This policy explains what xVirtuous ("we", "us"), operated by [legal company name], zionassets.com, collects, why, and the choices you have. It covers the website xvirtuous.com and the app at app.xvirtuous.com.
What we collect
- Account: your email address, used to sign you in.
- Profile and settings: the name you give your assistant, your name (optional), time zone, home airport, and preferences you add.
- Conversations: the messages you send and your assistant's replies, including anything you dictate by voice (as text).
- Reminders, saved trips and memory notes you create.
- Google Calendar data, if you connect it: your Google account email and your calendar events, read only to answer you and changed only after you tap Confirm.
- Notification details for the devices where you turn notifications on.
- Telegram chat ID, if you link Telegram.
- Usage records (number of messages and searches per day) to apply plan limits.
Voice: speech is turned into text by your browser or device (in Chrome, by Google). We receive only the text. Spoken replies are produced on your device.
How we use it
- To run the assistant: answer your messages, manage your calendar when you confirm, send reminders and search flights.
- To keep your account secure and apply plan limits.
- To support you when you contact us.
We don't sell your personal information, and we don't use it for advertising.
Google user data
xVirtuous's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only calendar event access and your email address. We use calendar data only to provide features you ask for. We don't use it for advertising, and we don't let people read it except with your consent, for security, or as required by law. Google sign-in tokens are stored encrypted.
Service providers
We share data only as needed to run the service, with:
- Anthropic: AI processing of your messages.
- Google: Calendar (if connected), and speech-to-text in Chrome.
- Duffel: flight searches (route, dates and number of travelers; no personal details).
- x402Pulse: travel and market data lookups (no personal details).
- Telegram: only if you link it.
- Hosting, email and payment providers [list before launch, e.g. Vercel, Resend, Stripe].
How long we keep it
We keep your data while your account is open. Chat history is limited to your most recent messages. When you delete your account, we delete your data within 30 days, except where the law requires us to keep it.
Your choices
- Disconnect Google Calendar any time in the app or at myaccount.google.com/permissions.
- Clear your chat, delete memory notes and cancel reminders in the app.
- Ask for a copy of your data, a correction or deletion at privacy@xvirtuous.com.
Depending on where you live (for example, California or the EU), you may have more rights, including the right to know, delete and correct. We'll respond within the time the law requires.
Security
We use encrypted connections, encrypt stored Google tokens, and limit access to personal data. No system is perfectly secure; contact us if you suspect a problem.
Children
xVirtuous isn't for children under 13 (or under 16 where required), and we don't knowingly collect their data.
Changes and contact
We'll post changes here and update the date above. Questions: privacy@xvirtuous.com. [Company postal address]