Effective Date: 1 August 2025
Your privacy matters to us. This policy explains exactly what data Xeli AI collects, why we collect it, and how we protect it.
Xeli AI is an AI-powered customer engagement platform that enables businesses to deploy intelligent chatbots, manage knowledge bases, run email marketing campaigns, and analyse customer interactions. We are operated by Xeli AI ("we", "us", or "our"). For any privacy-related enquiries, contact us at hello@xeliai.com.
We collect information in the following categories depending on how you use the platform:
When you register, we collect your name, email address, password (stored as a secure hash), and profile avatar. If you sign up via Google or Facebook OAuth, we receive a provider ID and avatar from those services. We also log your last login timestamp and IP address for security purposes.
When you create or join a business workspace on Xeli AI, we store your business name, industry, and any configuration data for your chatbots, including appearance settings, behaviour rules, and system prompts. Team member names, emails, and roles are also stored to manage access permissions.
Files you upload to train your chatbot — including PDFs, Word documents, Excel spreadsheets, JSON files, and plain text — are processed, chunked, and stored as vector embeddings to power AI responses. You are responsible for ensuring the content you upload does not contain third-party personal data without authorisation.
When end-users interact with a chatbot you deploy, we may collect their name, email, and phone number if they provide them during a conversation. We also store cross-session visitor profiles keyed to a SHA-256 hash of their email or device fingerprint. These profiles record visit count, first and last seen timestamps, session IDs, and inferred preferences (such as intent, budget, and location) to personalise repeat interactions. Raw identifiers are never stored in plain text.
Chat messages between your visitors and your AI chatbot are stored to support live monitoring, handover to human agents, and analytics reporting. Short-term conversation memory is maintained within a session to support contextual responses.
If you use our email marketing features, we store the contact lists you create or import, including names, email addresses, phone numbers, tags, and custom fields. We also record email engagement events such as delivery status, opens, and clicks.
We record your active subscription plan, billing history, and payment transaction references. Full card details are never stored by Xeli AI — they are handled exclusively by our payment processor.
We collect platform usage data such as feature interactions, chatbot performance metrics, conversation volume, and system events. This helps us operate the platform reliably and provide you with actionable business insights.
To power our AI features, conversation data and knowledge base content are processed by the following third-party AI providers:
We also work with third parties for:
We do not sell your data to any third party.
We retain your account and business data for as long as your account is active. Visitor chat profiles and conversation history are retained to support analytics and cross-session memory. If you delete your account or request data deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance reasons.
Depending on your location, you may have the right to:
To exercise any of these rights, email us at hello@xeliai.com. We will respond within 30 days.
We use cookies and browser local storage to maintain your login session, remember your preferences, and support analytics. Essential cookies are required for the platform to function. You can control non-essential cookies through your browser settings, though doing so may affect certain features.
We apply industry-standard security practices including password hashing, API token authentication, encrypted data transmission (HTTPS), and IP-based login tracking. Visitor identifiers are stored as one-way SHA-256 hashes. No security system is infallible; if you suspect unauthorised access to your account, contact us immediately.
Xeli AI is a business platform not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through a chatbot you operate, please contact us to arrange removal.
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of the platform after changes are posted constitutes acceptance of the revised policy. For material changes, we will notify account holders by email.
If you have any questions about this Privacy Policy or how we handle your data, please contact us: