Privacy Policy

ExeiBit ("ExeiBit", "we", "us") operates ExeiBit OS, an AI business operating system available at https://www.exeibit.com. ExeiBit is headquartered in Amsterdam, the Netherlands, and acts as the data controller for the personal data described in this policy.

Questions about this policy or your data: start@exeibit.com.

• Account data: name, email address, profile picture, language and workspace preferences, provided by you or by your sign-in provider.
• Usage data: pages viewed, features used, requests to our AI capabilities, timestamps, and coarse device/browser information.
• Content you create: Bits, workflows, prompts, documents and other material you store in the product.
• Billing data: subscription tier, credit balance and invoice records. Card details are handled by our payment processor and never stored by us.
• Support and communication data: messages you send us.

If you sign in with Google or connect a Google account, we request only the minimum scopes needed to deliver the feature you enabled:

• Basic profile and email (openid, profile, email) — used solely to create and authenticate your ExeiBit account and to show your name and avatar inside the product.
• Any additional Google scope is requested only at the moment you explicitly enable the related integration, is used only to perform the action you asked for, and can be revoked by you at any time.

We do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except with your explicit consent, for security or legal reasons, or when the data is aggregated and anonymised for internal operations.

ExeiBit's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• To provide, operate and secure the ExeiBit OS product and your workspace.
• To authenticate you and prevent fraud, abuse and unauthorised access.
• To process payments, credits and subscriptions.
• To provide support and send essential service notices.
• To improve reliability and performance using aggregated, non-identifying metrics.

Legal bases under the GDPR: performance of a contract, our legitimate interest in running a secure and reliable service, compliance with legal obligations, and your consent where required.

We never sell your personal data. We share it only with processors acting on our instructions:

• Hosting and database infrastructure — to run the application and store your data.
• Payment processing — to handle subscriptions and invoices.
• Email delivery — to send transactional messages.
• AI model providers — to process the requests you submit to AI features.

We may also disclose data when legally required, or to protect the rights, safety and integrity of ExeiBit and its users.

Data is primarily processed within the European Economic Area. Where a processor operates outside the EEA, transfers are covered by adequacy decisions or Standard Contractual Clauses.

We keep account and content data for as long as your account is active. When you delete your account, personal data is removed within 30 days, except records we must retain for legal, tax or security reasons. You can request deletion at any time by emailing start@exeibit.com.

You can disconnect Google access at any time from your account settings or via Google Account permissions. Data obtained through that connection is deleted on disconnection unless you asked us to keep the resulting output.

Data is encrypted in transit (TLS) and at rest. Access is restricted by role-based permissions and row-level security, and privileged actions are recorded in an audit trail. No system is perfectly secure, but we work continuously to protect your data.

• Access a copy of your personal data.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Export your data in a portable format.
• Object to or restrict certain processing, and withdraw consent.
• Lodge a complaint with your supervisory authority (in the Netherlands: Autoriteit Persoonsgegevens).

To exercise any of these rights, email start@exeibit.com. We respond within 30 days.

We use strictly necessary cookies for authentication and session security, and preference cookies to remember your language and theme. We do not use advertising cookies or cross-site tracking.

ExeiBit is not intended for children under 16 and we do not knowingly collect their personal data.

We may update this policy as the product evolves. Material changes are announced in the product or by email, and the "last updated" date above always reflects the current version.

ExeiBit — Amsterdam, the Netherlands.
Privacy contact: start@exeibit.com