Privacy

Last updated 15 October 2026

What xoid keeps about you, why, and what you can do about it.

Your account

xoid stores your email address and, if you give it, your name. You sign in with a one-time code we email you; there’s no password. Your account belongs to a team, with a role (designer or developer) and a monthly allowance for the assistant.

Emails we send

Only two kinds, both from hello@xoid.design:

• a sign-in code, when you ask to sign in;
• an invite, when a developer on a team invites you by entering your email address in xoid.

We don’t send newsletters or marketing email, and we never sell or share email addresses. If an invite reached you by mistake, ignore it: nothing happens unless you open it and sign in.

Invites

An invite records the email address it was sent to, who sent it, the team and the app it’s for. It works for 30 days and is deleted 60 days after that.

The assistant

When you ask xoid’s assistant for something, what you type and the parts of your app’s code it needs are sent through xoid’s server to OpenRouter, which passes them to the AI model your team uses. xoid’s server doesn’t keep what you send or what comes back. It records what each request cost, to count it against your monthly allowance.

Your app’s code

Your team’s app stays on your Mac and in your company’s GitHub. xoid’s servers don’t store it, apart from the parts the assistant needs for a request, as above.

Keeping invites safe

To stop people guessing invite links, we count how often each network (IP) address looks up an invite. Each count lasts a few minutes, then expires.

Where it’s kept

On Amazon Web Services in the United States (Oregon).

Deleting your account

Write to hello@xoid.design from your account’s address, and we’ll delete your account, your team membership and your usage records within 30 days. A developer on your team can also remove you from the team at any time.

Questions

Write to hello@xoid.design. If this page changes, the date at the top changes too.