1. Who we are
EXO is a digital self-reflection service operated by EXO operator (“EXO”, “we”, “us”). It uses AI voice and language interfaces to support personal reflection, emotional check-ins, and continuity between sessions. This Privacy Notice explains how we collect, use, disclose, store, and delete personal data when you use https://exo.contact and related EXO services.
2. Important warning
EXO is not a medical provider, mental health clinic, crisis center, or emergency service. Do not submit information through EXO if you require urgent help, emergency intervention, or medical treatment.
3. Categories of data we process
- Account data: email address, display name, sign-in metadata, session identifiers.
- Usage data: timestamps, device and browser information, service events, diagnostics, balance and purchase events.
- Conversation data: voice interactions, transcripts, summaries, memory notes, and special instructions, depending on the privacy mode you choose.
- Support and legal data: communications, complaints, fraud-prevention logs, and records needed to enforce our terms or comply with law.
4. Why we process data
- To provide the EXO digital self-reflection service, including account access, conversations, memory settings, and balance management.
- To maintain continuity between sessions when you choose a memory mode that stores information.
- To secure the service, investigate abuse, detect fraud, respond to incidents, and maintain logs.
- To improve reliability, quality, and performance of the service.
- To comply with legal obligations and defend legal claims.
5. Legal bases
Where applicable, we rely on one or more of the following legal bases: performance of a contract with you, your consent, our legitimate interests in operating and securing EXO, and compliance with legal obligations. If you choose a memory mode that stores information, we treat that choice as an affirmative instruction to process and retain the corresponding conversation context under this Notice and the Terms of Service.
6. Third-party processing and international transfers
EXO uses third-party infrastructure and service providers, including voice and AI providers, hosting providers, payment providers, authentication providers, and operational tools. This means your data may be transmitted to or processed by third parties such as ElevenLabs and other subprocessors acting on our behalf or as independent service providers.
Some providers may process data outside your country, including outside Ukraine, the EEA, the UK, or the United States. We aim to use providers offering contractual and organizational safeguards for cross-border transfers.
7. Retention
Retention depends on your selected privacy mode and our operational needs.
- No memory: we aim not to retain conversation memory after the session, except limited logs, security records, and temporary processing artifacts where required for operation or incident response.
- Light memory: we may retain summaries, themes, next-step notes, and profile-level continuity markers.
- Deeper memory: we may retain transcripts, summaries, contextual notes, and continuity profiles.
We may also retain limited records for fraud prevention, billing, abuse investigation, legal compliance, backups, and dispute resolution where reasonably necessary.
8. Security
We use technical and organizational measures intended to reduce unauthorized access, loss, misuse, and disclosure. However, no system is completely secure. We cannot guarantee absolute security, uninterrupted availability, or immunity from hacking, breach, interception, malware, insider misuse, or failures of third-party providers.
9. Your choices and rights
- You can choose a memory mode and change it later.
- You can use the “Forget me” action to request deletion of your account and associated EXO server-side data currently linked to it.
- Subject to applicable law, you may have rights of access, correction, deletion, portability, restriction, objection, and withdrawal of consent.
10. Minors
EXO is not intended for children. Do not use the service if you are under the minimum age required by applicable law to enter into these terms or consent to data processing.
11. Contact
For privacy or legal requests, contact: privacy@exo.contact