Legal

Privacy Policy

Last updated: March 1, 2026

Xentovia Tech Private Limited ("Xentovia," "we," "us," or "our") is committed to protecting the privacy of individuals who visit our websites, use our products — including Xentovia (autonomous AI workflow platform) and EdunodeX (AI-powered education platform) — or otherwise interact with our services (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information. By accessing or using our Services, you agree to this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Name, email address, phone number, company name, and job title when you create an account or join our waitlist.
  • Payment Information: Billing address and payment details processed securely through third-party payment processors. We do not store full payment card numbers.
  • Workflow & Content Data: Workflow configurations, prompts, API keys (encrypted), and data you process through Xentovia or EdunodeX.
  • Communications: Messages you send to us via email, support tickets, or feedback forms.
  • EdunodeX Learning Data: Course progress, assessment responses, learning preferences, and performance analytics when you use EdunodeX.

1.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, workflow execution logs, API call metadata, timestamps, and session duration.
  • Device & Browser Data: IP address, browser type, operating system, device identifiers, and screen resolution.
  • Cookies & Tracking: We use cookies, pixels, and similar technologies to maintain sessions, remember preferences, and analyze usage patterns.

1.3 Information from Third Parties

  • Data from authentication providers (e.g., Google, GitHub) when you use single sign-on.
  • Information from integrated third-party services you connect to your workflows.
  • Business contact information from publicly available sources or partners.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our Services, including Xentovia and EdunodeX.
  • Process transactions and send related information (confirmations, invoices).
  • Personalize and improve the user experience, including AI model performance and learning pathways on EdunodeX.
  • Analyze usage patterns to develop new features and optimize platform performance.
  • Send administrative communications (security alerts, updates, support messages).
  • Send marketing communications where you have opted in (you can unsubscribe anytime).
  • Detect, prevent, and address fraud, abuse, and security incidents.
  • Comply with legal obligations and enforce our terms.

3. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

  • Service Providers: With trusted vendors who assist us in operating our Services (cloud hosting, payment processing, analytics, customer support), subject to confidentiality obligations.
  • LLM Providers: When you use Xentovia workflows, prompts and data may be sent to third-party LLM providers (e.g., OpenAI, Anthropic, Google) as necessary to execute your workflows. We encourage you to review their privacy policies.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.
  • Legal Requirements: When required by law, regulation, legal process, or enforceable governmental request.
  • With Your Consent: When you explicitly authorize the sharing of your information.

4. Data Security

We implement industry-standard security measures to protect your information:

  • AES-256 encryption for data at rest.
  • TLS 1.3 encryption for data in transit.
  • Role-based access control (RBAC) and multi-factor authentication.
  • Regular security audits and penetration testing.
  • SOC 2 Type II compliance framework.
  • Encrypted storage of API keys and credentials using hardware security modules.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our Services. We also retain data as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Workflow execution data and logs are retained for up to 90 days unless you configure a different retention period. EdunodeX learning records are retained for as long as your account is active to support continued learning progress.

6. Your Rights & Choices

Depending on your location, you may have the following rights:

  • Access & Portability: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to legal retention requirements.
  • Opt-Out: Unsubscribe from marketing emails at any time via the link in our emails.
  • Cookie Preferences: Manage cookie settings through your browser or our cookie consent tool.
  • Data Processing Objection: Object to or restrict certain processing of your data.

To exercise any of these rights, contact us at privacy@xentovia.ai.

7. International Data Transfers

Our Services are hosted in multiple regions. Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including standard contractual clauses and data processing agreements, to protect your data in accordance with applicable laws.

8. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal data, please contact us at privacy@xentovia.ai, and we will take steps to delete such information.

For EdunodeX: where educational institutions use EdunodeX for students under 16, the institution is responsible for obtaining appropriate parental or guardian consent as required by applicable law.

9. Third-Party Links & Integrations

Our Services may contain links to third-party websites and integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you connect to through our platform.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our Services after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: