We process customer data with the minimum scope necessary to operate the Xophia platform, and we never sell it.
What we collect
We collect only the information required to deliver the service: account details (name, work email, organization), product telemetry (feature usage, latency, error traces) and the data your team explicitly submits to your agents.
How we use it
Data is used to operate, secure and improve the platform for the customer that submitted it. Customer-submitted content is never used to train shared or third-party foundation models.
Your rights
You can access, rectify, export or delete your data at any time. Requests are honored within 30 days under GDPR, CCPA and Chilean Law 21.719.
Retention
Operational data is retained for the lifetime of your contract plus 90 days. Backups are encrypted and rotated on a 35-day window.
Questions? Reach our team at legal@xophia.ai.