Effective September 21, 2026

Privacy Policy

This Privacy Policy explains how Xylehnix collects, uses, shares, and protects information when you use our website, software, AI-assisted tools, audits, implementation services, and support.

Information collected How we use it Sharing AI services Cookies Retention Your rights Security

1. Information we collect

Depending on how you use Xylehnix, we may collect:

Account information: name, email address, login credentials, account role, and subscription status.
Business and contact information: company name, website, industry, goals, workflow details, lead information, email address, mobile phone number, SMS opt-in status, consent timestamps, and other information you choose to provide.
Purchase and billing information: plan, checkout status, customer identifiers, transaction status, and billing metadata. Payment card details are processed by Stripe and are not stored by Xylehnix as complete card numbers.
Service content: prompts, workflow inputs, AI-assisted drafts, approval decisions, support requests, and configuration data.
Communications and email events: delivery, bounce, complaint, suppression, open, click, and unsubscribe events where available and applicable.
Connected-account information: when you connect email, calendar, CRM, calling, or messaging services, Xylehnix may process account identifiers, approved OAuth scopes, encrypted access credentials or tokens, recent messages or message metadata, calendar events, CRM contacts and deals, and call or SMS activity needed to operate the features you enable.
Technical information: IP-related request data, browser or device information, timestamps, session information, security logs, and information needed to operate and protect the service.

2. How we use information

We use information to provide, personalize, secure, maintain, and improve Xylehnix; process purchases; create requested AI-assisted outputs; operate automations; deliver account and service communications; provide support; prevent abuse and fraud; troubleshoot problems; maintain records; and comply with legal obligations.

We may also use business contact information to communicate about Xylehnix where permitted by law. Marketing messages are handled separately from essential account or transactional messages and include applicable opt-out options.

You can disconnect supported integrations from your workspace. Disconnecting prevents future access through the stored connection, although information already incorporated into Xylehnix records, logs, or AI activity may remain for the retention periods described below.

We do not sell personal information for money. We may disclose the minimum information reasonably necessary to service providers that help us operate Xylehnix, such as hosting and database providers, payment processors, email delivery providers, AI service providers, analytics or security providers, and other integrations you choose to connect.

SMS privacy: We do not share, sell, rent, or provide mobile phone numbers, SMS opt-in data, or messaging consent to third parties or affiliates for marketing or promotional purposes. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. SMS information may be processed by service providers only as needed to deliver, secure, and support the messaging service you requested, subject to appropriate contractual and legal obligations.

We may also disclose information when reasonably necessary to comply with law, enforce agreements, protect users or the service, investigate fraud or abuse, or complete a merger, financing, acquisition, reorganization, or sale of all or part of the business. A successor would remain subject to applicable privacy obligations.

4. AI-assisted processing

When you use Botley or AI Helpers, information you submit may be sent to an AI service provider to generate the requested response or draft. Do not submit information you are not authorized to process. AI systems can produce inaccurate content, and use of AI outputs remains subject to the Xylehnix Terms of Service.

5. Cookies and session technologies

Xylehnix uses session and similar technologies necessary to keep users signed in, secure accounts, remember service state, and operate the website. We may use limited measurement or diagnostic technologies as the service evolves. If we introduce non-essential tracking that requires additional notice or consent, we will update this policy and provide controls as required.

6. SMS and email communications

If you separately opt in to SMS, Xylehnix may send recurring text messages about your inquiry, appointment reminders and confirmations, service updates, and support. Message frequency varies. Message and data rates may apply. Reply STOP to opt out of further SMS messages or HELP for help. SMS consent is voluntary and is not a condition of purchasing Xylehnix services.

Transactional email may include account setup, security, billing, service, and support communications. Marketing email is handled separately and may include an unsubscribe mechanism. We maintain suppression information for unsubscribes, hard bounces, and complaints so we can reduce unwanted or undeliverable email.

7. Retention

We retain information for as long as reasonably necessary to provide the service, maintain security, comply with legal and accounting obligations, resolve disputes, enforce agreements, and maintain appropriate business records. Different categories may be retained for different periods. We may retain limited suppression, fraud-prevention, transaction, or legal records even after an account is closed where reasonably necessary or required by law.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted transport, access controls, signed webhook verification, secret management, rate limiting, authentication controls, and encryption of stored third-party integration credentials. No internet service or storage system can guarantee absolute security.

9. Your privacy choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or other control over certain personal information. You may also have the right to appeal a privacy request decision or opt out of certain processing where applicable.

To make a privacy request, email xylehnixsupport@gmail.com. We may need to verify your identity before completing a request. We will respond as required by applicable law.

10. Children

Xylehnix is designed for business users and is not intended for children under 13. We do not knowingly collect personal information from children under 13 through the service.

11. International processing

Xylehnix and its service providers may process information in the United States and other locations where providers operate. Where required, appropriate safeguards will be used for cross-border transfers.

12. Third-party services and links

Third-party services connected to Xylehnix have their own terms and privacy practices. This Privacy Policy does not control how an independent third party uses information after you direct us to share it with that service or interact with that third party directly.

13. Changes to this policy

We may update this Privacy Policy as Xylehnix, our vendors, or legal requirements change. We will post the updated version with a new effective date and provide additional notice where required.

14. Contact

For privacy questions or requests, contact xylehnixsupport@gmail.com.

Mailing address: Xylehnix, P.O. Box 2010, Olive Branch, MS 38654.