Privacy Policy

1. Introduction

Welcome to Xaiote ("we," "our," or "us"). We are committed to protecting the privacy and security of the data entrusted to us. This Privacy Policy explains how we collect, use, process, and disclose information when you access or use our manufacturing intelligence platform, website, and related services (collectively, the "Services").

2. Information We Collect

We collect information to provide, improve, and secure our Services. The types of information we collect include:

• Account Information: Name, email address, password, company name, and contact details provided during registration.
• Usage Data: Information about how you interact with our platform, including access logs, device information, and IP addresses.
• Customer-Submitted Data: Operational and manufacturing information submitted by authorized users of our customers (see Section 3).

3. Manufacturing and Operational Data

As a manufacturing intelligence platform, Xaiote processes operational data submitted by our customer users. This includes machinery logs, production schedules, maintenance reports, vendor information, and other industrial operations data. We process this data strictly on behalf of our customers in accordance with our terms of service.

4. WhatsApp Communications

For customers who enable the WhatsApp integration feature, Xaiote receives and processes messages sent to the designated business number.

• We only process messages from phone numbers that have been explicitly authorized by the customer administrator.
• Unauthorized messages are immediately rejected and dropped.
• We extract operational evidence from these messages to generate actionable manufacturing insights.

5. How We Use Information

We use the collected information for the following purposes:

• To provide, operate, and maintain the Services.
• To extract insights and identify manufacturing events (e.g., machine failures, maintenance needs).
• To authenticate users and ensure strict multi-tenant data isolation.
• To communicate with you regarding security updates, technical notices, and administrative messages.

6. AI and LLM Processing

Xaiote utilizes Large Language Models (LLMs) to structure and analyze manufacturing data.

• We do not use your private operational data or communications to train base AI models.
• Data processed through LLM providers is handled via enterprise agreements ensuring data isolation and privacy.

7. Data Storage and Security

We implement industry-standard technical and organizational measures designed to secure your information. This includes encryption in transit (TLS) and at rest, secure credential management, role-based access control, and tenant-level data isolation. While we strive to protect your data, no system is entirely impenetrable, and we cannot guarantee absolute security.

8. Data Retention

We retain personal and operational data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, provide our Services, and comply with legal obligations. Upon termination of an enterprise agreement, customer data is securely deleted in accordance with our terms of service.

9. Data Sharing and Service Providers

We do not sell your personal or operational data. We may share information with trusted third-party service providers (such as cloud hosting providers, LLM API providers, and communication platforms like Meta/WhatsApp) strictly for the purpose of operating the Services. These providers are bound by confidentiality obligations.

10. Customer Data Ownership

Our customers retain full ownership of the operational and manufacturing data they submit to Xaiote. We act merely as a data processor for this information, deriving insights exclusively for the customer's benefit.

11. User Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict the processing of your personal information. If you wish to exercise these rights, please contact us. Note that for data submitted by your employer, you may need to route your request through your company's designated administrator.

12. Cookies and Website Analytics

We may use cookies and similar tracking technologies on our public website to analyze traffic and improve user experience. You can instruct your browser to refuse all cookies or indicate when a cookie is being sent.

13. Children's Privacy

Our Services are intended for enterprise use and are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or regulatory requirements. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date.

15. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@xaiote.com