GDPR & Data Protection
Last updated: April 2, 2026
1. Data Controller
xAI Lens operates as the data controller for personal data processed through this platform. For data protection inquiries: [email protected]
2. Legal Basis for Processing
- Consent: Account creation and optional features (newsletters, notifications)
- Contract: Providing platform services you requested
- Legitimate interest: Platform security, fraud prevention, analytics
- Legal obligation: Tax reporting, law enforcement requests
3. Your Rights Under GDPR
If you are in the European Economic Area (EEA), you have the following rights:
- Right of Access: Request a copy of all personal data we hold about you
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interest
- Right to Withdraw Consent: Withdraw consent at any time without affecting lawfulness of prior processing
4. Data Processing Details
| Data | Purpose | Retention |
|---|---|---|
| Email, display name | Account identification | Until account deletion |
| Password hash | Authentication | Until account deletion |
| IP address | Security, rate limiting | 30 days |
| Strategies, backtests | Platform service | Until account deletion |
| Donation records | XGold credit tracking | 7 years (tax compliance) |
| Analytics (anonymized) | Platform improvement | Indefinite |
5. International Data Transfers
Data may be processed on servers outside the EEA. We ensure adequate protection through standard contractual clauses and encryption.
6. Data Breach Notification
In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours and affected users without undue delay if the breach poses a high risk to their rights.
7. How to Exercise Your Rights
To exercise any GDPR right, email [email protected] with your request. We will respond within 30 days. You may also file a complaint with your local Data Protection Authority.
8. Cookies
We use only essential cookies for authentication. No tracking or advertising cookies are used. See our Privacy Policy for details.