Privacy Policy

1. Introduction

Exiqus ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered developer assessment platform and related services.

By using Exiqus, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described here, please do not use our services.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address (required for account identification)
• Full name
• Company name (optional)
• Password (stored as encrypted hash)
• Company size, industry, and use case (optional)
• Communication and notification preferences

2.2 Analysis Data

When you use our analysis services, we collect and process:

• Repository URLs and names you submit for analysis
• Analysis results including technical insights, code patterns, and assessments
• Processing metadata (analysis time, token usage, API costs)
• Your consent preferences for data usage

2.3 Usage and Technical Information

We automatically collect technical information including:

• IP addresses and geographic location
• Browser type and version, operating system
• API usage patterns and performance metrics
• Platform usage activities and timestamps
• Error logs and debugging information

2.4 Payment and Billing Information

For paid subscriptions, we collect:

• Billing address and payment method details (processed by Stripe)
• Subscription history and usage overage records
• Invoice and payment transaction records

2.5 Communications

When you contact us, we collect:

• Contact form messages including name, email, subject, and message content
• Support ticket correspondence and resolution history
• Priority support tracking and SLA monitoring data

3. How We Use Your Information

We use collected information for the following purposes:

3.1 Service Provision

• Providing AI-powered developer assessments and analysis
• Processing repository analysis requests and generating insights
• Managing user accounts and subscription services
• Facilitating API access and quota management

3.2 Platform Improvement

• Analyzing usage patterns to improve service performance
• Developing and enhancing AI analysis algorithms
• Monitoring system health and preventing technical issues
• Training machine learning models (only with explicit consent)

3.3 Customer Support

• Responding to customer inquiries and support requests
• Providing priority support based on subscription tier
• Troubleshooting technical issues and service problems

3.4 Business Operations

• Processing payments and managing billing
• Preventing fraud and ensuring security
• Complying with legal obligations and regulations
• Maintaining audit trails for administrative actions

4. Data Retention

We retain different types of data for varying periods based on business needs and legal requirements:

4.1 Analysis Data

Analysis results are retained indefinitely as they represent the core value of our service. However, you can request deletion of your analysis data at any time through your account settings or by contacting support.

4.2 Account Data

Account information is retained for the duration of your account plus 30 days after account deletion for administrative purposes.

4.3 Usage and Technical Data

Technical logs and usage data are typically retained for 90 days for performance monitoring and debugging purposes.

4.4 Billing Data

Payment processing and billing records are managed by our payment processor, Stripe. Stripe retains this data according to their data retention policies and compliance requirements. We maintain only transaction references and subscription status in our systems.

5. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

5.1 Service Providers

We share information with trusted third parties who assist in operating our platform:

• Stripe for payment processing and subscription management
• Cloud infrastructure providers for hosting and data storage
• Email service providers for transactional communications
• AI service providers for analysis processing

5.2 Legal Requirements

We may disclose information when required by law, court order, or government regulation, or to protect our rights, property, or safety.

5.3 Business Transfers

In the event of a merger, acquisition, or asset sale, user information may be transferred as part of the business assets.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit and at rest
• Secure password hashing using industry-standard algorithms
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• API key management with proper scope and expiration
• Audit logging of administrative actions

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access and Portability

• Request a copy of your personal data
• Export your analysis results and account data
• Receive data in a portable, machine-readable format

7.2 Correction and Updates

• Update your account information through your profile settings
• Request correction of inaccurate or incomplete data
• Modify your communication and privacy preferences

7.3 Deletion

• Delete individual analysis results
• Request deletion of your entire account and associated data
• Withdraw consent for data processing (where applicable)

7.4 Processing Restrictions

• Opt out of training data usage
• Restrict processing for specific purposes
• Object to automated decision-making

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

8.1 Essential Cookies

Required for the website to function properly, including authentication, security, and basic functionality.

8.2 Analytics Cookies

Help us understand how users interact with our platform to improve performance and user experience.

8.3 Preference Cookies

Remember your settings and preferences for future visits.

You can manage your cookie preferences through our cookie consent banner or your browser settings. For more details, see our Terms of Service.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws through:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions where applicable
• Other appropriate safeguards as required by law

10. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date
• Sending email notifications for significant changes
• Displaying prominent notices within the platform

Your continued use of our services after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

For GDPR-related requests, please allow up to 30 days for processing. For urgent privacy concerns, please mark your communication as "URGENT PRIVACY REQUEST."