Xmox ("we," "us," or "our") operates an AI-powered travel planning platform. This Privacy Policy explains what personal information we collect when you use the Service, how we use it, who we share it with, and what rights you have over your data.
By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.
We do not sell your personal information to third parties. Our business model is based on service subscriptions, not data monetization.
We collect information you provide directly, information generated through your use of the Service, and limited technical information.
| Category | What we collect | Why |
|---|---|---|
| Account data | Name, email address, hashed password, profile language preference | Account creation and authentication |
| Trip data | Destinations, travel dates, group size, budget, preferences, AI-generated itineraries | Core trip planning functionality |
| Conversation data | Your messages to the AI agent and the responses generated | To provide AI responses and build cross-trip memory |
| User memory | Personal travel preferences extracted from conversations (e.g., dietary needs, preferred activities) | To personalize future trip planning |
| Payment data | Transaction records, purchase dates, amounts, and currency (no full card numbers stored by us) | Billing and subscription management |
| Usage data | Features used, pages visited, session timestamps, device type, and browser | Service improvement and security monitoring |
We do not intentionally collect sensitive personal data such as health records, government ID numbers, or financial account credentials.
We use the information we collect for the following purposes:
We process your data only for the purposes described above or as otherwise required by law.
The core features of Xmox are powered by artificial intelligence. Understanding how your data flows through our AI systems is important:
Your conversations are not used to train Google's foundational AI models under our API agreement. Data sent to AI services is used solely to generate responses for your requests.
We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:
Any third parties who process your data on our behalf are contractually obligated to protect it and use it only for the purposes we specify.
We retain your data for as long as your account is active or as needed to provide the Service. Specific retention practices:
When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
Depending on your location, you may have the following rights with respect to your personal data:
To exercise any of these rights, contact us at privacy@xmox.ai. We will respond within 30 days. Some rights may be limited where we have a legitimate legal basis to retain or process your data.
We take the security of your personal data seriously and implement appropriate technical and organizational measures, including:
No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at security@xmox.ai.
We do not use cookies. Instead, we store a minimal set of items in your browser's local storage, strictly necessary for the Service to function:
We do not use advertising cookies, cross-site tracking cookies, or third-party analytics. You can clear local storage at any time through your browser settings, which will sign you out of the Service.
The Service is not directed to, and we do not knowingly collect personal information from, individuals under the age of 18. If we become aware that we have collected personal data from a minor without appropriate consent, we will take steps to delete that information promptly.
If you believe a minor has provided personal information through our Service, please contact us at privacy@xmox.ai.
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and notify registered users by email or through an in-app notice.
We encourage you to review this Policy periodically. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:
📧 privacy@xmox.ai — privacy inquiries and data requests
🔐 security@xmox.ai — security vulnerabilities or suspected breaches
We aim to respond to all privacy inquiries within 5 business days.
For general Terms of Use information, see our Terms of Use.