Privacy Policy

Last updated: 5/25/2026

ONLINE PRIVACY POLICY AGREEMENT May 25th, 2026 INTRODUCTION XALON LLC ("Company") values your privacy. This Privacy Policy ("Policy") explains how we collect, use, and protect personal information from users who visit our websites or interact with our services. We are committed to transparency and meeting or exceeding current privacy standards. We reserve the right to amend this Policy at any time. Changes will be posted here. If you are a registered user, we will notify you via email of significant updates. If we use your information in a materially different way, you will be given the opportunity to opt in or out. This Policy applies to XALON LLC and any subsidiary company listed below (each, a “Subsidiary”), and it governs any and all data collection and usage by us. Through the use of https://www.xalon.ai and/or any Subsidiary website listed below, you are therefore consenting to the data collection procedures expressed in this Policy. Subsidiary Company Subsidiary Website XALON LLC XALON.AI / DBA EasyLegal AI™ https://easylegal-ai.com INFORMATION WE COLLECT We may collect the following information: • Voluntarily Provided Information: Name, email, phone number, billing info, etc. • Automatically Collected Information: Cookies, device ID, IP address, browser type, geolocation, and site usage via server logs and analytics. • Images Uploaded: May be used for internal testing, training, and retention. • Demographic & Behavioral Data: May include gender, income, interests, device data, etc. COOKIES AND TRACKING TECHNOLOGIES We use cookies, pixels, and tracking tools (like Facebook Pixel and Google Analytics) to personalize user experience, analyze traffic, and improve performance. You may opt out through your browser or tools like optout.networkadvertising.org. WHY WE COLLECT DATA We collect your data to: • Deliver and personalize services • Communicate offers, updates, and promotions (with your consent) • Improve the experience on our websites • Conduct analytics and market research • Ensure compliance and fraud prevention DATA RETENTION We retain personal data only as long as necessary, considering: • Legal obligations and statutes of limitation • Ongoing business relationships • Consent status and data relevance • Regulatory guidance and audit requirements USE OF COLLECTED INFORMATION We do not sell or rent personal data. We may: • Provide requested services • Offer updates on services or offers • Invite you to surveys or beta features • Share data with trusted processors (Stripe, Google, Facebook, etc.) under confidentiality and data agreements THIRD-PARTY SERVICES We use third-party tools such as: • Google Analytics • Meta (Facebook/Instagram) Pixel • Stripe or other payment processors • LinkedIn Insight Tag • YouTube embeds These services may collect data under their own policies. You are encouraged to review their respective privacy terms. INTERNATIONAL DATA TRANSFERS Our infrastructure is based in the United States. If you reside outside the U.S. (including the EU, UK, or Brazil), your data may be transferred to and stored on U.S.-based servers. By using our services, you consent to this transfer and processing in accordance with applicable data protection laws. YOUR RIGHTS Depending on your jurisdiction (e.g., GDPR, CCPA), you may have the right to: • Access, update, or delete your data • Withdraw consent at any time • Request a copy of the personal data we store • Opt-out of direct marketing communications To exercise these rights, contact us at LEGAL@XALON.AI CHILDREN UNDER 13 We do not knowingly collect personal information from children under 13. If such data is discovered, it will be deleted immediately. SECURITY We implement strong security controls: • HTTPS encryption • Secure storage systems • Access controls limited to authorized personnel • Periodic system audits Despite our efforts, no system is fully immune to breaches. We will notify users promptly if a breach is discovered. OPT-OUT / UNSUBSCRIBE To unsubscribe from marketing communications, email us at LEGAL@XALON.AI. For third-party platforms (e.g., Facebook), follow their specific opt-out procedures. LINKS TO EXTERNAL SITES We are not responsible for the practices of sites linked from our website. Please review those policies independently. ACCEPTANCE OF TERMS By using this website, or any Subsidiary website, you are hereby accepting the terms and conditions stipulated within this Privacy Policy Agreement. If you are not in agreement with our terms and conditions, then you should refrain from further use of our sites. In addition, your continued use of our website following proper notification or the posting of any updates or changes to our terms and conditions, shall mean that you agree and accept such changes. HOW TO CONTACT US If you have any questions or concerns regarding this Privacy Policy as it relates to our website, please feel free to contact us at the following email, telephone number or mailing address: Email: LEGAL@XALON.AI Telephone Number: (423) 556-9764 Mailing Address: XALON LLC 300 Ashland Terrace Chattanooga, TN 37415

AI processing

Easy Legal AI uses third-party AI providers to power document drafting, contract analysis, the legal chatbot, and template generation. When you use these features the text you submit (and, for analysis, the contents of the contract you upload) is transmitted to the providers listed below. We do not sell your data.

  • OpenAI (US) — receives the prompts, form answers, and document text needed to generate drafts and chat responses. Per OpenAI's API policy, inputs and outputs are not used to train their models and are retained for up to 30 days for abuse monitoring before deletion.
  • Google Gemini via Lovable AI Gateway (US) — receives prompts and document content for fallback generation, classification, and analysis tasks. Inputs and outputs are not used for training and are retained transiently for safety review.

You can withdraw consent and disable AI features at any time from Profile → AI & Privacy. Disabling AI features stops further data transmission but does not delete content already processed by providers.

Third-party services we share data with

Easy Legal AI uses the following sub-processors. All data in transit is encrypted with TLS 1.2+. We do not sell your data and do not use it for cross-app advertising.

  • Supabase (US) — hosts authentication, database, file storage, and edge functions. Receives email, password hash, profile data, documents, and form answers. Retained for the life of your account.
  • Stripe (US/global) — processes subscriptions and one-time payments. Receives email, name, billing address, and card token (we never see full card numbers). Retention per Stripe's policy.
  • Apple App Store / Google Play Billing — when you purchase inside the iOS or Android app, the platform processes payment and shares only the purchase receipt and product ID with us.
  • Resend (US) — sends transactional and recovery emails. Receives email address and message content.
  • OpenAI (US) — see the AI processing section above.
  • Google Gemini via Lovable AI Gateway (US)— see the AI processing section above.
  • Filing partner (US) — when you order LLC formation, registered agent, or annual report services, we forward the business and owner details required to file with the state through a licensed white-label filing provider.
  • Google Ads conversion tracking (web only) — loaded only on the public website, not inside the iOS or Android app. Receives anonymous click identifiers to attribute conversions.

Account & data deletion

You can permanently delete your account and all associated data from Profile → Delete Account, or without signing in via our public deletion page at easylegal-ai.com/delete-my-data. Deletion is irreversible and completes immediately for self-service requests.