1. What we collect
When you use the XoomAI builder, we collect the minimum data needed to generate your site and let you download it.
- Account info — email + password hash (if you sign in)
- Prompts you submit — your text inputs, stored so you can retrieve past generations
- Generated outputs — the React + FastAPI codebases XoomAI produces for you
- Usage telemetry — anonymized request counts, performance timings, error rates
- Cookies — only session cookies for authenticated routes (no third-party tracking)
2. Why we collect it
- To generate and deliver your sites
- To keep your prompts so you can revisit and refine them
- To diagnose engineering issues (anonymized telemetry only)
- To bill paid plans (post-beta)
3. What we DO NOT do
- We do not sell your data to third parties
- We do not run third-party analytics trackers on the public site
- We do not train models on your prompts
- We do not retain your generated codebases longer than necessary to deliver them
4. Third-party services
XoomAI uses a small number of operational services. Each handles only the minimum data needed:
- Anthropic Claude API — receives your prompt; subject to Anthropic's privacy policy
- Hosting platforms (Railway / Fly / Render / Vercel) — see each provider's policy if you deploy
- Stripe / Razorpay — only invoked if you enable payment plugins
5. Your rights
You can contact us to request data export or deletion at any time. We respond within 30 days.
6. Cookies
We use first-party session cookies only — strictly necessary for authentication. No analytics, advertising, or social-media cookies are set by the XoomAI public site.
7. Children
XoomAI is not directed at children under 13. We do not knowingly collect data from anyone under 13.
8. Changes to this policy
Material updates will be posted here with a new "Last updated" date. You'll see the change in the changelog.
9. Contact
Questions about this policy: hello@xoomai.com.