1. Introduction
Xiaotime Labs, Inc. ("we", "us", "our") operates the xiaotimelabs.ai website and our AI agent platform (the "Service"). This Privacy Policy describes how we collect, use, and protect your information.
2. Information We Collect
We may collect the following types of information:
- Account Information: Name, email address, and company name provided during beta signup.
- Usage Data: Interactions with our AI agents, including messages, commands, and preferences, to improve and personalize the service.
- Connected Services: With your explicit authorization, data from connected services (email, LinkedIn, CRM) to provide AI-powered analysis and automation.
- Technical Data: IP address, browser type, and device information for security and analytics purposes.
3. How We Use Your Information
- To provide, maintain, and improve our AI agent services.
- To personalize your AI agent's behavior and recommendations.
- To communicate with you about your account and service updates.
- To detect and prevent fraud, abuse, or security incidents.
4. Data Storage and Security
Your data is stored on secure, encrypted infrastructure. We implement industry-standard security measures to protect your information. Your connected service data (email, LinkedIn, etc.) is processed to train your personal AI agent and is not shared with other users or third parties.
5. We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to third parties. We do not use your data to train general-purpose AI models. Your data is used solely to power your personal AI agent.
6. Third-Party Services
We use third-party services for infrastructure (DigitalOcean, Discord, Google APIs). These services have their own privacy policies. We only share the minimum data necessary for these services to function.
7. Google API Services User Data Policy
Our AI agent accesses Google user data through Google APIs. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Scopes we request (only with your explicit authorization):
- Gmail: read messages and metadata (
gmail.readonly), organize labels and archive (gmail.modify), prepare drafts for your review (gmail.compose), send approved messages on your behalf (gmail.send). - Calendar: read, edit, and manage events on your calendars
(
calendar). - Drive: read documents you authorize (
drive.readonly) and create or modify files the Service produces (drive.file). - Contacts: read "Other contacts" — people you have interacted
with (
contacts.other.readonly). - Sheets: read and write spreadsheets you authorize
(
spreadsheets). - Identity: your email and basic profile for sign-in
(
userinfo.email,userinfo.profile).
Limited Use commitments:
- Google user data is used only to provide and improve user-facing features of the Service.
- We do not transfer Google user data to third parties except to provide or improve user-facing features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets where the receiving party commits to the same protections.
- We do not use Google user data to train generalized AI models or for advertising.
- No human reads your Google user data except (a) with your explicit consent, or (b) for security investigations or to comply with applicable law.
- You can revoke the Service's access at any time via your Google Account permissions or by disconnecting Google from within the Service.
8. Data Retention
We retain your data for as long as your account is active. You may request deletion of your data at any time by contacting us. Upon account deletion, we will remove your personal data within 30 days.
9. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Revoke access to connected services at any time.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the service.
11. Contact
For privacy-related inquiries, contact us at [email protected].