Privacy Policy

Last updated: February 2026

Xona ("we," "our," or "us") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, and protect your data when you access or use the Xona website, mobile site, and related services (the "Service").

By using the Service, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect only the minimum information required to operate the platform.

a. Account Information

  • Email address (if provided during signup)
  • Username or display name

b. Wallet & Transaction Information

Wallet creation and connection is handled through Privy, a trusted third-party authentication provider.

We collect:

  • Public wallet address
  • USDC on-chain transaction history associated with Xona usage
  • Payment events triggered via X402 (success/refund status)

We never request, store, or have access to your private keys or seed phrases. All wallet operations are securely managed by Privy, and every transaction requires your explicit consent before execution.

c. Usage & Activity Data

To improve your experience, we may collect:

  • Prompts + generated image metadata (not the personal meaning of prompts)
  • Interaction logs (buttons clicked, model chosen, image generation history)
  • Device info, browser type, IP (used only for security and analytics)

d. Optional data

If you choose to publish content or participate in community features, we may store:

  • Publicly displayed name / profile information

2. How We Use Your Data

We use the collected data to:

  • Operate the platform and deliver image generation
  • Process payments via USDC/X402
  • Improve model quality and platform performance
  • Provide customer support
  • Prevent abuse, fraud, or malicious use
  • Analyze usage patterns (anonymized analytics)

We do not sell your data.
We do not train AI models on private prompts or images tied to your identity.

3. Ownership of Generated Content

You own the images you create, subject to model and legal restrictions.

By using the Service, you grant Xona a limited license to:

  • Store the generated image
  • Display it back to you
  • Use anonymized results internally to improve AI performance

We do not publish or share your content without your consent.

4. Payments & Wallet Security

  • Payments are made in USDC using the X402 protocol
  • Wallet management is handled by Privy, a trusted third-party provider
  • All transactions require your explicit consent before execution
  • When you approve a generation:
    • Payment executes only after your confirmation
    • If generation fails, payment is refunded automatically
  • You retain full control over your funds
  • Xona does not store, access, or manage your private keys — all keys are securely managed by Privy

5. Cookies & Analytics

We may use:

  • Minimal cookies to maintain session state
  • Privacy-focused analytics (e.g., IP city-level, not exact address)

No tracking cookies or third-party marketing cookies are used.

6. Sharing of Data

We may share minimal data only with:

  • Blockchain networks (public ledger of payments)
  • Service providers (hosting, analytics, logging)
  • Legal authorities (only if required by law)

We do not sell or rent data to advertisers.

7. Data Retention

We keep data only as long as necessary to:

  • Operate your account
  • Comply with legal obligations
  • Prevent fraud or platform abuse

You may request deletion of your account and data at any time (see Section 9).

8. Security

We use industry-standard security practices, including:

  • Encrypted network communication (HTTPS)
  • Tokenized session management
  • No private key storage, access, or request

However, no online system is 100% secure.
Users are responsible for securing their own wallets and devices.

9. Your Rights

You may:

  • Request access to your data
  • Request deletion of your data
  • Request export of your generated content

Contact us at [email protected]
for any data or privacy requests.

10. Children’s Privacy

The Service is not intended for children under 13.
If a user under 13 signs up, their account may be removed.

11. Changes to This Policy

We may update this policy at any time.

When we make significant updates, we will notify you via email or platform notification.

12. Contact Us

For privacy-related questions or legal concerns: