Last updated: August 12, 2026
XEA ("we", "us", "our") operates the AI creative platform at https://xe-a.com and the XEA Progressive Web App (PWA) / native app distributions packaged via Capacitor. We are the controller of the personal data we process about you. Contact: privacy@xe-a.com.
a. Account data
b. Content data
c. Payment data
Card and crypto details are handled directly by PayPal, Stripe (where active), and supported crypto wallet providers; we receive only transaction identifiers and statuses — we never see your full card number or wallet private keys.
d. Technical data
e. Personalization signals (XEA Brain)
To make the product learn from each user, XEA logs the prompts you generate from, the styles you select, the moods you favor, the durations you pick, and the outputs you publish vs. discard. These signals power per-user recommendations (e.g. default style, default duration, music vibe) and aggregate, anonymized signals across the user base. Aggregated signals are never tied back to an identifiable individual.
We share strictly the minimum data needed for these vendors to perform a function. Each vendor is bound by a Data Processing Agreement or equivalent contractual safeguard:
We do not sell your personal data, and we do not use it for cross-context behavioural advertising.
Community posts are visible to all logged-in XEA users inside the realm you publish to (Marketing, Designing, CGI, or Movie). When you publish to the community, the following becomes visible: your display name, your profile initial / avatar, the media you chose to share, the caption, the original prompt, the realm, and aggregated counts of likes and comments. Your email address, plan, exact token balance, ledger entries, and earnings balance are never visible to other users.
A privacy-safe form of your name (e.g. "Maria K.") may also appear in the public "Top Earners" ticker on the landing page if your earnings rank you in the top positions for the period. To opt out of public visibility entirely, email privacy@xe-a.com and we will set the exclude_from_public flag on your account; you will then no longer appear in tickers, leaderboards, or community feeds.
We use automated content-safety models to screen prompts, captions, comments, edit prompts, negative prompts, text overlays, voiceover scripts, movie scripts, uploaded media, and shared posts for explicit, hateful, violent, or otherwise prohibited content. These models process your input in transit and are not used to train any public model of ours.
Flagged generation attempts (including the prompt text, the endpoint, a timestamp, and account identifiers) are logged in our internal moderation queue for audit purposes. This log is retained for 24 months and is accessible only to our moderation and compliance staff.
Any attempt to generate sexual, nude, or child-unsafe content — through any studio, any tool, or any field — results in immediate, permanent account termination across every studio. No warning, no appeal. See Terms §8.1.
Subject to applicable law, you have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing (incl. opting out of the XEA-Brain personalization signals). You can exercise most of these directly from the Settings page; for the rest, write to privacy@xe-a.com and we will respond within 30 days. California residents may also exercise their CCPA rights via the same address. You have the right to complain to your local data-protection authority.
We use TLS in transit, bcrypt-hashed passwords, brute-force lockouts, signed PayPal / Stripe webhook verification, strict CORS, role-based access control on admin endpoints, and rate-limited APIs. Tokens are scoped per-account and stored in localStorage; we recommend logging out of shared devices. No system is 100% secure — please use a strong unique password, never share credentials, and notify us immediately if you suspect unauthorized access.
Transactional emails (receipts, tip notifications, password resets, security alerts, refund notices, ban / suspension notices) are required to operate the Service and cannot be opted out of while you have an active account.
The optional Daily Email Reminder is sent only if you enable it in Settings. Browser push notifications have been retired; we no longer collect or store browser push subscription endpoints. Native-app push (Capacitor) is opt-in at install time and can be revoked from your OS settings.
XEA is not intended for users under 18 and is not directed at minors. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, please contact us and we will delete it promptly. Any prompt attempting to generate content involving a minor in a sexual or unsafe context will trigger immediate permanent termination and may be reported to law enforcement.
Your data may be processed in the EU, US, UK, or other countries where our vendors operate. Where required, we rely on Standard Contractual Clauses, UK Addendum, or equivalent safeguards.
XEA is available as a Progressive Web App (PWA) and as native iOS / Android shells packaged with Capacitor. The native shells use the same backend and apply the same policies as the web app. Operating-system level data (push tokens, install ID, device-info APIs) are governed additionally by the App Store / Google Play privacy labels published alongside the app.
We will notify you of material changes via email and/or an in-app banner before they take effect. The current version is always available at this URL with the "Last updated" date at the top.
Privacy questions: privacy@xe-a.com. General support: support@xe-a.com. Legal: legal@xe-a.com.
We use cookies to enhance your browsing experience, serve personalized content, and analyze our traffic. By clicking "Accept All", you consent to our use of cookies. Read our Privacy Policy and Cookie Policy to learn more.
Scroll down to view our Privacy Policy and Terms of Service in the footer.