owns.ai is owned and operated by XTO Pty Ltd (ACN 702 801 410), a company registered in Australia with its office at L1 457 Elizabeth Street, Surry Hills, NSW 2010, Australia. This policy explains what personal information XTO Pty Ltd ("owns.ai", "we", "us") collects, why, and what we do with it. It covers our website at owns.ai, your owns.ai account, and the AI assistants our customers place on their own websites. If anything here is unclear, write to [email protected].

1. Who is responsible for what

For your account - the information you give us when you sign up, use the dashboard and pay - owns.ai is the controller.

For conversations on a customer's website - what a visitor types into an owns.ai assistant on a business's site, and any contact details they leave - the business that installed the assistant is the controller, and owns.ai processes that information on its behalf and on its instructions. If you chatted with an assistant on a business's website and have a question about your data, please contact that business first; we will help them respond.

2. Information we collect

From account holders

• Account details: name, email address, password (stored only as a salted PBKDF2 hash), and optionally your company, website, phone, billing address and tax ID for invoices.
• Billing: payments are handled by PayPal. We receive the subscription ID, plan, payment status, amounts and the payer email PayPal shares with us. We never see or store your card or bank details.
• Website content: when you ask us to build an assistant, we visit the website address you give us and the pages on it, and store the text of those pages, a screenshot of the home page, and the derived knowledge (text passages and their mathematical "embeddings").
• Content you add: custom answers, instructions, business profile edits and assistant settings.
• Documents and articles: files you upload to the knowledge library (for example PDF, Word, PowerPoint, Excel, text or images) and articles you write, the text we extract from them, and their embeddings - each stored with the access level you choose (private, team or public). PDFs and images are processed by our AI infrastructure to read their text.
• AI workspaces: if a business sets up a workspace (its own subdomain of owns.ai), we store the people it lets in (name, email, a hashed password, approval status and access requests), their conversations, the photos and files they attach, and the credits each answer used. Workspace conversations are private to the person who had them and are deleted after the account holder's plan history period, with their attachments.
• Team members: when an owner or admin invites a colleague we store the invitee's email, name and role. Each team member then has an account of their own, as above.
• Usage: pages visited, features used, sign-in times, IP address and browser type, used for security, fraud prevention and to improve the service.

From visitors to our customers' websites

• Conversation content: the questions a visitor asks and the assistant's answers.
• Contact details a visitor chooses to leave (for example name, email, phone and a message) when the assistant offers to have the business get back to them.
• Technical context: the page the chat started on, the website's origin, browser type, device category and language. A visitor's IP address is converted into a one-way hash that changes every month and is used only to prevent abuse; we do not store the IP address itself.
• Feedback: thumbs-up or thumbs-down ratings on answers.

From team members using the Team Assistant

Questions a team member asks the Team Assistant and its answers are stored as that person's own conversation history. They are visible only to that person - not to other team members, admins or the account owner - and are deleted on the same schedule as other transcripts.

From visitors to owns.ai

When you use our home page builder without an account, we store the website address you entered, the preview assistant we built, and your IP address for rate limiting. Previews that are not claimed by creating an account are deleted after about seven days.

3. How we use information

• To provide the service: building assistants, answering visitors, showing analytics and transcripts, sending lead alerts and account emails.
• To bill subscriptions and keep financial records.
• To keep the service secure, prevent abuse and enforce plan limits.
• To support you when you contact us.
• To send product news if you opted in - you can opt out any time from your profile or any email.

We do not sell personal information, and we do not use customer content or visitors' conversations to train AI models.

4. AI processing and sub-processors

Answers are generated, and knowledge is indexed, by AI models running on the cloud infrastructure of our sub-processors. To answer a question we send that infrastructure the relevant passages from the business's knowledge (only passages the person asking is allowed to see), the recent conversation, the question and anything attached to it; when someone switches on web search in a workspace, the search terms are used to search the public web. To read an uploaded PDF or image we send the file for processing, and any temporary copy is deleted straight after. Our sub-processors may not use this information to train their models. Other service providers we rely on include PayPal (payments), our hosting and database providers, and our email delivery provider. Each is bound by contract to protect the information and use it only to provide their service to us. A current list of sub-processors is available on request from the address in section 11.

5. Retention

• Conversation transcripts are kept for the history period of the account holder's plan (from 7 days on Free to 2 years on Pro) and then deleted automatically.
• Leads are kept until the account holder deletes them or their account.
• Website knowledge is kept while the assistant exists and replaced each time it re-learns the site; deleting an assistant deletes its knowledge.
• Documents are kept until they are deleted. When a team member leaves or is removed, their private documents are deleted; documents they shared with the team stay with the business.
• Invoices and payment records are kept for as long as tax and accounting law requires, even after an account is closed.
• Closing your account deletes your assistants' knowledge and anonymises your account record.

6. Cookies

We use one essential cookie to keep you signed in (encrypted, HttpOnly) and a session cookie needed by our servers. The assistant widget on customers' sites stores a conversation reference in the visitor's browser storage so a chat survives moving between pages; it does not set tracking cookies. If we enable analytics on owns.ai itself, we will ask for consent where the law requires it.

7. Security

Connections are encrypted with TLS. Passwords are hashed, sign-in cookies are encrypted and signed, payment data stays with PayPal, and access to production systems is restricted. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you and regulators as the law requires.

8. International transfers

We are based in Australia. Our providers, including our cloud and payment providers, may process information in countries other than yours, including outside Australia. Where required, we rely on appropriate safeguards such as standard contractual clauses.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal information, to data portability, and to complain to a data protection authority. Account holders can edit their details in Profile, export conversations and leads (on plans with export), and close their account. For anything else, email [email protected] and we'll respond within 30 days. We handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles; if you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or your local data protection authority.

