Privacy Policy
Last updated: July 2026
This policy explains what personal data XervaAI collects, how we use it, and the rights you have over it. We aim to collect only what's needed to run the Service. For data-protection purposes, XervaAI is the controller of the data described here.
What we collect
- Account details (such as your email) when you sign up.
- Your conversations, projects, uploaded files and generated images, so we can save them to your account.
- Billing information, processed by our payment provider — we don't store full card numbers.
- Basic usage and device data (such as log and diagnostic information) to operate, secure and improve the Service.
How we use it
To provide and maintain the Service, process payments, respond to support requests, keep the Service secure, and comply with our legal obligations. Where required, we rely on your consent, the performance of our contract with you, or our legitimate interests as the legal basis for processing.
AI providers
When you send a message, your prompt and any attached content are sent to the AI provider you select to generate a response. Their handling of that data is governed by their own privacy policies. Choose the model that fits the sensitivity of your content.
Service providers we use
We share data with processors that help us run the Service, under appropriate safeguards — for example hosting and database infrastructure, our payment processor for billing, and an email provider for transactional messages. We don't sell your personal data.
Cookies
We use cookies and similar technologies as described in our Cookie Policy.
Retention & security
We keep your content while your account is active and for as long as needed to provide the Service or meet legal requirements, then delete or anonymise it. Your content is scoped to your account with row-level security, and we apply technical and organisational measures to protect it. You can delete conversations and projects at any time.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, or to request account deletion, email support@xerva.ai from your account address. You may also complain to your local data protection authority.
International transfers & children
Your data may be processed in countries other than your own; where it is, we use appropriate safeguards for the transfer. The Service is not directed to children under 16, and we don't knowingly collect their data.
Changes & contact
We may update this policy from time to time and will note the date above. Questions or requests? Email support@xerva.ai.