Clear information.
Considered access.

Website enquiries and service records

When you submit a brief, we store the contact details, organisation, requirements and enquiry reference you provide. We use them to assess your request, communicate in writing and prepare the agreed service. Private workspaces hold requirements, service messages, documents, operational records and supplied business data. Do not put passwords or unnecessary sensitive information in forms or documents.

Google account access

When customer Gmail connections become available, you authorise access on Google’s own sign-in page. The requested permissions allow Xevrion to read Gmail messages and send email from your account. Xevrion uses account identity, message content, sender and recipient addresses, subjects, timestamps and message/thread identifiers to provide the connected inbox features you choose. The current workflow starts with new messages after connection; it does not import your historical inbox as a service dataset.

Renewable access credentials are held in the server’s secret store. They are not shown in your workspace or shared with other customers. Service records are separated by customer workspace. Authorised Xevrion operators may access service records to provide support and resolve exceptions.

Purpose and limited use

Google user data is used to provide and improve the user-facing inbox and service features you authorise. It is not sold, used for advertising or used to train a general-purpose AI model. Xevrion’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Hosting, processing and AI

Cloudflare serves the public website and optional AI functions. OVHcloud hosts the service platform; the current server is in Canada. Google processes connected Gmail requests. Monzo handles payment links on its own website. These providers receive the information necessary for their respective functions.

The public guide can answer published FAQs without AI. If you enable its AI option, your question is sent to Cloudflare for processing. Inbox support classification with AI is separately configurable; when enabled for an agreed customer service, relevant support text is sent to Cloudflare. Routine approved-answer matching does not require AI. Avoid submitting unnecessary personal or sensitive information.

Disconnecting and deletion

Disconnecting an inbox stops future polling and cancels pending unsent messages in Xevrion; it does not erase existing service records or undo email already sent. Revoke Google access through your Google Account connections. For deletion or correction of stored service data, email us with your workspace or enquiry reference. We check authority before changing or deleting records.

Service records are retained while needed for the agreed service, support, security and relevant business-record obligations. Website discovery jobs are removed after 30 days. Deletion requests for other records are handled individually; disconnecting is not an automatic deletion request. Backup copies may persist until their retention period ends.

Payments and website storage

Payment links take you to Monzo; Xevrion does not collect card details through these pages. Bank-transfer receipts are confirmed separately. Sign-in uses necessary session and security storage. The private workspaces are not public, and operational figures are not published as customer results without separate review and permission.