Privacy
What we collect, and what we do with it
This policy covers the Xyranik platform, operated by FactoFlare AI.
Last updated: 17 September 2026
In short
Xyranik is built to keep each workspace’s data to itself. It does not hold a security certification yet. What protects your data today, and what is not in place yet, is set out in full on the Security page.
Information we collect
We collect information you give us directly, when you:
- create an account and use the product;
- contact us for support;
- connect an external account, such as a store, an ad account or a social profile;
- import or add contacts of your own.
We also record how the product is used — which pages are opened and which actions are taken — so that faults can be diagnosed and the product improved.
How we use it
- To provide, maintain and improve the platform.
- To process payments and send you the records related to them.
- To send service notices, including security notices.
- To answer your questions and support requests.
Your contacts are yours
The contacts, orders and messages inside your workspace belong to you. They are not sold, and they are not shared with another customer. One workspace’s data is never used as context for work done for a different workspace.
How it is protected
- Credentials for the accounts you connect — the keys to your store and ad accounts — are encrypted before being stored, each under its own key.
- HTTPS for every page and every request.
- Access limited by role within each workspace, and single sign-on for organisations that use it.
- An append-only record of who changed what, and when.
- Personal details are masked before any text is sent to a model for generation.
The full list, including what is not in place yet, is on the Security page. Xyranik holds no security certification yet and claims none.
Your rights
Depending on where you live, you may have the right to:
- see the personal information we hold about you;
- have inaccurate information corrected;
- have your information deleted;
- receive a copy of your data in a portable form;
- opt out of messages that are not service notices.
Signed-in customers can export their data and request erasure directly, from Data and trust inside the product. You do not need to ask us to do it for you.
Keeping data
An administrator sets how long two kinds of personal detail are kept: what people typed into your forms, and anonymous visits and clicks. A daily job clears anything older. Until a period is set, nothing is removed automatically.
Changes to this policy
If this policy changes materially, we will tell customers before the change takes effect. The date at the top of this page always reflects the most recent change.
Contact us
For any question about this policy, or to exercise any of the rights above, email support@xyranik.com. If you have an account, you can also write to us from the Help centre once signed in.