Privacy policy: your life stays on your computer.
XIRO is built so that what you say, see and keep stays on your own computer. This policy explains the small amount of information that does reach us, why we have it, who else sees it, and how you can have it changed or deleted.
1. Who we are
XIRO is made and sold by Hassan Raza (XIRO), Pakistan. We're responsible for the personal information described here, and you can reach us at support@heyxiro.com.
2. What stays inside the app
XIRO runs on your computer. Your conversations and voice, what's on your screen or camera, your files, memory, reminders, contacts, vault, office work, order-desk conversations and settings are stored on your computer. They are not sent to us.
To think and talk, XIRO sends your requests to the AI provider you chose, such as Google Gemini, using your own key and account, under that provider's privacy terms. With a local model, typed requests don't leave your computer at all. Services you connect yourself, such as WhatsApp Business, Telegram or your Google account, receive what you send them under their own terms.
3. What reaches us
| When | What |
|---|---|
| You buy XIRO | Your name, email address, order number, amount, currency and date. For card purchases, Lemon Squeezy passes these to us; we never see card details. For bank or wallet payments: also the payment reference you give us. |
| You activate XIRO | Your licence key, a one-way code made from your device (it can't be turned back into anything about you), your computer's name as set in Windows, and the times of activation and of each licence check. |
| You sign in with Google | From Google: your email address, name, profile picture and Google account ID. From the app: a public key made on your computer (the private half never leaves it), the computer’s name, and the times of sign-in and each licence check. We never see your Google password. |
| You ask for support | Your name, email, topic, licence key if you give it, and your messages, plus our replies and internal notes about your request. |
| You visit this website | No analytics, no tracking and no cookies (see the cookie policy). Our hosting provider may keep standard server logs, such as IP address, browser and time, for security. |
| You buy from a campaign link | The campaign tags in that link, such as which post or partner it came from, are saved with your order. They say where the sale came from, not who you are elsewhere. |
| You use the support form | Your IP address, held briefly in memory only to stop the form being flooded. It isn't stored. |
4. Why we use it
- To deliver what you bought: issuing and emailing your key, activating your devices, offering updates. This is needed to perform our contract with you.
- To protect licences: spotting keys that are shared or resold. This is our legitimate interest in selling a fair product.
- To help you: answering support requests and keeping the conversation so we have the history when you write again.
- To meet the law: keeping sales records for tax and accounting.
We don't use your information for advertising, and we don't sell it or rent it to anyone.
6. How long we keep it
- Orders and licences: for as long as your licence exists, and afterwards for as long as tax and accounting law requires.
- Devices: until you sign the device out, or the licence ends.
- Support conversations: while your licence is active, so we can see the history. Ask us and we'll delete them.
7. Your rights
You can ask us to show you the information we hold about you, correct it, delete it, give it to you in a portable form, or stop using it for a particular purpose. Write to support@heyxiro.com from the address you bought with, and we'll reply within 30 days. We may need to keep sales records the law requires, and deleting your licence record means the licence can no longer be activated. You can also complain to the data-protection authority where you live.
8. Security
The licence server uses encrypted connections. Licences are cryptographically signed so they can't be forged. The admin console is password-protected, with sign-in limits and protection against forged requests. No system is perfectly secure, but we take reasonable care and would tell you about a breach that affects you.
9. Where it's stored
Our licence server and email may be hosted outside your country, and Lemon Squeezy processes payments internationally. Wherever your information goes, we protect it as this policy describes.
10. Children
XIRO is sold to adults. Children shouldn't buy it or send us their information. Parental control is a feature for parents that runs on the family's own computer, and its rules and screenshots stay there.
11. Changes to this policy
If we change what we collect or how we use it, we'll update this page and its effective date, and for important changes we'll tell licence holders by email.
12. Contact
Hassan Raza (XIRO), Pakistan, support@heyxiro.com, or the support form.