Privacy Policy

1. Introduction

This Privacy Policy explains how MetaXAI Inc. ("MetaXAI", "we", "us", or "our") collects, uses, shares, and protects information about you. MetaXAI Inc. is a company registered in the United States with its principal place of business at:

This policy applies to the website metaxai.org, the MetaXAI platform and applications, our API, and any other services that link to this policy (together, the "Service"). It covers everyone who interacts with the Service — visitors browsing the site, people on the Free plan, and paying subscribers alike.

We have tried to write this policy in plain English. If anything is unclear, or you want more detail than we give here, email us at [email protected] and a person will answer. By using the Service, you acknowledge the practices described in this policy. Your use of the Service is also governed by our Terms of Service.

2. Information We Collect

We collect information in three ways: information you give us directly, information generated when you use the Service, and information collected automatically by cookies and similar technologies. Here is what that means in practice.

2.1 Account information

When you create a MetaXAI account, we collect your name, email address, and password (stored only in hashed form — we cannot read it). If you join or create a team workspace, we also record your role in that workspace and the workspace name. If you contact support, we keep the messages you send us so we can help you and improve our answers over time.

2.2 Content you upload and prompts you write

The Service works on the material you give it. That includes images, video, audio, and documents you upload; the text prompts you type; the settings you choose (style, resolution, aspect ratio, and similar); and the outputs the Service generates for you. We store this content so that your projects are there when you come back, so you can revisit and re-edit past generations, and so custom models you train remain available to you. Section 4 below explains — and limits — how this content may be used for AI training.

2.3 Usage and device data

When you use the Service, we automatically record technical information such as your IP address, browser type and version, operating system, device type, screen size, language preference, referring page, the pages and features you use, the credits you consume, timestamps, and error logs. We use this data to keep the Service running, measure what is working, spot abuse, and debug problems.

2.4 Cookies and similar technologies

We use cookies and comparable technologies (such as local storage) to keep you signed in, remember your preferences, and understand how the Service is used. Section 6 describes our cookie practices in more detail and the choices you have.

2.5 Payment information

When you buy a subscription or a credit pack, your payment is handled by third-party payment processors. We never receive or store your full card number, and we do not store card security codes. Our processors send us only what we need to run your account: confirmation that a payment succeeded or failed, the plan or pack purchased, the last four digits of the card, the card brand, and the billing country. Our payment processors handle your card details under their own privacy policies and are certified to industry security standards for card handling.

3. How We Use Information

We use the information described above for the following purposes:

• Providing the Service. Creating and maintaining your account, generating the images, video, and other outputs you request, storing your projects, syncing your work across devices, and processing payments and credits.
• Improving the Service. Analyzing aggregate usage patterns to understand which tools people rely on, where they get stuck, and what to build next. Wherever practical, we do this with aggregated or de-identified data.
• Safety and abuse prevention. Detecting and blocking prompts and uploads that violate our Terms of Service, protecting the platform from fraud, spam, and automated abuse, and enforcing rate limits.
• Support. Answering your questions, troubleshooting problems with your account or generations, and following up to confirm an issue is resolved.
• Transactional email. Sending receipts, renewal reminders, security alerts, password resets, and notices about changes to the Service or our policies. These messages are part of running your account and are not marketing.
• Marketing email — only with your consent. We send newsletters, product announcements, and offers only if you have opted in, and every marketing email includes a one-click unsubscribe link. Opting out of marketing never affects transactional messages or your use of the Service.

We do not use your information for purposes materially different from those listed here without telling you first.

4. Your Content and AI Training

This section matters most to many of our users, so we will be direct: we do not use your uploads, your prompts, or your generated outputs to train shared AI models unless you explicitly opt in. "Shared models" means the models that serve all MetaXAI users. Your content stays your content.

Three clarifications, so there is no fine print to hunt for:

• Custom Model Training is yours alone. When you use Custom Model Training, the resulting model is private to your account or workspace. The assets you train it on are used only to build that private model — they are never folded into shared models.
• Opt-in is genuinely optional. If we ever ask you to contribute content to model improvement, it will be a clear, separate choice — never a pre-ticked box, never a condition of using any feature, and revocable at any time from your account settings.
• Processing is not training. Our systems necessarily process your content to generate your requested outputs, run safety checks, and store your projects. That routine processing is not model training, and nothing in it adds your content to shared models.

5. How We Share Information

We never sell your personal data, and we never share it with third parties for their own advertising. We share information only in the limited situations below:

• Service providers. We work with vendors who help us run the Service — cloud hosting and GPU infrastructure, payment processing, email delivery, analytics, and customer-support tooling. Each provider receives only the data it needs to do its job, is bound by contract to protect it, and may not use it for anything else.
• Legal requirements. We may disclose information if we believe in good faith that the law requires it — for example, in response to a valid subpoena, court order, or other lawful request — or where disclosure is necessary to protect the rights, safety, or property of MetaXAI, our users, or the public. Where we are legally allowed to, we will tell you before disclosing your data.
• Business transfers. If MetaXAI Inc. is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. Any successor will be bound by this policy or one at least as protective, and we will notify you of any change in ownership that affects your data.
• Your team workspace. If you belong to a team workspace, workspace administrators and members can see the projects and assets shared into that workspace, along with your name and email as a member. This is how team collaboration is designed to work, not a disclosure to outsiders.

