Privacy policy

This Privacy Policy explains how Xtage Technologies Private Limited ("Company," “Xtage”, “Toqi”, "we," "our," or "us") collects, uses, and protects your personal data when you use Toqi – the AI sales assistance services ("Service").

By using the Service, you agree to the terms of this Privacy Policy.

1. Information We Collect

We collect the following types of information:

• Account InformationName, email address, billing address, and payment information.
• Chat Data: Conversations between shoppers and Toqi, including product inquiries and browsing behaviour.
• Usage Data: Information about how you interact with our Service (e.g., access times, pages viewed, browser type).
• Device Information:IP address, device identifiers, operating system.

We do not knowingly collect sensitive personal data such as health information, financial account numbers, or government-issued identifiers.

2. How We Use Your Information

We use your information to:

• Provide, operate and improve our Service
• Personalize shopper experiences
• Monitor and analyze Service usage
• Train and finetune our AI models internally
• Respond to customer support requests
• Send administrative notifications (e.g., billing notices, updates)

3. AI Model Training

We store and use chat history for internal AI training and model improvement purposes under strict privacy and security protocols.

We do not sell, disclose, or share individual chat data externally.

Training is conducted solely to enhance service performance for our customers.

4. Sharing of Information

We may share your information with:

• Third-Party LLM Providers: Such as OpenAI, Anthropic, and others to generate Toqi responses. These providers process inputs and outputs but are contractually restricted from using your data for their own model training (where technically feasible).
• Payment Processors: For billing and subscription management.
• Service Providers: Companies that assist with hosting, analytics, customer support, etc.

We require all third parties to safeguard personal information and comply with applicable laws.

5. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), we rely on the following legal bases to process your information:

• Performance of a contract (to provide the Service)
• Legitimate interests (to improve and secure our Service)
• Your consent (for certain optional data uses)
• Compliance with legal obligations

6. Your Rights Under GDPR

If you are located in the EEA, you have the right to:

• Access your personal data
• Correct or update inaccurate data
• Request deletion ("right to be forgotten")
• Object to or restrict data processing
• Request data portability
• Lodge a complaint with a supervisory authority

You can exercise your rights by contacting us at hello@toqi.ai .

7. Your Rights Under CCPA

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it
• Request deletion of your personal information
• Opt out of the "sale" of your personal information (we do not sell data)
• Non-discriminatory treatment for exercising your privacy rights

To exercise these rights, please contact us at hello@toqi.ai .

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Data encryption in transit and at rest
• Access controls and authentication
• Regular audits and security assessments

Despite our efforts, no security measures are 100% infallible, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal information:

• For as long as your account is active
• As needed to provide the Service
• As required to comply with legal obligations or resolve disputes

We periodically delete or anonymize old interaction data used for model training.

10. International Data Transfers

If you are located outside the United States, your information may be transferred to, processed, and stored in or outside of the United States. We ensure appropriate safeguards are in place for cross-border data transfers under GDPR.

11. Children's Privacy

Our Service is not intended for individuals under the age of 18.

We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If material changes are made, we will notify you via email or through the Service.

Continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, please contact us:

Xtage Technologies Private Limited
hello@toqi.ai