Privacy Policy

We collect information you provide directly, including contact details, account and billing information, support communications, and service configuration details.

When you use our website or services, we may also collect routine technical information such as IP address, device and browser data, request timestamps, authentication events, usage measurements, and diagnostic records.

Xamirai does not use customer prompts, completions, uploaded data, or model outputs to train Xamirai or third-party models.

Customer content is processed only to provide, secure, troubleshoot, and support the requested service, or as otherwise directed by the customer or required by law.

API content may be retained in service logs for up to 30 days for abuse prevention, security, reliability, and troubleshooting. Shorter retention or no-content logging may be available when specified in a written service agreement.

Operational metadata that does not contain prompt or completion content—such as timestamps, model identifiers, token counts, latency, status codes, and billing records—may be retained for up to 12 months. We may retain records longer when required for legal, security, fraud-prevention, or accounting purposes.

We use information to deliver and operate the services, authenticate users, process payments, provide support, maintain security, diagnose failures, improve reliability, communicate service updates, and comply with legal obligations.

We do not sell personal information. We do not share customer content for advertising.

We may use infrastructure, payment, communications, security, and professional-service providers that process limited information on our behalf under appropriate confidentiality and data-protection obligations.

We may disclose information when required by law, to protect rights or safety, to investigate abuse or fraud, or as part of a business transaction subject to appropriate safeguards.

We use technical and organizational safeguards appropriate to the service, including access controls, authentication, monitoring, and isolation of dedicated customer infrastructure. No system can be guaranteed completely secure.

Customers are responsible for safeguarding credentials, configuring their environments appropriately, and avoiding the submission of data they are not authorized to process.

Depending on your location, you may have rights to request access, correction, deletion, or portability of personal information, or to object to or restrict certain processing. Contact us to submit a request; we may need to verify your identity.

We may update this policy as our services or legal obligations change. We will post the revised policy here and update the effective date. Material changes may also be communicated through the service or by email.