Privacy Policy

Last updated: July 2026

This policy covers ai.xl.net, operated by XL.net, and every channel on which you can reach Tron Netter, our AI agent — web chat, SMS, email, and voice.

Tracking, Profiling & Automated Identification

We believe transparency beats fine print, so here is everything this site does to understand its visitors — including the parts most sites leave out. All of it is first-party: we use no third-party analytics service, advertising network, or social-media tracker, and none of this data leaves our own server.

  • First-party page tracking: our own server records each page view with the path, referring page, IP address, browser user agent, and any campaign (UTM) parameters. This powers our traffic dashboards and abuse prevention.
  • Company (not person) identification: we look up visitor IP addresses against a locally stored database to identify the organization or networka visit came from (for example, “a visitor from Acme Corp's network”). The lookup happens on our own server, identifies companies rather than individuals, and sends no data to anyone else.
  • Repeat-visit linking:we compute a short hash of IP address + browser user agent to connect a day's repeat visits into one anonymous session. This record contains no name or email unless you later identify yourself (for example by signing in), at which point your visits may be linked to your contact record.
  • Landing-page recovery: a small script on our pages reports the address of the page your browser says referred you. It exists because some browsers pre-load our pages in a way that hides that information from our server.

AI Agent Processing & Human Oversight

Conversations with Tron Netter — web chat, SMS, email, and voice — are processed by our AI systems and stored so the agent can answer you and we can review quality.

Every email Tron Netter sends is copied to a human at XL.net, so an unsupervised AI is never our only record of what was said.

Chat Page Context

While you use the chat widget, Tron Netter can see the page you are on — its address, title, and visible text — so it can answer questions about what you are looking at. While the chat panel is open, it is also told short descriptions of elements you point at or text you select (for example, “the ‘Pricing’ heading”) so you can gesture at what you mean.

Nothing is captured while the chat is closed, form values and passwords are never read, and the widget shows a “Sees this page” indicator with an off switch whenever sharing is active. Shared page context is stored with the conversation like any other chat content.

Issue Reports

If you report a problem through the chat, your report — including a short excerpt of the conversation and, when page sharing is on, a snapshot of the page you were viewing — is emailed to XL.net staff so a human can act on it. If you include a contact address, staff may use it to follow up. To review or erase a report, contact Tron.Netter@ai.xl.net.

Persona Memory

Tron Netter keeps a private, per-person memory: facts you share and your conversation history, so later conversations can pick up where you left off. Your memory is visible only to you (and to XL.net staff reviewing quality) — never to other visitors — and XL.net AI's own published knowledge always outranks remembered facts when they conflict.

  • One memory across channels: if you verify your mobile number on your account, your web chat, SMS, email, and voiceconversations share one memory keyed to that number. Email conversations join it only when the email provably came from you (it must pass DKIM authentication for your address's domain); mail that fails authentication is answered without reading or writing any stored memory.
  • Anonymous web chat remembers nothing. Memory applies to web chat only when you are signed in, and signed-in chat has a MEMORY ON/OFF toggle in the chat window — turn it off and that conversation is not saved to memory.
  • SMS always remembers. Texting Tron Netter keeps memory for your phone number (possession of the handset is the authentication); the first reply you receive says so and names the erasure keyword.
  • Erasure by text — “FORGET”: text FORGET to +18723504325 and we permanently erase the stored memories, conversation history, and call transcripts for that number — and, if the number is verified on an account, for that account's chat and email memory too. You get a confirmation text once the erasure has completed. FORGET is not STOP: STOP opts you out of receiving messages, FORGET erases what we remember.
  • What FORGET does not delete: SMS consent records (kept for legal compliance), usage metadata that contains no conversation content, the deletion-audit record proving the erasure happened, server and diagnostic logs, and the human-oversight copies of emails already sent.
  • Recycled numbers: memory is keyed to the phone number itself. If a number is reassigned by a carrier, its new holder could encounter memory from the previous holder — text FORGET from the number to erase it.
  • Caller-ID caveat:voice calls recall memory by the calling number, and caller ID can be spoofed — a determined attacker who spoofs your number on a call could expose that number's memories. If this concerns you, text FORGET to erase the memory, or skip verifying your number.

Account Data

If you sign in, we store your email address and display name (provided via Google OAuth or Microsoft OAuth, or an emailed sign-in link). This information is used only to authenticate you and personalize your experience. We never post on your behalf or access anything else in your provider account.

If you register a mobile number for text messaging, we also store that number, the date you verified it, and your opt-in consent record (see SMS / Text Messaging Data below).

Your Data Rights

Signed-in users can exercise both rights directly, without emailing anyone:

  • Export (data portability): download everything we hold about you — your account record, consent and notice history, and your stored conversations and memories with Tron Netter — as a machine-readable file from /api/account/export while signed in.
  • Deletion (right to erasure): delete your account and its data via a signed-in request to /api/account/delete, confirmed by typing your account email. This permanently erases your conversations, memories, and personal records, then removes the account itself, and returns an itemized count of what was erased.

Deletion keeps the narrow records the law or basic security requires: SMS consent records, the deletion-audit record proving the erasure happened, security logs with the account link removed, and — where you have made purchases — financial records with your identity removed. If anything blocks a deletion (for example an active paid subscription), the request tells you exactly what to resolve first. Questions or problems with either right: Tron.Netter@ai.xl.net.

