1. Who we are

XERION is offered by VELMONT, based in the Netherlands. For questions about this privacy policy or your data: velmontsoftwares@gmail.com.

2. What data we process

Account data: email address, password (stored encrypted via our authentication provider), subscription status.

Usage data: chat messages and conversation history, calendar items (XERION Calendar), tasks/reminders, files you upload, and per-feature usage statistics (for applying subscription limits).

Device linking: a pairing code and device identification data when you link the desktop app (the .exe) to your account.

Voice/audio: when you use the desktop app's voice feature, audio is processed in real time by our AI provider to understand and respond to your request; audio is not permanently stored by us after the conversation is processed.

Email access (optional, only if you explicitly enable MailMind): limited, self-authorised access to your Gmail account via Google's own authorisation system, used exclusively to provide the MailMind feature.

Payment data: processed by our payment processor; we never store full card details ourselves.

3. How specific features process your data

Screen understanding (XERION for Windows). When you turn on live screen understanding in the desktop app, XERION captures images of your screen (usually the window you are working in) about once per second while a voice session is active, and sends them to Google's Gemini service so XERION can see what you are working on. Frames are not stored by VELMONT. You can turn this off at any time in the app's settings, nothing is captured while your computer is locked, and windows of common password managers are never captured.

Voice conversations. Voice conversations with the desktop app are processed by Google's Gemini service. Text transcripts of those conversations may be saved to your XERION conversation history so you can see them in the web app and so XERION can remember the context.

Email (MailMind). If you connect Gmail, XERION accesses your email only to perform the actions you ask for, such as reading, summarising or drafting messages. Emails are only sent after you confirm them. You can disconnect Gmail at any time.

AI processing. Your messages, and any files or screen images you share, are processed by Google's Gemini service to generate responses. Depending on the service tier used, Google may use this data to improve its products. Do not share information you do not want processed this way.

Desktop control. If you pair XERION for Windows with your account, actions you request in the web app can be carried out on that computer. Sensitive actions always ask for your confirmation on the computer itself.

4. Why we process this data

To provide the service and manage your account; to correctly apply subscription limits and billing; to improve the service and diagnose issues; to comply with legal obligations.

5. Who we share data with (processors)

Supabase (database, authentication, file storage). Google (Gemini API for AI processing of chat/voice; Google OAuth/Gmail API only if you enable MailMind). No payment processor yet — paid billing is not active, so no payment data is currently shared with anyone; this section will name the real processor once billing goes live. We never sell your data to third parties.

6. Retention period

We keep your data for as long as you have an account. After you delete your account, your data is deleted or anonymised within a reasonable period, except where we are legally required to retain data longer (e.g. billing records).

7. Your rights (GDPR)

You have the right to access, correct, delete, restrict processing of, port, and object to the processing of your data. Contact us at velmontsoftwares@gmail.com for this. You also have the right to lodge a complaint with your national data protection authority.

8. Security

We take appropriate technical and organisational measures to protect your data, including database-level access control (row-level security) and encrypted connections.

9. Children

XERION is not intended for people under the age of 16.

10. Changes

We may update this privacy policy. We will communicate material changes via the web app or by email.