Privacy Policy

1. Introduction

Welcome to XSurge.ai ("XSurge," "we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered customer relationship management platform and related services (collectively, the "Services").

XSurge.ai is a product and registered brand of Grey Matterz Inc. ("Grey Matterz," "we," "our," or "us").

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use our Services.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide to us when you:

• Register for an account
• Use our Services
• Contact our customer support
• Participate in surveys or promotions
• Subscribe to our newsletters or marketing communications

This information may include:

• Name and contact information (email address, phone number, postal address)
• Company name and business information
• Account credentials (username and password)
• Payment information (processed securely by our payment processors)
• Customer data that you upload or input into our Services
• Communications and correspondence with us

2.2 Information Automatically Collected

When you access our Services, we automatically collect certain information, including:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Log data (access times, error logs)
• Cookies and similar tracking technologies
• Location data (with your consent)

3. How We Use Your Information

We use the information we collect for various purposes, including to:

• Provide, maintain, and improve our Services
• Process transactions and send transaction notifications
• Send administrative information, updates, and security alerts
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and security threats
• Personalize your experience and deliver targeted content
• Send marketing communications (with your consent)
• Comply with legal obligations and enforce our terms
• Provide, maintain, and improve our Services and automation features

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

• Cloud hosting and infrastructure providers
• Payment processors
• Email and communication services
• Analytics providers
• Customer support tools

4.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.4 With Your Consent

We may share your information for any other purpose with your consent.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

The retention period depends on various factors, including:

• The nature of the information
• The purposes for which it was collected
• Legal and regulatory requirements
• Your ongoing relationship with us

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: You can request access to the personal information we hold about you
• Correction: You can request that we correct inaccurate or incomplete information
• Deletion: You can request that we delete your personal information
• Portability: You can request a copy of your information in a portable format
• Objection: You can object to certain processing of your information
• Restriction: You can request that we restrict processing of your information
• Withdrawal of Consent: You can withdraw consent where we rely on consent for processing

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within the timeframe required by applicable law.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Services and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services.

Types of cookies we use:

• Essential Cookies: Required for the operation of our Services
• Functional Cookies: Enable personalized features and preferences
• Analytics Cookies: Help us understand how visitors use our Services
• Marketing Cookies: Used to deliver relevant advertisements

9. AI and Machine Learning Data Processing

XSurge.ai uses artificial intelligence and machine learning technologies to power various features of our Services. Here's how AI impacts your data:

• AI-Powered Features: Our AI agents, chatbots, and automation tools process your data to provide intelligent responses and recommendations
• No Model Training: We do not use any user data — including data obtained via Google APIs — to train AI or machine learning models under any circumstances.
• Data Retention for AI: Data used for AI processing is retained only as long as necessary to provide the service
• Human Review: In limited cases, our team may review AI-generated content for quality assurance purposes
• Third-Party AI Services:We may use third-party AI service providers (such as OpenAI, Google AI,llama-3.1-8b-instant,gemma2-9b-it ) who process data in accordance with their privacy policies

You maintain full ownership of your data. AI processing does not transfer ownership rights to us or third-party AI providers.

10. Google User Data and Google API Services

XSurge.ai's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

10.1 What Google Data We Access

When you choose to connect your Google account to XSurge.ai, we may request access to the following Google data:

• Google Profile Information: Your name, email address, and profile picture, used solely to create and authenticate your XSurge.ai account and to personalize your in-app experience.
• Google Calendar Data: Your calendar events and availability, used solely to enable calendar integration features within XSurge.ai — including viewing your calendar, syncing meetings, creating new meetings from the portal, and editing or deleting meetings you manage through the platform.

10.2 How We Use Google User Data

Google user data obtained via Google APIs is used exclusively to provide the features described above directly to you. Specifically, we:

• Use Google profile data only to authenticate your identity and display your name/avatar within the application.
• Use Google Calendar data only to display, create, sync, edit, and delete calendar events as initiated by you within XSurge.ai.
• Do not use Google user data for advertising, retargeting, or marketing purposes.
• Do not use any user data to train artificial intelligence or machine learning models.
• Do not sell or transfer Google user data to third parties, except to our sub-processors who assist in delivering the above features under strict confidentiality obligations.
• Do not share Google user data with data brokers, aggregators, or any party for purposes unrelated to providing our Services to you.
• Do not use Google user data for any purpose that is not directly necessary to provide or improve the in-app features you explicitly requested.

10.3 Revoking Google Access

You may revoke XSurge.ai's access to your Google Calendar data at any time by deleting the connected calendar from within your XSurge.ai account settings. To fully remove all Google data and access, you may delete your XSurge.ai account entirely.

Upon disconnection or account deletion, we will cease accessing your Google data and any Google data previously stored to enable the service features will be permanently deleted.

11. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

12. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

15. GDPR Compliance (For EU Users)

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). We process your personal data based on the following legal grounds:

• Contract: Processing necessary to perform our contract with you
• Legitimate Interests: Processing necessary for our legitimate business interests
• Consent: Processing based on your explicit consent
• Legal Obligation: Processing necessary to comply with legal obligations

You have the right to lodge a complaint with a supervisory authority if you believe we have violated your data protection rights.

16. CCPA Compliance (For California Users)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to request deletion of personal information
• Right to non-discrimination for exercising your CCPA rights

We do not sell your personal information to third parties.

17. SMS/Text Messaging

We collect your phone number to provide SMS-based communication services, including account notifications and conversational messages through our platform. By providing your phone number and opting in, you consent to receive SMS messages from Grey Matterz Inc. Message and data rates may apply, and message frequency may vary. We do not sell or share your phone number with third parties for marketing purposes. You may opt out of SMS communications at any time by replying STOP to any message; for help, reply HELP.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

19. Acceptance of This Policy

By using our Services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree with this Privacy Policy, please discontinue use of our Services immediately.