10. Children

owns.ai is a business service and is not directed at children under 16. Businesses must not use their assistant to knowingly collect information from children where that is unlawful.

11. Changes

If we make material changes we'll update this page and, for significant changes, email account holders before they take effect.

12. Contact

XTO Pty Ltd (ACN 702 801 410)
L1 457 Elizabeth Street, Surry Hills, NSW 2010, Australia
[email protected]

These terms are an agreement between you and XTO Pty Ltd (ACN 702 801 410) of L1 457 Elizabeth Street, Surry Hills, NSW 2010, Australia ("owns.ai", "we", "us"), the company that owns and operates owns.ai, for the use of owns.ai. By creating an account or using the service you agree to them. If you are accepting on behalf of a business, you confirm you are authorised to bind it.

1. The service

owns.ai builds AI chatbot assistants from the websites you point it at, hosts those assistants, and provides an embed code, a dashboard, analytics and related features. Features and limits depend on your plan as described on our pricing page.

2. Your account

Keep your sign-in details secure and tell us promptly about any unauthorised use. You are responsible for activity on your account. You must give accurate information and be at least 18.

Teams. The account owner may invite team members, who receive their own sign-in. The owner is responsible for their team's use of the service, manages billing, and decides who is an admin. Admins may manage assistants, documents and team members. Seats are limited by your plan. A member who leaves or is removed keeps their login as a separate free account; the business keeps the assistants and shared documents.

3. Plans, trials and billing

• Paid plans are subscriptions billed in advance, monthly or yearly, through PayPal, in the currency shown at checkout.
• A paid plan may begin with a free trial (currently 7 days). One free trial per account. If you don't cancel before the trial ends, the subscription begins and you are billed automatically.
• Subscriptions renew automatically at the end of each period until cancelled.
• If a payment fails, PayPal will retry. If payment still can't be collected, the subscription may be suspended and your account moved to the Free plan.
• Prices may change. A change never affects a period you've already paid for, and existing subscriptions keep their price unless we give you at least 30 days' notice.
• Prices exclude taxes unless stated; you are responsible for any taxes that apply.

4. Changing plans and cancelling

You can change plan or cancel at any time from Plan & billing (or from your PayPal account). When you cancel, you keep your paid features until the end of the current paid period, after which your account moves to the Free plan; your assistants and their knowledge are kept within Free plan limits, and assistants beyond the Free allowance are paused rather than deleted. When you move to a new paid plan, your previous subscription is cancelled.

5. Refunds

Because every paid plan can be tried free first, payments are non-refundable and partial periods are not refunded, except where the law requires otherwise or where we decide to make an exception.

6. Usage limits

Each plan includes limits on assistants, monthly visitor messages, pages learned and other features. When a monthly message limit is reached, your assistants show visitors your contact details instead of answering until the next month or until you upgrade.

7. Your content and websites

• You may only build assistants from websites you own or are authorised to use for this purpose, and you authorise us to access, render, copy and process their content to provide the service.
• You keep ownership of your content. You grant us a licence to host, process and display it solely to provide and improve the service for you.
• You may only upload documents you have the right to use this way. You choose each document's access level; documents marked public may be used by your website assistant to answer anyone who visits your site.
• You are responsible for your content, your documents, your custom answers and instructions, and for having a lawful basis and any notices required to use the assistant with your website's visitors (for example in your own privacy policy).

8. AI answers

Assistants generate answers automatically using AI. Although they are designed to answer only from your information, they can make mistakes, misunderstand questions or present information out of context. You are responsible for reviewing your assistant's knowledge and answers, for keeping your website and custom answers accurate, and for any decisions or promises made to your customers. Do not use an assistant to give medical, legal, financial or other professional advice, or for any decision with legal or similarly significant effects on a person without human review.

9. Acceptable use

You must not use owns.ai to: break any law; infringe anyone's rights; build assistants from sites you're not authorised to use; distribute malware or spam; deceive people into believing they're talking to a human where that is unlawful; collect sensitive information unlawfully; probe, overload or circumvent the service's security or limits; or resell the service without our written agreement. We may suspend assistants or accounts that breach these terms.

10. Our intellectual property

The owns.ai service, software, widget, design and brand are ours or our licensors'. These terms don't transfer any of it to you, except the right to use the service as described.

11. Availability and changes

We work hard to keep owns.ai available but don't guarantee uninterrupted service. We may change or improve features; if we remove a material feature from a paid plan, we'll give notice and you may cancel.

12. Disclaimers and limitation of liability

To the extent permitted by law, the service is provided "as is" without warranties of any kind, and we are not liable for indirect, incidental, special or consequential losses, lost profits or lost data. Our total liability for any claim relating to the service is limited to the amount you paid us in the 12 months before the claim. Nothing in these terms limits liability that cannot be limited by law, including rights you have under consumer protection laws.

13. Termination

You may close your account at any time from your profile. We may suspend or terminate accounts that breach these terms or that we're required to close by law. On termination, your right to use the service ends; sections that by their nature should survive will survive.

14. Governing law

These terms are governed by the laws of New South Wales, Australia, and you and we submit to the non-exclusive jurisdiction of the courts of New South Wales, unless the law of your country gives you the right to bring proceedings where you live. Nothing in these terms excludes any right you have under the Australian Consumer Law or other consumer protection laws that cannot be excluded.

15. Changes to these terms

We may update these terms. For material changes we'll email account holders at least 14 days before they take effect. Continuing to use owns.ai after that means you accept the updated terms.

16. Contact

XTO Pty Ltd (ACN 702 801 410)
L1 457 Elizabeth Street, Surry Hills, NSW 2010, Australia
[email protected]