6. Cookies and Analytics

Cookies are small text files stored in your browser. We use them for three purposes:

• Essential cookies keep you signed in, remember your session, and protect against cross-site request forgery. The Service cannot function without them, so they cannot be switched off.
• Preference cookies remember choices like your billing-period toggle, interface settings, and dismissed notices, so you don't have to set them again on every visit.
• Analytics cookies help us understand, in aggregate, how people move through the site and the platform — which pages are visited, which features are used, and where errors occur. We use this to prioritize improvements, not to build advertising profiles.

You can control cookies through your browser settings, including blocking or deleting them. If you block essential cookies, parts of the Service — such as staying signed in — will stop working. We do not respond to browser "Do Not Track" signals because there is no accepted standard for them, but the analytics practices described here apply to all visitors regardless.

7. Data Retention

We keep personal data only as long as we need it for the purposes described in this policy. In practice:

• Account data and your content are kept for as long as your account is active. If you delete your account, we delete or de-identify your personal data and stored content within 30 days, except as noted below.
• Billing records are retained for as long as tax, accounting, and financial-reporting laws require — typically seven years.
• Security and abuse logs may be retained longer where needed to investigate or prevent fraud and abuse, or to comply with a legal obligation.
• Backups are purged on a rolling schedule; deleted data may persist in encrypted backups for a limited period before being overwritten.

When data no longer needs to be kept in identifiable form, we delete it or irreversibly de-identify it.

8. Security

We take the security of your data seriously and protect it with enterprise-grade technical and organizational measures, including encryption of data in transit (TLS) and at rest, network isolation for production systems, role-based access controls so that staff can access personal data only when their job requires it, logging and monitoring of production access, and regular security reviews of our infrastructure and code.

No system is perfectly secure, and we cannot guarantee absolute security. What we can promise is this: if a breach occurs that affects your personal data, we will notify you and the relevant authorities without undue delay, as applicable law requires, and tell you plainly what happened and what we are doing about it. You can help protect your account by using a strong, unique password and keeping your login credentials private.

9. Your Rights

You have choices and rights over your personal data. Depending on where you live, some of these are guaranteed by law (such as the GDPR in Europe or state privacy laws in the US); we extend the core set to all users regardless of location:

• Access. Ask us what personal data we hold about you and receive a copy.
• Correction. Ask us to fix inaccurate or incomplete data. You can update most account details yourself in account settings.
• Deletion. Ask us to delete your account and personal data. We will honor the request subject to the retention obligations described in Section 7.
• Export. Ask for a machine-readable copy of the content and data you have provided, so you can take it elsewhere.
• Marketing opt-out. Withdraw consent to marketing email at any time via the unsubscribe link in any message or in account settings.
• Objection and restriction. Where applicable law provides it, object to or ask us to restrict certain processing of your data.

To exercise any of these rights, email [email protected] from the address linked to your account, or contact us using the details in Section 13. We respond to verified requests within 30 days. We will never discriminate against you — by degrading the Service or charging more — for exercising a privacy right. If you are unsatisfied with our response, you may also lodge a complaint with your local data-protection authority.

10. International Data Transfers

MetaXAI Inc. is based in the United States, and our servers and service providers are located primarily in the US. If you use the Service from outside the US, your information will be transferred to, stored, and processed in the United States and possibly other countries where our providers operate. Data-protection laws in these countries may differ from those where you live.

Where we transfer personal data from regions that restrict international transfers — such as the European Economic Area, the United Kingdom, or Switzerland — we rely on recognized safeguards, including standard contractual clauses approved by the relevant authorities, and we require the same of our service providers. Regardless of where your data is processed, it receives the protections described in this policy.

11. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal data from anyone under 13. If you are under 13, please do not create an account or submit any information to us. If you are a parent or guardian and believe a child under 13 has provided us with personal data, contact us at [email protected] and we will delete the account and associated data promptly. Users between 13 and 18 may use the Service only with the consent and supervision of a parent or guardian who agrees to our Terms of Service.

12. Changes to This Policy

We may update this Privacy Policy from time to time as the Service, technology, or the law changes. When we do, we will revise the "Last updated" date at the top of this page. If a change materially reduces your rights or expands how we use your personal data, we will give you advance notice — by email to your account address, a prominent notice in the Service, or both — before the change takes effect. Your continued use of the Service after a change takes effect means you accept the updated policy; if you do not agree, you can close your account and request deletion of your data as described in Section 9.

13. Contact Us

Questions, concerns, or requests about this Privacy Policy or your personal data? We're easy to reach, and a real person will get back to you:

• Email: [email protected]
• Phone: +1 (307) 855-1998