Who processes data
Xellio operates the service and is responsible for processing personal data. Contact hello@xellio.ai with privacy questions.
Data we collect
We may process your name, email, account details, language and theme preferences, token transaction history, technical logs, IP address and device information.
Uploaded videos, images, text and campaign context are processed for analysis. The payment provider shares payment status and a transaction identifier; Xellio does not receive complete card details.
Purposes and legal bases
We use data to create accounts, perform analyses, generate reports, account for tokens, provide support, prevent abuse and meet legal obligations.
Depending on the context, processing relies on performance of a contract, legitimate interests, a legal obligation or consent.
AI processing and service improvement
Uploaded material may be sent to cloud and AI processing providers only as needed to generate a report.
User content is not used to train general models without separate explicit consent. Aggregated or de-identified technical metrics may be used to improve the product.
Service providers and disclosures
We use vetted hosting, analytics, payment, email and AI providers. They act under contract and receive only data needed for their function.
Data may also be disclosed in response to a lawful authority request or to protect rights, security and users.
International transfers and retention
Where data is processed outside your country, we use safeguards required by applicable law.
Account and financial records are retained as needed to provide the service and comply with law. Uploaded material and technical copies are deleted or de-identified after the applicable retention period.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing. Consent may be withdrawn for future processing.
Email hello@xellio.ai to make a request. We may need to verify your identity.
Security, children and changes
We use access controls, encryption in transit, backups and monitoring. No storage method can guarantee absolute security.
The service is not intended for children who cannot provide valid consent. We may update this Policy; the current revision date is always shown above.