XOXONA Privacy Policy

Effective Date: July 22, 2026 Operator: XOXONA.AI (“XOXONA”, “we”, “our”, or “us”)

This Privacy Policy explains how XOXONA collects, uses, stores, shares, and protects personal data when users access or use the XOXONA website, mobile application, AI characters, creator tools, and related services (collectively, the “Services”).

Because XOXONA provides AI-powered conversational and character interaction experiences, some data processing activities involve AI systems, moderation technologies, personalization systems, and third-party infrastructure providers.

By using XOXONA, you acknowledge the practices described in this Privacy Policy.

1. Scope of This Policy

This Privacy Policy applies to:

• users,
• creators,
• visitors,
• subscribers,
• applicants to creator programs, and
• individuals interacting with XOXONA Services.

This Policy applies to personal data collected through:

• websites,
• customer support,
• creator tools,
• payment systems,
• social logins,
• analytics tools,
• moderation systems, and
• AI interaction systems.

2. Information We Collect

2.1 Information We Collect

We may collect information you voluntarily provide, including:

Account Information

• username
• display name
• date of birth
• age
• email address
• password or authentication credentials
• profile image
• account preferences
• language settings
• bank account

Creator Information

• creator profile information
• character descriptions
• uploaded prompts
• uploaded images
• tags and metadata
• monetization details
• payout information
• tax-related information where legally required

Communications

• chat
• support requests
• reports and appeals
• moderation disputes
• survey responses
• feedback submissions

Payment and Subscription Information

Payments are typically processed through third-party payment providers.

We may receive limited information such as:

• transaction identifiers
• subscription status
• billing region
• purchase records
• refund status

XOXONA generally does not store full payment card information.

XOXONA may collect information relating to a user’s age or age category in order to:

• provide age-appropriate experiences,
• protect minors from mature content,
• enforce age-based restrictions,
• determine creator monetization eligibility,
• process payout compliance,
• and comply with applicable legal obligations.

In some cases, XOXONA may request:

• age verification,
• identity verification,
• parental consent documentation,
• or additional compliance-related information.

2.2 AI Conversation and User-Generated Content

Because XOXONA is an AI companion and character interaction platform, we may process:

• conversations,
• prompts,
• character interactions,
• uploaded media,
• generated outputs,
• roleplay scenarios,
• memory-related settings,
• personalization signals,
• moderation classifications, and
• creator-generated content.

Users must acknowledge explicitly that this may include sensitive or emotionally expressive content voluntarily provided by users.

Users should avoid sharing highly sensitive personal information unless necessary.

2.3 Automatically Collected Information

We may automatically collect:

Device and Technical Information

• IP address
• device identifiers
• browser type
• operating system
• language settings
• app version
• crash diagnostics
• network information

Usage Information

• interaction patterns
• session duration
• clicks and navigation
• feature usage
• character engagement
• retention metrics
• search behavior
• moderation events
• subscription activity

Cookies and Similar Technologies

We may use:

• cookies,
• analytics tools,
• pixels,
• local storage,
• device identifiers, and
• similar technologies.

For more information, please see the XOXONA Cookie Policy.

2.4 Information from Third Parties

We may receive information from:

• AI model providers,
• cloud hosting providers,
• payment processors,
• analytics vendors,
• social login providers,
• moderation vendors,
• customer support tools,
• tracing App

3. How We Use Personal Data

We may use personal data to:

Service Operation

• create and manage accounts
• authenticate users
• operate AI systems
• provide conversations and character interactions
• maintain platform functionality
• process subscriptions and purchases

Personalization

• personalize recommendations
• improve conversational continuity
• support memory systems
• remember preferences and settings
• improve creator discovery

Safety and Moderation

• detect prohibited content
• protect minors
• prevent abuse and scams
• investigate violations
• enforce Community Guidelines
• reduce harmful or illegal behavior

Analytics and Improvement

• improve AI quality
• improve moderation systems
• improve user experience
• analyze platform performance
• develop new features
• conduct testing and experimentation

Communications

• send account notifications
• respond to support requests
• provide security alerts
• notify users of policy changes
• provide marketing communications where permitted

Legal and Compliance Purposes

• comply with applicable laws
• enforce Terms of Service
• respond to legal requests
• prevent fraud and misuse
• maintain required records

XOXONA may use age-related and identity verification data to:

• customize content visibility,
• enforce age restrictions,
• restrict mature experiences,
• prevent inappropriate access to content,
• process payout verification,
• verify parental consent,
• comply with laws relating to minors,
• and prevent fraud or abuse.

4. Legal Bases for Processing

Depending on jurisdiction, we may process personal data under legal bases including:

• contract performance,
• legitimate interests,
• user consent,
• compliance with legal obligations,
• fraud prevention,
• platform security, and
• protection of users and minors.

Where required by law, we will request consent before processing certain categories of data.

5. AI Systems and Automated Processing

XOXONA uses AI systems and automated technologies to:

• generate responses,
• personalize experiences,
• classify content,
• detect abuse,
• enforce safety systems,
• support moderation,
• improve recommendations, and
• optimize platform performance.

