Privacy Policy

Introduction

X2D Tecnologia ("we", "us", "our") operates the X2D Scout platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

We collect information that you provide directly and information collected automatically:

Account Information

• Email address (required for account creation and communication)
• Full name (for personalization and identification)
• Password (stored using secure one-way encryption)
• Language and notification preferences

Uploaded Content

• Audio files (for transcription and analysis)
• Video files (for transcription and analysis)
• CSV files (for batch analysis)
• Generated transcriptions of your files
• AI-generated analysis results

Technical Information

• IP address (for security and fraud prevention)
• Device fingerprint (browser type, screen size, timezone) for trusted device recognition
• Usage logs and audit trails for security monitoring

How We Use Your Information

• Provide, maintain, and improve our services
• Process your files through transcription and AI analysis
• Detect, prevent, and address security issues and fraud
• Analyze usage patterns to improve user experience
• Send service-related notifications and updates

Third-Party Services

We use trusted third-party services to provide our platform:

• Microsoft Azure: Cloud infrastructure, file storage, speech-to-text transcription, and AI analysis (data processed in accordance with Microsoft's enterprise data protection standards)
• Cloudflare: Bot protection and security verification (Turnstile)

Cookies and Local Storage

We use only essential cookies and local storage for functionality: a language preference cookie to remember your selected language, and local storage for authentication tokens and trusted device recognition. We do not use tracking or advertising cookies.

Data Retention

We retain your account data for as long as your account is active. Uploaded files and analysis results are retained according to your organization's settings and can be deleted at any time. Audit logs are retained for security and compliance purposes. Upon account deletion, your personal data is removed within 30 days, except where retention is required by law.

Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Withdraw consent for optional data processing

To exercise these rights, contact us at privacy@x2d.com.br

Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, secure password hashing, rate limiting, IP blocking for suspicious activity, and regular security audits. However, no method of transmission over the Internet is 100% secure.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

X2D Tecnologia
Email: privacy@x2d.com.br