What We Do NOT Do

  • We do not sell your data to anyone
  • We do not use your data for advertising
  • We do not use third-party analytics or tracking cookies
  • We do not serve third-party advertisements
  • We do not use your data to train AI foundation models. Tron Netter processes and stores your conversations to answer you, but your data is never sold to, or used to train, third-party models.

Cookies

Essential cookies only. We set a single httpOnly session cookie (aix_session, 30 days) when you sign in, plus short-lived cookies during the sign-in handshake. A first-party cookie (aiwebsite_attrib) remembers the landing page, the site that referred you, any advertising click identifier in the address (gclid, msclkid, fbclid and similar), and campaign parameters of your first visit; it is read only by our own server. Your theme preference and interface choices are kept in your browser's localStorage, and the chat widget's conversation state in sessionStorage. If you listen to an article, your chosen playback speed and how far through that article you got are also kept in localStorage, so you can pick up where you left off; that stays on your device. None of this is sent to any third party.

Because we set no analytics or advertising cookies, there is no cookie consent banner — there is nothing to consent to. Blocking all cookies in your browser will prevent you from signing in but does not affect the rest of the site.

Third Parties

We share data only with services necessary to operate the site:

  • Google OAuth / Microsoft OAuth: authentication only
  • Resend: email delivery and receiving for Tron.Netter@ai.xl.net
  • Twilio: SMS and voice-call transport (phone numbers and message/call content, as required to deliver the service)
  • Cloudflare: DNS and secure tunnel (no personal data stored)
  • Large-language-model providers: when you interact with Tron Netter, your conversation content is sent to one or more of these providers via their APIs solely to generate the response. We use API terms under which providers do not use this content to train their models.
  • Text-to-speech provider: to produce the audio version of an article, the published article text is sent to a speech-synthesis API. Only the article — which is already public on this site — is sent; nothing about you, your visit, or your listening is included.

None of these providers receive your data for their own marketing purposes.

SMS / Text Messaging Data

If you communicate with us via SMS, your mobile phone number and message contents are used solely to respond to your inquiry. Your mobile information will not be sold, rented, or shared with third parties or affiliates for their own marketing purposes. Mobile opt-in data and consent are not shared with any third parties except service providers that help us operate our messaging program, and those providers are restricted from using your information for any other purpose.

If you register your number with us, we record your opt-in consent (the consent language you agreed to, your IP address, and browser) and verify the number with a one-time code before it is added to your account. Message frequency varies based on your interactions with us. Message and data rates may apply. Text STOP to opt out at any time.

For full details on our text messaging program, see our SMS Terms & Conditions.

Data Retention & Deletion

  • Account data: as long as your account exists
  • Sign-in logs: up to 365 days
  • Page-view records: up to 730 days
  • IP-to-organization records: up to 730 days
  • Email oversight copies: up to 730 days
  • Unverified phone-verification codes: 10 minutes
  • SMS consent records: for the life of the messaging program plus four years, as required for compliance

Upon a deletion request, all associated personal data is permanently removed within 30 days, except records we are legally required to keep (such as SMS consent logs).

Changes to This Policy

We may update this Privacy Policy from time to time. Changes are effective when posted to this page, and the “Last updated” date above reflects the most recent revision. Your continued use of the site after changes are posted constitutes acceptance of the updated policy.

Contact

To object to any of this processing, request deletion of your account and associated data, or ask privacy questions, contact Tron.Netter@ai.xl.net.

This policy is generated from the site's actual configuration so it cannot drift from behavior. It reflects engineered defaults, not legal advice.

AI Governance projects

Signed-in users can draft AI governance documents with Tron Netter at /governance. For those projects we store your questionnaire answers, the drafts, a research brief we compile from your company's public web presence, and, if you upload one, the text we extract from your format sample (the uploaded file itself is not kept). Your answers, our research, the working drafts, and that extracted text are processed by third-party AI model providers to draft the documents; nothing from a governance project is stored in Tron Netter's long-term memory or shared with other visitors.

Governance projects are deleted from our systems 30 days after your last activity on them (creating, answering, revising, confirming, or downloading counts as activity), and encrypted database backup copies expire within a further 30 days. You can also delete a project immediately from its project card. Downloaded documents are yours and are never stored on our servers.

AI Roadmap company workspaces

The AI Roadmap at /roadmap groups signed-in users by the domain of their verified work email address. The first verified person from a company to set up its workspace becomes that company's administrator; others can request administrator access, and we keep a record of those requests and their outcomes. For each workspace we store its roadmap progress, attached governance documents, a company directory (name, work email, and phone number for each listed person), work submissions and their published cards, and a scorecard that counts published submissions per person in the directory.

Workspace content is visible to signed-in users on the same email domain and to XL.net administrators, who can view and manage every workspace in order to operate and support the service. It is never public, and we exclude it from search engines. Directory entries can be imported from Apollo, a third-party business directory, or added by your administrator, and the directory may be populated automatically from Apollo when a company administrator first opens it; each entry is labeled with its source, we never contact the people listed, and an administrator can remove an entry at any time. When an Apollo-sourced entry is removed we keep a one-way fingerprint of the email address so future imports do not restore it. To have yourself removed from a company directory, contact your company's administrator or Tron.Netter@ai.xl.net.

Work submissions from company workspaces are reviewed by the same third-party AI editorial process as our own published work. A governance document attached to a workspace is a copy that belongs to the company and is kept until an administrator removes it; the Governance Builder project it came from still deletes on its own 30-day schedule. Workspace data is kept while the workspace is active; deleting a workspace removes all of it, and encrypted database backup copies expire within a further 30 days.