1. Information We Collect

1.1 Information We Do Not Collect

Unlike traditional platforms, "Xalia" does not collect or store:

• Personal identification information (name, email, phone number)
• User account information
• Payment or billing information
• User-generated content
• Behavioral analytics or tracking data
• Location data
• Device identifiers

1.2 Limited Technical Information

To maintain platform security and functionality, we may automatically collect minimal technical information:

• Log Data: Server logs may temporarily record IP addresses, access times, and pages viewed solely for security and operational purposes
• Platform Performance Data: Basic metrics about platform availability and performance (not tied to individual users)

This information is:

• Collected only when necessary for platform operation
• Retained for the minimum time required (typically 7-30 days)
• Not used for marketing, profiling, or sold to third parties

2. How We Use Information

The limited technical information we collect is used exclusively for:

• Maintaining platform security and preventing abuse
• Ensuring platform availability and performance
• Complying with legal obligations
• Protecting against fraudulent or illegal activity

3. Third-Party MCP Servers

3.1 Independent Data Controllers

Each MCP server available through "Xalia" is operated by independent third parties who act as separate data controllers. When you connect to an MCP server:

• You establish a direct relationship with that third-party provider
• The third party's privacy policy and terms of service apply
• Any data collection occurs directly between you and the third party
• We have no access to or control over data exchanged with third parties

3.2 Our Limited Role

"Xalia" acts solely as a directory and connection facilitator. We:

• Do not monitor, access, or store data transmitted to/from MCP servers
• Do not have data processing agreements with MCP server providers
• Cannot provide support for data-related issues with third-party servers

4. Cookies and Tracking Technologies

4.1 Essential Cookies Only

We use only essential cookies required for platform functionality:

• Session Cookies: To maintain platform stability during your visit
• Security Cookies: To protect against cross-site request forgery

We do not use:

• Analytics or performance cookies
• Advertising or targeting cookies
• Social media cookies
• Third-party tracking cookies

4.2 Managing Cookies

You can disable cookies through your browser settings. Note that disabling essential cookies may impact platform functionality.

5. Data Sharing and Disclosure

5.1 No Sale of Information

We do not sell, rent, or trade any information to third parties.

5.2 Limited Disclosure Circumstances

We may disclose the minimal technical information we collect only:

• Legal Compliance: When required by law, subpoena, or court order
• Safety and Rights: To protect the safety, rights, or property of General Intelligence Inc., our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)

6. Data Security

We implement industry-standard security measures to protect our platform infrastructure:

• Encryption in transit (HTTPS/TLS)
• Regular security assessments
• Access controls and authentication
• Incident response procedures

However, no system is 100% secure. We cannot guarantee absolute security of any information transmitted through our platform.

7. International Data Transfers

"Xalia" is operated from the United States. By using our Services from outside the United States, you understand that:

• Any technical information collected may be transferred to the United States
• Third-party MCP servers may be located in various jurisdictions
• Different privacy laws may apply depending on server locations

8. Your Privacy Rights

8.1 General Rights

Since we do not collect personal data, traditional privacy rights may not apply. However, you may:

• Request information about our privacy practices
• Opt-out of any future data collection if our practices change

8.2 Jurisdiction-Specific Rights

California Residents (CCPA): You have the right to request information about our data practices. Contact us at hello@xalia.ai.

European Users (GDPR): As we do not collect personal data, GDPR rights typically do not apply to our platform. For data collected by third-party MCP servers, contact those providers directly.

8.3 Do Not Track

Our platform does not respond to Do Not Track signals as we do not track users across websites.

9. Children's Privacy

Our Services are not intended for children under 16. We do not knowingly facilitate access to MCP servers that collect information from children. If you believe a child has accessed our Services, please contact us immediately.

10. Third-Party Links and Services

Our platform may contain links to third-party MCP servers and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting a prominent notice on our website
• Updating the "Effective Date" at the top of this policy

Your continued use of our Services after changes constitutes acceptance of the revised Privacy Policy.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy, please contact us:

General Intelligence Inc.
Email: hello@xalia.ai
Address: [Physical Address]

13. Additional Disclosures

13.1 Legal Basis for Processing (EEA Users)

Where applicable, we process limited technical information based on:

• Legitimate interests in maintaining platform security and functionality
• Legal obligations

13.2 Data Retention

Technical information is retained only as long as necessary for the purposes outlined in this policy, typically:

• Security logs: 30 days
• Platform performance data: 90 days

13.3 Automated Decision Making

We do not engage in automated decision-making or profiling.

13.4 Privacy Policy Scope

This Privacy Policy applies only to "Xalia" operated by General Intelligence Inc. Each third-party MCP server has independent privacy practices not covered by this policy.

13.5 Google Workspace API Data

The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

---

Remember: When using third-party MCP servers through "Xalia", always review their individual privacy policies to understand how they collect and use your data.