Privacy Policy

XolvedAI (“we,” “us,” or “our”) is an adaptive AI tutoring platform operated at xolvedai.com, built by Consulting x D. Anthony. This Privacy Policy explains how we collect, use, disclose, and safeguard your information. We are committed to protecting your privacy and handling your data transparently.

Account Information

• Name and email address provided during registration
• Authentication via secure magic link (passwordless sign-in)
• Account role (student or administrator)

Learning & Usage Data

• Chat messages and conversations with the AI tutor
• Learner profile data (interests, subjects, learning preferences, progress)
• Task and workspace data (assignments, streaks, completion status)
• Uploaded files and documents for analysis
• Engagement signals and session history

Professional & Business Data

• Real estate transaction records, commission calculations, and compliance documents (Re-Xolved)
• Professional license information and continuing education (CE) requirements
• Fair Housing compliance audit results and jurisdiction-specific protected class data
• Budget records, transaction categorizations, and financial goals

Communication Data

• Inbound and outbound emails processed through Team Inbox shared workspaces
• Email bodies encrypted at rest with AES-256-GCM; plaintext excerpts used for search indexing
• Push notification subscription tokens for browser/PWA notifications
• Telegram user ID, chat ID, and username when you link your account

Payment Data

• Subscription tier, billing cycle, and payment status processed by Stripe
• We do not store credit card numbers — all payment data is handled directly by Stripe

Automatically Collected Data

• Error and performance data via Sentry for debugging purposes
• Session metadata (login times, session duration)
• Service worker cache and offline data stored locally on your device (PWA)
• Vercel Analytics and Speed Insights for performance monitoring (no PII collected)

We use collected information to:

• Provide personalized AI tutoring and adaptive learning experiences
• Build and maintain your learner profile for better educational outcomes
• Process and analyze uploaded files to support your learning
• Send notifications and engagement reminders via Telegram
• Track learning progress, streaks, and milestones
• Improve the Service through aggregated analytics and error monitoring
• Authenticate your identity and manage your account
• Enable administrator oversight for educational support

Your conversations and learning data are processed by xAI (Grok) to generate tutoring responses, marketing intelligence, and content. We use Memobase (our Personal Intelligence layer) to extract, embed, and store adaptive user profiles from your interactions. Profile data may be synced to xAI Collections for sub-100ms retrieval during AI inference. This data is used exclusively to provide and improve the Service and is never sold for advertising.

Team Inbox: If your organization uses shared inboxes, Grok-4 processes inbound emails to generate summaries, compliance scans, and suggested tasks. Email bodies are AES-256-GCM encrypted at rest. Compliance Intelligence scanning is opt-in per organization.

We do not sell your personal data. We may share information with:

• Service providers: database hosting, AI model providers, error tracking, and vector storage partners
• Administrators: designated architects supporting your learning journey
• Legal requirements: when required by law, regulation, or legal process
• Safety: to protect the rights, safety, or property of XolvedAI, our users, or others

XolvedAI is deployed on Vercel Pro and Supabase Pro, with AES-256 encryption at rest and TLS 1.3 encryption in transit. Authentication uses secure, time-limited magic links—no passwords to steal or leak. All API endpoints are protected by rate limiting, input validation, and timing-safe cryptographic verification.

We maintain a hardened security posture with frequent updates, proactive vulnerability scanning, and defense-in-depth protections across every layer of the platform. For full details, see our Security & Privacy page. No method of electronic storage is 100% secure, so we cannot guarantee absolute protection.

We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion at any time. Upon deletion, we remove personal data within 30 days except where law requires retention.

Depending on your jurisdiction, you may be able to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict certain processing
• Request portability of your information
• Withdraw consent where processing is based on consent
• File a complaint with your local data protection authority

To exercise these rights, contact us through the XolvedAI platform. We respond to verified requests within 30 days.

XolvedAI is intended for individuals aged 13 and older. We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have collected such data, contact us so we can take appropriate action.

The Service integrates with third-party platforms. Each has its own privacy policy:

• xAI (Grok) — AI model provider for chat, marketing intelligence, and content generation
• Stripe — payment processing for subscriptions (we never store card numbers)
• Resend — transactional and campaign email delivery
• Telegram — see our Telegram Bot Privacy Policy
• Supabase — database, storage, and edge functions
• Sentry — error monitoring and performance tracking
• Vercel — hosting, analytics, and speed insights

We use session-based authentication tokens to maintain your login state. We do not use third-party advertising trackers. Essential cookies may be used to ensure the Service functions properly.

We may update this Privacy Policy from time to time. Changes will be posted with an updated “Last updated” date. Continued use of the Service after changes constitutes acceptance of the revised policy.

For questions about this Privacy Policy or our data practices, email info@xolvedai.com or visit xolvedai.com.

Note: XolvedAI does not maintain social media accounts. All official communications should be directed to info@xolvedai.com.