Xenetra
  • Platform
  • Coverage
  • Compliance
  • Request Demo →
Legal

Privacy Policy

How Agovern Technologies Pvt Ltd collects, uses, and protects your personal information.

Last updated: 9 April 2026  ·  Effective: 9 April 2026

Contents

  1. Who We Are
  2. Information We Collect
  3. How We Use Your Information
  4. Legal Basis for Processing
  5. Data Sharing
  6. Data Retention
  7. Your Rights
  8. Cookies
  9. Security
  10. International Transfers
  11. Children's Privacy
  12. Changes to this Policy
  13. Contact Us

1. Who We Are

Xenetra is an AI agent governance platform operated by Agovern Technologies Pvt Ltd, a company incorporated under the laws of India.

Registered address: Evolve Work Studio, 4th Floor, Begur Koppa Road, Bangalore 560068, Karnataka, India.

For the purposes of this Privacy Policy, "Xenetra", "we", "us", or "our" refers to Agovern Technologies Pvt Ltd. "You" or "your" refers to the individual accessing or using our platform, website, or services.

This policy applies to: xenetra.ai and all subdomains, the Xenetra SaaS platform at app.xenetra.ai, and the Xenetra Collector Agent software.

2. Information We Collect

2.1 Information You Provide

  • Account registration: name, email address, company name, job title, phone number
  • Demo requests and enquiries: name, email, company, message content
  • Billing and payments: billing address, payment method details (processed by our payment provider — we do not store full card numbers)
  • Support communications: any information you provide when contacting support@xenetra.ai

2.2 Information Collected Automatically

  • Usage data: pages visited, features used, session duration, click patterns
  • Device and browser data: IP address, browser type and version, operating system, screen resolution
  • Authentication data: login timestamps, session tokens (stored as httpOnly cookies)
  • API access logs: API endpoint calls, request timestamps, response codes

2.3 Data Processed on Your Behalf (Platform Data)

When you use the Xenetra platform, we process data about the AI agents in your environment. This is your data, processed under our Data Processing Agreement. This includes:

  • Cloud resource metadata (agent names, types, configurations — not content)
  • Network connection metadata (endpoints, ports — not packet contents)
  • Process and filesystem metadata (names, paths — not file contents)

Privacy by design: The Xenetra Collector Agent never reads file contents, message bodies, or personal data of your employees. It inspects only metadata: process names, file paths, and network connection endpoints.

3. How We Use Your Information

PurposeData Used
Providing and operating the Xenetra platformAccount data, usage data, platform data
Authenticating users and maintaining sessionsEmail, password hash, session tokens
Sending transactional emails (account, alerts, reports)Email address, name
Responding to support requestsName, email, support communication content
Processing billing and invoicingBilling address, payment data
Product analytics and improvementUsage data (anonymised or aggregated)
Security monitoring and fraud preventionIP address, access logs, session data
Legal compliance and regulatory obligationsAs required by applicable law
Marketing communications (with consent)Email address, company name

We do not sell your personal data. We do not use your platform data (the AI agent data from your environment) for any purpose other than providing the Xenetra service to you.

4. Legal Basis for Processing (GDPR / EU AI Act)

For users in the European Economic Area, United Kingdom, or other jurisdictions with similar laws, our legal bases for processing are:

  • Contract performance: processing necessary to provide the services you have contracted for
  • Legitimate interests: security monitoring, fraud prevention, product improvement (where not overridden by your rights)
  • Legal obligation: compliance with applicable laws and regulations
  • Consent: for marketing communications — you may withdraw consent at any time by emailing privacy@xenetra.ai

5. Data Sharing

We do not sell, rent, or trade your personal data. We may share your data only in the following circumstances:

5.1 Service Providers

We use third-party service providers to operate our platform. These providers process data only on our instructions and are contractually bound to maintain appropriate security:

  • Cloud infrastructure: Amazon Web Services (AWS) — hosting, storage
  • Email delivery: transactional email provider for alerts and reports
  • Payment processing: PCI-DSS compliant payment processor
  • Analytics: privacy-preserving usage analytics (no personal data shared)

5.2 Legal Requirements

We may disclose your information where required by law, court order, or regulatory authority, or where necessary to protect our legal rights.

5.3 Business Transfers

In the event of a merger, acquisition, or asset sale, your data may be transferred. We will notify affected users and provide choices where legally required.

6. Data Retention

Data TypeRetention Period
Account and profile dataDuration of account + 90 days after deletion request
Audit log events90 days (configurable up to 365 days on Enterprise plan)
Platform data (agent metadata)Duration of subscription
Support communications3 years
Billing records7 years (statutory requirement)
Usage and access logs90 days
Compliance reports (PDF)Duration of subscription

Upon account termination, we will delete or anonymise your personal data within 90 days, except where we are required to retain it by law.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you
  • Rectification: request correction of inaccurate data
  • Erasure: request deletion of your personal data ("right to be forgotten")
  • Portability: receive your data in a structured, machine-readable format
  • Restriction: request that we restrict processing of your data
  • Objection: object to processing based on legitimate interests
  • Withdrawal of consent: withdraw consent for marketing at any time

To exercise any of these rights, email privacy@xenetra.ai. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Cookies

We use the following types of cookies on xenetra.ai and app.xenetra.ai:

CookieTypePurposeDuration
access_tokenEssentialAuthentication session (httpOnly, Secure)Session / configured expiry
xenetra-authEssentialAuth state persistence (localStorage)Persistent
Analytics cookiesAnalyticsAggregate usage statistics (no personal data)90 days

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in to the platform.

9. Security

We implement appropriate technical and organisational measures to protect your data, including:

  • TLS 1.3 encryption for all data in transit
  • AES-256 encryption for data at rest
  • httpOnly, Secure, SameSite cookie flags for authentication tokens
  • HMAC-SHA256 signed audit log events (tamper detection)
  • bcrypt password hashing (never stored in plaintext)
  • JWT denylist via Redis for immediate session revocation
  • Rate limiting and account lockout after failed authentication attempts
  • Regular security assessments and penetration testing

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it responsibly to security@xenetra.ai.

10. International Data Transfers

Agovern Technologies is incorporated in India. Our platform is hosted on AWS infrastructure. If you are located in the European Economic Area, your data may be transferred to and processed in countries outside the EEA.

Where we transfer data internationally, we rely on: Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions where applicable. You can request a copy of relevant safeguards by emailing privacy@xenetra.ai.

11. Children's Privacy

The Xenetra platform is intended for enterprise use by professionals aged 18 and over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, please contact privacy@xenetra.ai and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified by email to registered users and by posting a notice on app.xenetra.ai at least 30 days before the change takes effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

The date of the most recent revision is shown at the top of this page.

13. Contact Us

For any privacy-related questions, data subject requests, or concerns:

Data Controller: Agovern Technologies Pvt Ltd

Privacy enquiries: privacy@xenetra.ai

General support: support@xenetra.ai

Evolve Work Studio, 4th Floor, Begur Koppa Road, Bangalore 560068, India

Xenetra
AI Agent Governance Platform.
Email: sales@xenetra.ai
Legal
Privacy Policy Terms & Conditions EULA Disclaimer
Platform
ARIA Detection AIGA Governance Compliance
© 2026 Agovern Technologies Pvt Ltd · Xenetra
PATENT PENDINGEU AI ACT READY