X-MAN Privacy Policy
X-MAN is operated by Zero Security. Responsible person: Abdugaffor Odilov.
Policy version: 16 September 2026
Account and service data
We process your name, email address, password verification data and sign-in sessions to provide and protect your account. Plan requests may include a phone number. X-MAN stores connected device details, offices, project and worker settings, tasks, questions, answers, shared results and attached images to provide remote control and task history.
Your computer and AI services
Tasks run on a computer you connect. Prompts, selected images and relevant project context may be processed by the AI provider you select, such as OpenAI, Anthropic or Google. That provider and your local AI tools apply their own data policies. Deleting an X-MAN account does not erase project files or local/provider histories.
Images and voice input
Images you select and submit are sent to X-MAN and the connected computer for the requested task. Voice input is optional and uses your device’s speech recognition service, which may process audio remotely under its own policy. X-MAN submits the editable transcript as text; the app does not upload an audio recording to X-MAN.
Notifications and device storage
Optional notifications use Google Firebase Cloud Messaging. Installation identifiers, push tokens and delivery information are processed to deliver notifications. Notification text does not contain your task or result content. You can disable notifications in the app or device settings. Sessions use operating-system secure storage; language, appearance and pinned items are stored on your device. The current app does not include Firebase Analytics or Crashlytics.
Service providers and security
Hosting/database providers support the service, email delivery handles verification codes, and Firebase delivers push notifications. Authorized administrators may receive account and plan-request notifications through Telegram. These providers process the data needed for those functions. Network traffic uses HTTPS. Passwords are verified using salted hashes. Session and device permissions restrict access; no security measure can guarantee absolute protection.
Storage and deletion
Account and task data remain in the active service database while you use your account, unless removed through available controls. Website Profile provides account deletion without requiring an active paid plan. After email and password confirmation, the service deletes the account and its associated active database records and revokes sessions and connected-device access. Local files, AI-provider data and already delivered third-party messages are outside that database operation. Contact us for questions about retained operational records or hosting backups.
Your choices and policy changes
You may review your profile, disable notifications, stop using optional voice/image input and delete your account. Contact us about access, corrections or privacy requests. Changes to this policy are published here with an updated version date.
Open Profile to delete my account