Cookie Policy

This Cookie Policy explains what cookies are, how we use them, the types of cookies we deploy, and how you can manage your preferences. Our use of cookies may involve the collection and processing of Personal Data. For more information, please refer to our Privacy Policy.

Cookies are small text files placed on your device. We use standard browser HTTP cookies to maintain session states and credentials. We also utilize local/session storage (Web Storage) for interface selections, IndexedDB for caching heavy vector indexes or schemas locally, and pixel tags/web beacons to track email delivery.

1. Strictly Necessary/Essential: Mandatory for security validation and logins. 2. Functional/Preference: Remembers user settings like Dark/Light theme and locale. 3. Analytics/Performance: Measures traffic, latencies, and GPU metrics. 4. Advertising/Marketing: Delivers targeted promotional upgrades. 5. AI Personalization/ML: Stores chat history pointers and LLM nodes.

We deploy cookies for key reasons: Authentication and Session Management (keeping you logged in), Security and Abuse Prevention (preventing CSRF and tracking abnormal access patterns), user preference storage, AI Personalization (managing chat interface history context), and Billing operations (verifying Stripe invoice records).

Below are the key cookies we set: - session_id (Essential, Session): Identifies current active user session. - csrf_token (Essential, Session): Prevents CSRF security threats. - refresh_token (Essential, 30 days): Automatically refreshes access tokens. - remember_me (Preference, 30 days): Remembers login status. - preferred_language (Preference, 1 year): Stores user language. - theme (Preference, 1 year): Preserves light/dark modes. - analytics_id (Analytics, 2 years): Third-party visitor tracking. - device_id (Security, Persistent): Identifies client hardware. - security_token (Essential, Session): Encrypted auth validation.

Third-party cookies may be set on your device by our integration partners. Some potential providers include Google Analytics and Mixpanel for metrics; Cloudflare and AWS for infrastructure security; Stripe and Razorpay for invoice processing; and OpenAI, Anthropic, or Google AI APIs for model coordination.

To deliver responsive AI agent behaviors, we utilize memory cookies including: Conversation History (links chat queries to active sessions), Context Memory (saves state between prompts), Workspace Selection (remembers active PostgreSQL tenant RLS directory), and Rate Limits (monitors local query frequencies per user).

We deploy a Consent Management banner on our Services. When you first visit, you can choose to Accept All, Reject All, or Customize settings. GDPR & DPDP Act 2023 compliance ensures no non-essential cookies are set before you provide active, affirmative consent.

You can block or delete cookies directly in your browser settings. Refer to Chrome (Third-party Cookies), Safari (Manage Website Data), Firefox (Enhanced Tracking Protection), Edge (Site Permissions), or Brave/Opera configuration pages to modify parameters.

We support the Global Privacy Control (GPC) signal. If your browser broadcasts a GPC signal, our system interprets it as an opt-out request for non-essential cookies. We do not currently track users across third-party properties in response to legacy Do Not Track (DNT) settings.

Session Cookies: Deleted automatically when you close your browser or log out. Persistent Cookies: Remain stored on your device for a set period (maximum two years) unless cleared manually.

We implement strict security flags on all cookies: Secure (forces cookies to be sent only over HTTPS), HttpOnly (prevents client-side scripts from reading auth cookies, mitigating XSS risks), and SameSite=Strict/Lax (mitigates CSRF vulnerabilities).

Cookies set by third-party infrastructure (such as payment gateways or cloud nodes) may involve cross-border transfers. All such transfers comply with applicable DPDP Act 2023 regulations and Standard Contractual Clauses (SCCs).

Our Services are restricted to individuals above the age of majority. We do not knowingly track or deploy analytics cookies on devices used by children under the age of 18 without parental authority.

Under India's DPDP Act, 2023 and global privacy frameworks (GDPR, CCPA), you hold legal rights over your cookies data, including the right to access and review cookie-linked data, request correction or erasure, and withdraw consent at any time.

We may update this policy periodically to reflect changes in our operational procedures. We will publish the revised policy with a new version number and effective date on this page.

Company: Xarwiz Technologies LLP. Registered Office Address: Sector 62, Noida, Uttar Pradesh, India - 201301. Support Email: support@xarwiz.com. Privacy Email: privacy@xarwiz.com. Grievance Officer: Ashish Pratap Singh Tomar (grievance@xarwiz.com).

Cookie: A small text file sent to register identifiers. Personal Data: Details identifying a real person. Third Party: Entities other than the user or primary provider. Tracking Technology: Pixels, beacons, SDKs, or local database segments.