Effective September 29, 2026

Privacy Policy

This policy explains how xYz handles information when you use aibyxyz.com, talk with Eugene, request work, or purchase a service.

Information we collect

We may collect information you choose to provide, including your name, email, company details, website, business needs, messages sent to Eugene, project requests, and support communications.

We also collect limited technical and usage information needed to operate and improve the service, such as anonymous session identifiers, page and funnel events, referral or campaign information, timestamps, and service diagnostics. We use presence signals to understand whether anonymous sessions are browsing, conversing, or working. We do not use those signals to identify a person by IP address, device fingerprint, or precise location.

Optional inquiry follow-up

Our optional help form records an optional email address you enter, your inquiry reference, any business website you provide, and your request for help about that inquiry. You can request and read help on the site without providing an email address. When supplied, the email fields do not verify mailbox ownership. Saving a request does not send an email or enroll you in marketing. The form also records the selected topic and any support message you enter. xYz may reply within that request on the site; replies are available only to the same browser session and do not activate an account. These help-form records and associated replies expire after 30 days. You can use the do-not-contact control in the same browser session or email support@aibyxyz.com to withdraw the request. Payment checks use a browser-bound signed checkout reference; a return-page URL alone does not confirm payment or activated access.

Individual geniUX workspaces

For new supported annual purchases, xYz verifies the order and payment with Square and creates a separate customer workspace. We keep the purchase reference, access period, a hash of the checkout browser identifier, and account and session security records. Your private access key works like a password; only a hash is stored in the customer account database. A Secure, HttpOnly cookie keeps your session signed in for up to 30 days. You can sign out or replace your key to revoke previous sessions. Save your key securely to sign in on another device; an email address alone does not establish account ownership.

Your saved business context and private conversation history are stored for service delivery under the retention practices below, not in the public conversation feed. When you submit an AI request, your saved context and recent conversation are sent to the AI provider to generate that response. We request that these Responses API results not be stored as retrievable application state by that API; this is not a promise of zero provider retention. Do not submit passwords, access keys or card data. Payment status is rechecked before paid use. A refund, expiry or verification failure can pause new paid actions without being treated as a new purchase. No automatic renewal charge is introduced by this account flow.

Payments

Payments are handled through Square-hosted checkout. xYz does not ask you to send card numbers or security codes through Eugene or our chat. Square processes payment information under its own privacy and security practices.

How we use information

We use information to respond to requests, understand your business context, provide and improve xYz and geniUX, create scopes and proposals, process purchases, deliver work, provide support, prevent abuse, maintain security, and measure how our services are used.

AI and service providers

Information you submit may be processed by technology and infrastructure providers that help xYz provide AI, hosting, analytics, communications, and payment functions. We share information only as reasonably necessary to provide, secure, and operate the service, comply with law, or protect rights and safety. We do not sell your personal information to advertisers.

Retention and your choices

We retain information for as long as reasonably necessary for the purposes described above, including service delivery, records, security, and legal obligations. You may contact us to request access, correction, or deletion of personal information, subject to legal and operational requirements.

Children

xYz services are intended for business users and are not directed to children under 13.

Changes

We may update this policy as our services change. The effective date above identifies the current version.

Contact

Questions or privacy requests: support@aibyxyz.com.