Privacy Policy

1. Who We Are

XIGUSA ("we," "us," "our") is an AI consulting firm based in the DC metro area, serving clients across DC, Maryland, and Virginia. This policy explains how we collect, use, and protect information when you visit xigusa.com or use our tools and services.

2. Information We Collect

Information you provide:

• Name and email address (when you use our contact form, chat assistant, or book a call)
• Phone number, organization, organization size, and timeline (when supplied via the contact form)
• Business details you share during consultations
• Payment information (processed securely by Stripe — we never store card numbers)
• Information submitted through Fraud Assist (see Section 7)

Information collected automatically:

• Page views, click events, and session data (via our website analytics and product-monitoring tools)
• Aggregated, anonymized usage and interaction data (via our analytics providers)
• Conversion and advertising-attribution events (via our advertising partners)
• Device type, browser, and approximate location (IP-based)

Non-essential analytics and advertising tools load only after you accept them in our cookie banner. See Section 8.

3. How We Use Your Information

• To respond to your inquiries and provide consulting services
• To process payments and deliver purchased services
• To improve our website, tools, and user experience
• To send follow-up communications you've requested (we do not send unsolicited marketing)
• To route leads through our internal CRM for service delivery

4. Service Providers

We work with reputable third-party providers to operate our website and deliver our services. We share the minimum data necessary for each to perform its function, and each operates under its own privacy policy. By category, these include:

• Cloud hosting & infrastructure — Website hosting, application delivery, databases, and secure storage
• AI service providers — Enterprise AI platforms that power our chat, voice, and assistant tools (see Section 5)
• Analytics & product monitoring — Aggregated, largely anonymized usage and performance data
• Advertising & conversion partners — Conversion tracking and remarketing
• Email & messaging delivery — Transactional email and SMS notifications
• Scheduling — Appointment booking
• Stripe — Payment processing (PCI DSS compliant). We never store full card numbers.

We do not sell your personal information. A current list of specific providers is available on request at info@xigusa.com.

5. AI-Powered Services

Our chat assistant, voice assistant, and related tools are powered by enterprise AI service providers. Your messages, voice, or inputs may be processed by AI models to generate responses, and voice interactions may be recorded for quality and follow-up. We do not use your conversations to train third-party AI models. Transcripts may be reviewed by our team to improve service quality and respond to your inquiry. AI-generated output can be inaccurate or incomplete and should not be relied on as professional, legal, medical, or financial advice.

6. Data Retention

We retain your data only as long as necessary to provide our services or comply with legal obligations. Contact form submissions and chat transcripts are retained for up to 12 months. You may request deletion at any time by contacting us at info@xigusa.com.

7. Fraud Assist — Special Notice

Our Fraud Assist tool processes sensitive information related to potential elder fraud. This information is handled with special care:

• Fraud triage data is processed in real-time and is not stored permanently unless you choose to share a report
• We do not share your triage information with law enforcement or agencies unless you explicitly choose to do so
• The tool provides guidance only — it does not constitute legal advice
• For emergencies, always call 911

8. Your Rights

You have the right to:

• Request access to the personal data we hold about you
• Request correction or deletion of your data
• Opt out of non-essential cookies and tracking at any time by choosing “Necessary only” in our cookie banner, clearing the xig_consent cookie to be asked again, disabling cookies in your browser, or setting the xig_internal=1 cookie to exclude your sessions from our internal analytics (see our Cookie Policy)
• Withdraw consent for communications at any time

9. Security

We use industry-standard security measures including HTTPS encryption, enterprise cloud security services, role-based access control on internal systems, and PCI DSS-compliant payment processing. No method of electronic transmission is 100% secure, but we work to protect your information.

10. Contact Us

If you have questions about this privacy policy or your data, contact us at:

XIGUSA
DC Metro Area
Email: info@xigusa.com