Privacy Policy

01Information We Collect

We may collect the following categories of data:

• Personal Information: Name, email address, phone number, company name, billing information.
• Usage Data: Log files, IP addresses, browser type, device details, and interactions with our websites or products.
• AI Interaction Data: Prompts, messages, files, and documents provided to XtraSpec AI systems, processed and stored securely to deliver services.
• Cookies and Tracking: Cookies and analytics tools are used to optimize user experience and platform performance.

02How We Use Your Information

• Deliver, improve, and personalize our AI platforms and automation solutions.
• Provide customer support and resolve technical issues.
• Maintain compliance with HIPAA, GDPR, and other international privacy standards.
• Monitor system performance and prevent unauthorized access or abuse.
• Communicate updates, insights, or marketing offers (with opt-out options available).

03Data Security

At XtraSpec, security is foundational to our technology. We implement multi-layered safeguards, including:

• Encryption: AES-256 encryption for data at rest and TLS 1.3 for data in transit.
• Access Control: Role-based authentication and continuous monitoring.
• Compliance: Systems architected to meet or exceed HIPAA, GDPR, and SOC 2 standards.

04Data Sharing and Disclosure

We do not sell or rent your personal information. Data may only be shared:

• With trusted service providers under strict confidentiality agreements.
• When required by law or to enforce our Terms of Service.
• With your explicit consent in specific situations.

05Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data.
• Request a copy of the data we hold.
• Restrict or object to certain processing activities.
• Withdraw consent or opt out of marketing communications.

To exercise these rights, contact us at privacy@xtraspec.io.

06Cookies and Tracking Technologies

XtraSpec uses cookies to:

• Remember user preferences and session data.
• Enhance analytics and system performance.
• Support secure authentication and platform stability.

You can manage cookie preferences in your browser settings.

07International Data Transfers

If you access our services from outside the United States, your data may be transferred and processed in the U.S. or other jurisdictions with equivalent safeguards in place.

08Data Retention

We retain personal data only as long as necessary for business operations, compliance, and legal purposes. When data is no longer required, it is securely deleted or anonymized.

09Children’s Privacy

Our services are not directed toward individuals under the age of 16. We do not knowingly collect data from minors.

10Policy Updates

We may periodically update this Privacy Policy to reflect changes in law, technology, or business practices. The “Effective Date” above will indicate the latest revision.

11Contact Us

For privacy inquiries or data requests: