Privacy Policy
Last updated: October 23, 2026
Xindar is operated by Wenwu Jiang, an individual based in Suzhou, China.
This Privacy Policy explains what personal data Xindar (“we”, “us”) collects when you use our website and service, how we use it, and the choices you have.
1. Information we collect
• Account details: your email address, name and language preference, plus a securely hashed password if you sign up with email. If you sign in with Google, we receive your name and verified email address from Google. • Company profile: company name, contact person, country or region, mobile number, a messaging account (WeChat, WhatsApp, Telegram or LINE), and optionally your website and job title. • Monitoring data: the brands, products, target markets and questions you set up, the answers AI platforms return to those questions, the sources they cite, and our analysis of them. AI answers may mention other companies or people, as published by third parties. • Billing data: your plan, subscription status, and order and customer references from our payment provider. We do not receive or store your full card details. • Enquiries: the details you send through our contact form, such as your name, company, phone number, email and requirements. • Usage and technical data: records of key account and billing actions kept for security and support, cookies needed for sign-in and language, standard server logs (which may include your IP address and browser type), and aggregated website traffic statistics.
2. How we use information
We use this information to provide and operate the Service (running your monitoring, producing dashboards, reports and alerts, and sending account and service emails such as verification codes, alerts and billing notices), to manage your subscription and support requests, to protect the Service and our customers against abuse and fraud, to improve the Service, and to meet our legal obligations. We do not sell your personal data, and we do not use it for third-party advertising.
3. Service providers we share data with
We share information only with providers that help us run the Service, and only what they need: • Creem processes payments as our merchant of record and handles tax and invoicing; it processes your payment details under its own privacy policy. • Google, only if you choose to sign in with Google. • Resend delivers our emails. • Hosting and database providers (Vercel and Neon) store and run the Service. • Our team’s internal collaboration tool notifies our staff about new orders, reports and contact-form enquiries so we can follow up; enquiry notifications include the contact details you submitted. • AI platforms and API providers: your monitoring questions, which include the brand and product information you enter, are sent through API service providers to the AI platforms we monitor (OpenAI, Anthropic, Google, Perplexity and xAI), and collected answers are passed to AI models for analysis. Your contact details are not sent to them. We may also disclose information when the law requires it, to protect our rights, or as part of a merger or acquisition, in which case this policy continues to apply.
4. International transfers
Our providers operate in the United States and other countries, so your information may be processed outside your country, where data protection laws may differ from those where you live. We rely on our providers’ contractual and security commitments to protect it.
5. How long we keep data
We keep account, company and monitoring data while your account exists. After a plan ends, your dashboards stay available read-only so you can review and export your data. We keep billing and transaction records for as long as accounting and legal requirements demand. When you ask us to delete your account, we delete or anonymize your personal data unless the law requires us to keep it.
6. Your choices and rights
You can update your company profile and language in your account settings. To get a copy of your data, including an export of your monitoring data, or to ask us to correct or delete it, contact us through the contact section of our homepage; we may need to confirm that the request comes from your account. Depending on where you live, you may also have the right to object to or restrict certain processing and to complain to your local data protection authority.
7. Cookies
We only use cookies the Service needs to work, such as keeping you signed in and remembering your language. We do not use advertising cookies. Our website traffic statistics are aggregated.
8. Security
We protect data with encrypted connections (HTTPS), hashed passwords, access controls that keep each company’s data separate, and restricted internal access. No method of transmission or storage is completely secure, but we work hard to protect your information and will notify you of a security incident affecting your data as the law requires.
9. Children
The Service is meant for businesses and is not directed at children. We do not knowingly collect information from anyone under 16.
10. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new date and notify account owners of material changes by email or in the app.
11. Contact
For privacy questions or requests, reach us through the contact section of our homepage.