Privacy

This policy covers x1agent.com (the marketing site) and the x1agent platform itself. The platform is self-hosted — it runs in your Kubernetes cluster, not ours — so most of the data you'll think of as "x1agent data" never reaches us. This page describes what we collect when we do.

Who we are

x1agent is operated by DEV360 LLC, a Georgia limited liability company. Contact: christian@x1agent.com.

What we collect on x1agent.com

If you submit the access form, we collect:

• Your name
• Your work email address
• The free-text answer about what you'd build first (optional)

No analytics scripts, no advertising trackers, no session replay, no cookies set by us. The site loads fonts from rsms.me and fonts.googleapis.com — those services see your IP address as a side-effect of HTTP, but x1agent doesn't.

What we collect when you use the platform

When you sign in to a self-hosted x1agent deployment with Google OAuth, x1agent receives the data Google sends us under the OAuth scopes you approved. That's stored in your deployment's database — Postgres running in your cluster — not in any database we operate. We never see it.

Specifically: we (the operators of x1agent.com) don't run a multi-tenant SaaS. There's no "your data on our servers" — there's only your data in your cluster.

How we use what we collect

• Reach out about access — your name and email so a human can schedule a walk-through.
• Send occasional product updates — only the email you submitted, only about x1agent. No third-party promotions.

Who we share it with

Two service providers, both as data processors acting on our behalf:

• Resend — sends the notification email and stores your contact in our audience for follow-up. Resend's policy.
• Google Cloud (Cloud Run, Cloud DNS) — hosts the website you're reading. Google Cloud privacy notice.

We don't sell your data. We don't share it with advertisers, data brokers, or analytics providers.

How long we keep it

Until you ask us to remove it, or until x1agent stops operating — whichever comes first. Server logs (HTTP access records held by Google Cloud Run) are kept for 30 days.

Your rights

Regardless of where you live, you can:

• Ask what we have on you
• Ask us to correct it
• Ask us to delete it
• Ask us to export it

Email christian@x1agent.com with the request. We respond within a business day. The deletion includes removing your record from Resend.

Residents of the EU/UK have the rights under GDPR/UK GDPR. California residents have the rights under CCPA/CPRA. We honor those without requiring you to invoke them by name.

Google OAuth — limited use

The x1agent platform uses Google OAuth so you can sign in with your Google Workspace account. Use of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements.

Specifically: we (x1agent.com) don't receive Google account data. The OAuth token is held by your self-hosted x1agent deployment. We don't transfer it, sell it, use it for advertising, or read it.

Children

x1agent is a product for engineers. It's not directed at people under 16, and we don't knowingly collect data from anyone under 16.

Changes to this policy

If anything material changes, we update the date at the top and announce it on this page. If you're on the waitlist, you'll get an email when it does.

Contact

Privacy questions, deletion requests, anything else: christian@x1agent.com.