • comply with legal obligations and enforce applicable terms; and
  • improve the Services using aggregated or de-identified information.

4. Email Communications and Unsubscribe

We may send you service-related, account-related, and administrative emails. We may also send marketing emails if permitted by applicable law or if you have opted in. You may opt out of marketing emails by using the unsubscribe link in the email or by contacting support@xoxo.ai. We may continue to send non-marketing or transactional emails. We process unsubscribe requests within 10 business days.

5. No Model Training by Default

We do not use User Content to train foundation or generalized artificial intelligence models unless you expressly opt in. We may use aggregated or de-identified information to improve reliability, safety, and performance of the Services.

6. How We Disclose Information

We may disclose information:

  • to service providers that help us operate, secure, and support the Services and that are bound by appropriate confidentiality obligations;
  • if required by law, legal process, or governmental request;
  • to protect the rights, safety, and security of XOXO, our users, or others; and
  • in connection with a merger, acquisition, financing, reorganization, bankruptcy, or similar corporate transaction, subject to applicable law.

We do not sell personal information.

7. Cookies and Tracking

We use first-party cookies and similar technologies as needed to operate the Services, including for authentication, security, and preferences. We do not use third-party advertising cookies or third-party analytics cookies at this time.

8. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Technical logs and User Content are retained for up to 30 days and then deleted or de-identified, unless retention is reasonably necessary for security, abuse prevention, troubleshooting, legal compliance, or enforcement. Account and contact information is retained while your account remains active or until you request deletion, subject to applicable law.

9. Security

We use reasonable administrative, technical, and organizational measures designed to protect information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Privacy Rights

Depending on your location, you may have rights to request access to, correction of, deletion of, or portability of your personal information. You may submit a request by contacting support@xoxo.ai. We may ask for information reasonably necessary to verify your identity and process your request.

11. International Transfers

If information is transferred internationally, we rely on appropriate safeguards where required by applicable law.

12. Children

The Services are not directed to children under 16. If you believe a child has provided personal information to us, please contact support@xoxo.ai so that we may take appropriate action.

13. GOOGLE API DATA: GMAIL AND GOOGLE CALENDAR

If you choose to connect your Google account, the Company will access and use Google user data only with your permission and for the purposes described in this Privacy Policy.

Gmail data. Depending on the permissions you grant, the Company may access Gmail information such as email addresses, subject lines, dates, labels, message headers, and message body text. The Company uses Gmail data to provide email-related features of the Services, including relationship context, email organization, and email drafting or modification features.

Google Calendar data. Depending on the permissions you grant, the Company may access Google Calendar information such as event titles, descriptions, locations, times, attendees, availability, and conference links. The Company uses Google Calendar data to provide calendar-related features of the Services, including scheduling context, meeting-time suggestions, and calendar event creation, update, or removal features.

Storage. The Company stores Google user data only as reasonably necessary to provide and maintain the connected Google features, comply with applicable law, and protect the Services.

Sharing. The Company does not sell Google user data. The Company does not share Google user data except as necessary to provide and maintain the connected Google features, comply with applicable law, protect the Services, or complete a merger, acquisition, or sale of assets as permitted by applicable law.

Limited Use. The Company's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You may disconnect Gmail or Google Calendar at any time through the Services or your Google account permissions.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and provide notice where required by applicable law.

15. Contact

XOXO AI, Inc. | Email: support@xoxo.ai