xTrac - AI-Powered Workflow Automation

Introduction

xTrac AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our agentic workflow automation platform. Please read this privacy policy carefully.

Information We Collect

Personal Information

We collect information that you voluntarily provide to us when you:

Register for an account (name, email address, password)
Create or modify workflows
Connect third-party integrations
Contact our support team
Participate in surveys or provide feedback

Automatically Collected Information

When you use our platform, we automatically collect:

Usage data (workflow executions, feature usage, performance metrics)
Device information (IP address, browser type, operating system)
Log data (timestamps, errors, API calls)
Cookies and similar tracking technologies

Integration Data

When you connect third-party services (Gmail, Slack, Notion, etc.), we collect and process data from those services as necessary to execute your workflows. We only access the specific data and permissions you explicitly authorize.

How We Use Your Information

We use the collected information to:

Provide and maintain our services: Execute workflows, process data, and ensure platform functionality
Improve our platform: Analyze usage patterns, optimize performance, and develop new features
Communicate with you: Send service updates, security alerts, and support responses
Ensure security: Detect fraud, prevent abuse, and protect user accounts
Comply with legal obligations: Respond to lawful requests and enforce our terms
Personalize experience: Customize workflow recommendations and interface preferences

Data Security

We implement industry-standard security measures to protect your information:

Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
Access Controls: Strict role-based access controls and multi-factor authentication
Regular Audits: Security assessments and penetration testing
Monitoring: 24/7 security monitoring and threat detection
Data Isolation: Tenant data is logically separated and isolated

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Third-Party Integrations: With services you explicitly connect to execute workflows (e.g., Gmail, Slack)
Service Providers: With trusted vendors who assist in operating our platform (hosting, analytics, payment processing)
Legal Requirements: When required by law or to protect our rights and safety
Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
With Your Consent: When you explicitly authorize us to share your information

Your Rights and Choices

You have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you
Correction: Update or correct inaccurate information
Deletion: Request deletion of your account and associated data
Data Portability: Export your workflow configurations and data
Opt-Out: Unsubscribe from marketing communications
Withdraw Consent: Revoke permissions for third-party integrations

To exercise these rights, please contact us at privacy@xtrac.dev

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

Essential Cookies: Required for authentication and core functionality
Analytics Cookies: Help us understand how you use our platform
Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect platform functionality.

Data Retention

We retain your personal information for as long as necessary to:

Provide our services to you
Comply with legal obligations
Resolve disputes and enforce agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

Children's Privacy

Our platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Email: privacy@xtrac.dev

Support: support@xtrac.dev