Privacy Policy

1. Information we collect

We collect information in the following ways:

• Alpha access requests. When you apply for founding access, we collect your name, email address, phone number, country, persona (e.g. student, engineer, founder), university or company details, the kinds of software you build, the AI tools you currently use, your weekly usage estimate, pain points, motivation, and referral information you choose to share.
• Account and login information. If you are selected for the alpha and receive access, we collect the email address and access credentials associated with your account.
• Product usage data. Once OxCode is installed, we collect usage telemetry such as feature usage, session length, error and crash reports, and performance metrics, so we can improve the product during the alpha.
• Communications. If you contact us, or take part in our feedback loop, we keep a record of that correspondence.
• Device and log data. Standard technical data such as IP address, browser type, operating system, and referring pages when you visit this site.

2. How we use information

We use the information we collect to:

• Evaluate and manage alpha access requests, including selecting founding cohort members;
• Provide, operate, and maintain OxCode and this website;
• Communicate with you about your application, product updates, and the founding cohort program;
• Improve OxCode's reliability, performance, and features based on real usage and feedback;
• Detect, investigate, and prevent misuse, fraud, or security incidents; and
• Comply with legal obligations.

3. Code, voice, and native language input

OxCode is designed to work with your code, natural language instructions, and voice input. When you use these features:

• Code, prompts, and voice input you submit to OxCode are processed in order to generate plans, code, and explanations, and may be sent to the AI model providers we use to power the product.
• We do not use your private source code or project content to train foundation models operated by third parties. Any use of aggregated, de-identified product interactions to improve OxCode is limited to product-quality purposes.
• Voice input is processed to transcribe and interpret your request; we do not retain raw audio longer than necessary to service the request unless you have opted into providing samples for product improvement.

4. How we share information

We do not sell your personal information. We may share information with:

• Service providers who host our infrastructure, process payments (in the future), send communications, or provide analytics on our behalf, under confidentiality obligations;
• AI model and infrastructure providersthat process prompts, code, and voice input in order to generate OxCode's responses;
• Professional advisors such as legal or accounting firms, where necessary; and
• Authorities where required by law, or to protect the rights, safety, and property of Oxlo, our users, or the public.

If Oxlo is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this Privacy Policy.

5. Data retention

We retain personal information for as long as needed to operate the alpha access program and OxCode, comply with legal obligations, resolve disputes, and enforce our agreements. Alpha applications from candidates who are not selected are retained for a limited period so we can consider future openings, after which they are deleted or anonymized.

6. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You can exercise these rights by contacting us using the details below. We will respond in accordance with applicable law.

7. Security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children's privacy

OxCode and this site are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can remove it.

9. International transfers

Oxlo is established in the Dubai International Financial Centre (DIFC) and is subject to the DIFC Data Protection Law (DIFC Law No. 5 of 2020), enforced by the DIFC Commissioner of Data Protection. Oxlo and its service providers may process information in countries other than your own. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect information transferred internationally. See our Data Processing Agreement for details relevant to our customers and partners.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly.

11. Contact us

Questions about this Privacy Policy or your data can be sent to hello@oxlo.ai. See also our Terms & Conditions.