AI-generated outputs may:

• be inaccurate,
• produce unexpected responses,
• misunderstand context, or
• generate inappropriate content despite safeguards.

Automated systems may contribute to moderation and enforcement decisions, though human review may also occur.

6. AI Vendors and Infrastructure Providers

To operate the Services, XOXONA may use third-party providers including:

• AI model providers,
• cloud hosting providers,
• analytics vendors,
• payment processors,
• moderation vendors,
• attribution providers,
• customer support tools, and
• infrastructure providers.

These providers may process limited information on our behalf subject to contractual and security protections.

7. Sharing of Personal Data

We may share personal data with:

Service Providers

Vendors supporting:

• hosting,
• AI infrastructure,
• moderation,
• analytics,
• fraud prevention,
• customer support,
• payment processing,
• subscriptions,
• marketing,
• communications, and
• security operations.

Legal and Safety Purposes

Where reasonably necessary to:

• comply with law,
• protect users,
• enforce policies,
• investigate abuse,
• respond to lawful requests, or
• prevent harm.

Corporate Transactions

In connection with:

• mergers,
• acquisitions,
• financing,
• restructuring, or
• asset transfers.

With User Consent

Where users explicitly authorize sharing.

XOXONA does not sell personal data in the traditional sense unless otherwise disclosed.

8. International Data Transfers

XOXONA may process or transfer data internationally depending on:

• hosting locations,
• infrastructure providers,
• AI providers,
• analytics systems, and
• operational requirements.

Where required, we may implement safeguards such as:

• contractual protections,
• access controls,
• organizational safeguards, and
• other legally recognized transfer mechanisms.

9. Data Retention

We retain personal data only as long as reasonably necessary for:

• service operation,
• legal compliance,
• dispute resolution,
• safety enforcement,
• fraud prevention,
• creator payouts,
• analytics,
• moderation review, and
• legitimate business purposes.

Retention periods may vary depending on:

• account status,
• content type,
• legal obligations,
• safety requirements, and
• operational needs.

Some moderation or enforcement records may be retained longer for security and abuse prevention purposes.

10. User Rights

Depending on applicable law, users may have rights to:

• access personal data,
• correct inaccurate data,
• request deletion,
• withdraw consent,
• object to processing,
• request restriction,
• request portability,
• appeal certain decisions, or
• complain to relevant regulators.

Users may also:

• manage privacy settings,
• delete conversations where available,
• modify memory settings,
• opt out of marketing communications, and
• control certain personalization features.

Requests may be submitted to Discord

11. Child Safety and Age Restrictions

XOXONA is not intended for users below the minimum permitted age under applicable law.

We do not knowingly collect personal data from prohibited underage users.

Where required:

• parental or guardian consent may apply,
• age verification systems may be used,
• mature experiences may require additional restrictions, and
• underage accounts may be restricted or removed.

If we become aware that prohibited underage data has been collected, we may delete or restrict the associated information.

12. Security

XOXONA implements reasonable technical, organizational, and administrative safeguards intended to protect personal data.

Measures may include:

• encryption,
• access controls,
• authentication systems,
• monitoring systems,
• moderation safeguards,
• abuse detection,
• logging systems, and
• vendor security reviews.

However, no system can guarantee absolute security.

13. Marketing and Advertising

Where permitted by law, XOXONA may use personal data to:

• provide promotions,
• personalize marketing,
• measure campaigns,
• improve acquisition efforts, and
• analyze engagement.

Users may opt out of marketing communications through available settings or unsubscribe mechanisms.

14. Sensitive and Emotional Content

Because XOXONA supports emotionally expressive AI interactions, users may voluntarily disclose:

• emotional experiences,
• relationship discussions,
• roleplay content,
• mental health discussions,
• identity-related information, or
• other sensitive topics.

Users are encouraged not to share highly sensitive personal information unless necessary.

XOXONA does not guarantee confidentiality equivalent to professional counseling, therapy, or privileged communications.

15. Public Content and Creator Visibility

Certain creator content may be publicly visible, including:

• creator profiles,
• character names,
• descriptions,
• avatars,
• tags,
• public greetings,
• public example chats, and
• creator statistics.

Users are responsible for the content they choose to publish publicly.

Creators retain ownership of their original intellectual property rights.

However, by publishing content on XOXONA, users agree that XOXONA may use:

• creator profiles,
• character names,
• descriptions,
• avatars,
• previews,
• screenshots,
• public example chats,
• thumbnails,
• clips,
• metadata,
• and other public-facing content

for:

• marketing,
• advertising,
• social media promotion,
• app store featuring,
• investor relations,
• platform promotion,
• recommendation systems,
• and other commercial purposes

without additional compensation and without limitation in duration.

16. Changes to This Privacy Policy

XOXONA may update this Privacy Policy periodically to reflect:

• legal developments,
• operational changes,
• AI system updates,
• safety improvements, or
• new features.

Updated versions will be posted with a revised Effective Date.

Continued use of the Services after updates constitutes acknowledgment of the revised Policy.

17. Contact Information

For privacy-related questions or requests, please contact through Discord