1. Introduction
Xtok Inc. ("Company," "we," "us") operates the Goxi platform. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Service. We are committed to transparency and to protecting your data.
By using Goxi, you consent to the practices described in this Policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
Information You Provide
- Account details — name, email address, payment information.
- Content you upload — videos, images, scripts, brand assets.
- Workspace settings — preferences, integration configurations, team roles.
- Communications — support requests, feedback, survey responses.
Information Collected Automatically
- Device data — browser type, operating system, IP address.
- Usage data — features used, Crew interactions, content generated, session duration.
- Analytics — performance metrics, error logs, aggregated usage patterns.
Information from Third Parties
When you connect third-party platforms (YouTube, Instagram, TikTok, Slack, etc.), we receive data authorized through those integrations, such as channel analytics, engagement metrics, and content metadata.
3. How We Use Your Information
- Service Delivery — operating your Workspace, running Crew agents, processing and distributing content.
- Improvement — analyzing usage patterns to enhance features, train models, and improve content quality.
- Communication — sending account notices, product updates, and responding to support requests.
- Security — detecting fraud, preventing abuse, and protecting the integrity of the Service.
- Legal Compliance — fulfilling legal obligations and responding to lawful requests.
4. Categories of Personal Data
| Category | Examples | Purpose |
|---|---|---|
| Identifiers | Name, email, IP address | Account management, authentication |
| Financial | Payment method, billing address | Subscription processing |
| Usage Data | Features used, session logs | Service improvement, analytics |
| Content Data | Uploaded videos, generated assets | AI processing, content delivery |
| Device Info | Browser, OS, screen resolution | Compatibility, troubleshooting |
| Integration Data | Platform analytics, tokens | Third-party service connectivity |
6. Data Retention
We retain your data for as long as your account is active and as needed to provide the Service. After account termination, we retain data for up to 30 days before permanent deletion, unless longer retention is required by law or necessary to resolve disputes.
Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics and service improvement.
7. Cookies & Tracking
We use cookies and similar technologies for authentication, preferences, analytics, and security. You can manage cookie preferences through your browser settings. Disabling certain cookies may limit Service functionality.
We use analytics providers to understand how users interact with the Service. These tools may collect information sent by your browser, including page views and feature usage.
8. Data Security
We implement industry-standard measures to protect your data, including encryption in transit (TLS 1.2+) and at rest (AES-256), access controls, regular security audits, and incident response procedures.
No method of transmission or storage is 100% secure. If you become aware of a security vulnerability, please report it to security@goxi.ai.
9. Your Rights & Choices
Depending on your jurisdiction, you may have the right to:
- Access — request a copy of your personal data.
- Correction — update inaccurate or incomplete data.
- Deletion — request removal of your personal data.
- Portability — receive your data in a structured, machine-readable format.
- Opt-Out — unsubscribe from marketing communications at any time.
- Restriction — limit certain processing of your data (GDPR).
To exercise any of these rights, contact us at privacy@goxi.ai. We will respond within 30 days. California residents have additional rights under the CCPA, including the right to know what data is collected and the right to opt out of data sales (we do not sell data).
10. International Transfers
Your data may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for transfers from the EEA/UK.
11. Children's Privacy
Goxi is not directed to children under 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a child, we will promptly delete it. If you believe a child has provided us with personal data, please contact privacy@goxi.ai.
12. AI & Machine Learning
Goxi uses AI models to process your content and generate outputs. Your User Content may be used to improve the quality and relevance of AI outputs within your Workspace. We do not use your content to train general-purpose AI models shared with other customers without your explicit consent.
AI processing is integral to the Service. If you have concerns about how your data is used for AI purposes, please contact our Data Protection Officer at dpo@goxi.ai.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-product notice at least 15 days before they take effect. The "Last updated" date at the top reflects the most recent revision.
14. Contact Us
If you have questions about this Privacy Policy or how we handle your data:
Xtok, Inc.
Privacy: privacy@goxi.ai
DPO: dpo@goxi.ai
Support: support@goxi.ai
Website: goxi.ai