How is Xorviex different from n8n, Make, or Zapier?

Those tools require you to manually define every node, connection, and trigger. Xorviex takes a plain objective and automatically architects the entire execution layer — agents, APIs, and sequencing — from scratch. There is nothing to build.

What is an Operation Unit (OU)?

One OU represents one atomic task executed by an autonomous agent — a scrape, a write, an API call, a validation pass. Complex missions consume many OUs in parallel. Unused OUs roll over monthly on Growth and Sovereign plans.

How does the Supervisor Layer prevent hallucinations?

Every agent output — text, data, API payload — is routed through an independent Supervisor model before it reaches any external system. The Supervisor has no access to execution context, so it audits outputs objectively. If it detects brand DNA mismatches, factual anomalies, or policy violations, it rejects the output and queues a regeneration cycle.

What happens if I never respond to an Idea Engine proposal?

If you set a timeout and don't act, Xorviex auto-applies the idea at the end of that window. Set it to Infinite and nothing is ever executed without your explicit approval. You can change the default timeout per workspace, per mission category, or per individual idea.

Does Xorviex monitor my production environment?

Yes. The Self-Healing Engine continuously watches logs, error rates, and uptime across connected services. When it detects a regression, it isolates the failing component, generates a patch, runs it through the Supervisor, and ships the fix — then reports exactly what changed.

Can I bring my own LLM or API keys?

Yes. Sovereign plan users can route agent computation through their own model providers and API credentials. The Meta-Agent orchestration layer and Supervisor remain Xorviex-managed.

Is my data used to train your models?

No. All mission data, document DNA uploads, and agent outputs are isolated per workspace and are never used for model training. Enterprise customers receive full data processing agreements.

Xorviex — Autonomous Digital Workforce Platform

Overview

Xorviex ("we", "us", or "our") operates the Xorviex platform at xorviex.ai (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Service you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Information We Collect

We collect information you provide directly and information generated as you use the Service.

Account & Registration Data

→Email address and password (hashed — we never store plaintext passwords)
→Name or display name if provided
→Billing information processed and stored by our payment processor (we do not store full card numbers)

Workspace & Mission Data

→Mission objectives, configurations, and goals you submit
→Agent-generated outputs, logs, and audit records
→Memory profiles: company info, rules, and voice settings you configure
→Files, documents, or URLs you provide to agents
→Integration credentials and OAuth tokens for connected third-party services

Usage & Technical Data

→Log data: IP address, browser type, pages visited, timestamps
→Device and browser identifiers
→Cookies and similar tracking technologies (see Cookies section)
→Operation Unit (OU) consumption and billing events

How We Use Your Information

We use the information we collect to:

→Provide, maintain, and improve the Service
→Process transactions and send billing-related notices
→Authenticate your identity and protect your account
→Run autonomous agents on your behalf according to your instructions
→Generate AI outputs, audit them through the Supervisor layer, and deliver results to you
→Send transactional emails (account confirmations, password resets, billing receipts)
→Respond to support requests and communicate about the Service
→Monitor for abuse, security threats, and policy violations
→Comply with legal obligations
→Analyze aggregate, anonymized usage patterns to improve the Service

We do not sell your personal data. We do not use your workspace data or mission content to train AI models without your explicit, separate consent.

Workspace Isolation & Data Separation

All data is scoped to a Workspace. No data from your Workspace is visible to or accessible by other users or organizations. Workspace data is logically isolated at the database level using a workspace_id tenant boundary.

Agent outputs, logs, memory profiles, and integration credentials are stored exclusively within your Workspace and are not shared across accounts.

AI Processing & Third-Party Models

The Service uses third-party AI model providers (including Anthropic) to generate agent code, run agents, and perform supervision audits. When you submit a mission, relevant context may be sent to these providers solely to fulfill your request.

We use Anthropic's API under a commercial agreement that prohibits the use of API inputs to train their foundation models. Your mission data and outputs are not used to improve third-party models.

We may use multiple AI providers depending on the task. A current list of providers is available on request at privacy@xorviex.ai.

Information Sharing

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We share information only in the following circumstances:

→Service Providers: trusted vendors (cloud hosting, payment processing, email delivery, analytics) who process data on our behalf under confidentiality obligations
→AI Providers: model API providers as described above, solely to execute your requests
→Legal Requirements: if required by law, court order, or governmental authority
→Business Transfers: in connection with a merger, acquisition, or sale of assets, in which case we will notify you before your data is transferred
→With Your Consent: for any other purpose with your explicit consent

Third-Party Integrations

When you connect a third-party service (e.g., Slack), you authorize Xorviex to interact with that service on your behalf. OAuth tokens are encrypted at rest and used only to execute the actions you direct.

Third-party platforms have their own privacy policies. We are not responsible for how they handle data once it leaves our systems through an agent action.

Cookies & Tracking

We use cookies and similar technologies to keep you logged in, remember preferences, and analyze usage. Categories:

Strictly Necessary

→Session authentication tokens (JWT stored in an httpOnly session cookie)
→CSRF protection tokens

Analytics

→Google Analytics — aggregate, anonymized page view and interaction data
→Analytics cookies can be disabled via your browser or our cookie consent banner

Consent Management

→CookieYes — manages your cookie consent preferences

You can control cookies through your browser settings. Disabling strictly necessary cookies will prevent you from using authenticated features of the Service.

Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specific retention periods:

→Account data: retained until account deletion, then purged within 30 days
→Mission and agent data: retained for the life of the account; configurable retention windows coming on Growth and Pay As You Go plans
→Billing records: retained for 7 years as required by financial regulations
→Server logs: retained for 90 days for security and debugging
→Anonymized aggregate analytics: retained indefinitely

After account deletion you may request a data export within 30 days. After that period all personal data is permanently deleted from our production systems and backups within 90 days.

Security

We implement industry-standard technical and organizational measures to protect your data, including:

→Encryption in transit via TLS 1.2+
→Encryption at rest for sensitive fields (tokens, credentials)
→Hashed passwords using bcrypt
→Role-based access controls and least-privilege principles
→Regular security reviews and dependency audits

No system is 100% secure. If you discover a security vulnerability, please report it responsibly to privacy@xorviex.ai. We investigate all reports and will notify affected users as required by applicable law.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

→Access: request a copy of the personal data we hold about you
→Correction: request correction of inaccurate or incomplete data
→Deletion: request deletion of your personal data (subject to legal retention obligations)
→Portability: receive your data in a machine-readable format
→Restriction: request that we restrict processing of your data in certain circumstances
→Objection: object to processing based on legitimate interests
→Withdraw Consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@xorviex.ai. We will respond within 30 days. We may ask you to verify your identity before processing your request.

GDPR & International Transfers

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) or equivalent laws. Our legal bases for processing your data include:

→Contractual necessity: processing required to provide the Service you have requested
→Legitimate interests: fraud prevention, security, improving the Service
→Legal obligation: compliance with applicable laws
→Consent: where we have obtained your explicit consent

Your data may be transferred to and processed in countries outside the EEA where data protection laws may differ. We use Standard Contractual Clauses and other approved transfer mechanisms to protect your data in such cases.

You have the right to lodge a complaint with your local data protection authority.

Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, contact us at privacy@xorviex.ai and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date, and by email where required by law.

Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

Contact

For privacy-related questions, data requests, or to report a concern:

Email: privacy@xorviex.ai
Website: xorviex.ai