Terms, privacy & AI disclosures

Terms of service

Site use, security logging and analytics choices

These terms describe use of the public site and account services. Creating an account requires affirmative acceptance of the terms and acknowledgment of the privacy notice. Visiting, scrolling, or continuing to browse does not by itself give consent to optional analytics, AI processing, or every form of data collection.

When a supported site page loads and its visit-logging script runs, we automatically record the IP supplied by our hosting edge, page name, timestamp, and broad device and browser categories inferred from the request. Visit logging does not set a tracking cookie and runs independently of optional analytics choices. We use these limited logs to review site access and abuse. We also record account security events, including signup, login, failed login and recovery activity, timestamps, and the IP address supplied by our hosting edge. These security measures operate independently of optional analytics and support abuse prevention, rate limits and Terms enforcement. Our infrastructure providers may also process request data to deliver and protect the website. This notice does not authorize unrelated tracking.

Optional page analytics starts only when you choose Allow analytics. Choosing Essential only leaves optional analytics off without preventing public browsing. You can change your choice through Cookie settings. Browser Global Privacy Control and Do Not Track signals disable optional analytics. See the Privacy notice for the information collected, access controls and retention periods.

For suspected abuse or Terms violations, the owner may impose a recorded, time-limited account suspension or exact-IP restriction on account services. A shared IP is not proof of identity or misconduct. Contact legal@xyqen.com to request review of a restriction.

What this service is

XYQEN Atlas provides an educational aircraft exhibit and a separate Case Analysis document workspace. Aircraft models, systems, fuel visuals, aerodynamics and flight sequences are illustrative, not manufacturer engineering data or approved operating guidance.

Case Analysis helps adults organize their own documents and review AI-generated drafts. It is not a law firm, attorney, emergency service, court filing system, evidence custodian or substitute for professional advice. Using it does not create an attorney-client relationship or promise confidentiality protected by legal privilege.

Your account and content

You must be at least 18 and entitled to use the materials you upload. Keep a unique password and your recovery key private. Email ownership is not currently verified. Recovery uses your key; email password resets are not available. You are responsible for reviewing records and maintaining your own backups.

You retain your rights in your content. You permit us and our service providers to process, store and transmit it only as needed to deliver the features you request, maintain security, meet obligations, and respond to support requests. AI processing requires a separate in-app selection and consent.

OSINT research workspace

OSINT provides external resource links, private investigation notes, source URLs, user-applied entity labels and review states, public DNS snapshots, archive-availability results and news-search metadata. Saving a link does not fetch or archive that page. External resources have separate accounts, terms, access limits and privacy practices. Live DNS queries send the requested domain to Google Public DNS only when you request the lookup and confirm. Archive lookups send the selected domain to Internet Archive; news searches send the confirmed query to GDELT. Returned metadata is saved privately. We do not send account files or case notes to these providers. These queries are optional and subject to provider terms, logging and availability. Saved sources and exports may contain errors; connections represent shared user labels, not verified relationships or identity. The service does not connect to private accounts, provide live person tracking, or automatically collect personal dossiers.

Acceptable use

Do not upload material you are prohibited from disclosing, use the service to harass or unlawfully monitor people, impersonate others, introduce malware, access another account, bypass limits, or violate another person’s rights. Do not use AI output as the sole basis for a legal or other consequential decision.

Beta limits and availability

The current beta is free and initially limited to 50 accounts, 20 files and 50 MB per account, 5 MB per file, and three AI review attempts per account in a rolling 24-hour window. Shared AI capacity is limited to 20 attempts per rolling 24 hours. Failed provider attempts may count. Features and capacity may change; any paid offering would require separate notice and agreement.

Processing currently depends on the page remaining open. Availability, error-free operation and recovery of lost content are not guaranteed. Download important materials. We may restrict accounts for security, abuse or service protection. Contact support to raise an access concern.

Ending use and changes

You can delete individual records or delete your account from Account settings. Export what you need first. Revised material terms will be posted here; continued use is subject to applicable notice and consent requirements. Nothing in these terms excludes rights that applicable law does not permit us to exclude.

Privacy notice

What is collected and why

Case Analysis stores your email, salted password hash, hashed recovery key, accepted terms version, account creation time, session identifiers, upload metadata and file bytes, notes, reviewed timeline entries and connections, AI requests and responses, and generated reports. These support account access, document organization and the features you use. Rate-limit records use hashed IP-derived identifiers. Hosting and AI providers may also process operational and security logs.

Access and providers

Case Analysis accounts use separate records from the site owner’s Admin workspace. Requests are checked on the server against the signed-in account. There are no public file-sharing links. This is not end-to-end encryption: the service must read files to provide downloads and AI analysis, and authorized operators or providers may access data as needed for operation, security, support or legal obligations.

Hosting infrastructure uses OpenAI Sites and Cloudflare services, including database and object storage. If you explicitly request AI analysis, the selected file and question are transmitted to OpenAI. Provider policies and retention obligations apply; do not assume zero retention, a particular storage country, or a regulated-data agreement.

Visitor analytics, cookies and security activity

Optional analytics runs only after you choose Allow analytics. We count page loads by page and day for up to 90 days, without visitor identifiers, IPs, full URLs, referrers, or case content in analytics. Cookie settings lets you withdraw consent for future collection. Global Privacy Control and Do Not Track disable optional analytics. A preference cookie remembers your choice for 180 days.

Separately, automatic visit logs record IP, an allowlisted page name, time, and broad device/browser categories. These categories come from request headers and may be inaccurate or spoofed. The application does not store the complete user-agent string, URL queries, referrers, precise location, or a persistent visitor ID. Visit logs are not linked to a signed-in account by the logging endpoint. Script blockers, disabled JavaScript and rate limits can prevent logging. Optional analytics preferences and browser privacy signals do not disable these separately disclosed visit logs. Account security logs additionally record signup, login, failed login and account recovery events, timestamps, an account identifier where applicable, and the IP supplied by our hosting edge. These records support abuse prevention and are visible only in owner Admin. They do not include passwords, session cookies, document contents or email text. Security records older than 30 days are purged on subsequent security activity or Admin review; if the service is idle, physical deletion may occur later. Infrastructure logs have separate provider retention.

The owner may suspend account access or restrict an observed IP from account services for 1, 7 or 30 days for suspected abuse or Terms violations. Active sessions are revoked on account suspension. IP restrictions can affect shared networks and do not identify a person. Restrictions require a recorded reason and may be lifted. Restriction history is retained until 180 days after expiration and purged on subsequent security activity or Admin review. Contact legal@xyqen.com to appeal, request access to your records, or ask privacy questions. Security and restriction records may remain for these periods after account deletion.

Essential cookies

Case Analysis uses essential session and anti-forgery cookies. Sessions expire after 30 minutes of inactivity or eight hours total. The aircraft viewer stores device-local display preferences. No advertising tracker is added by the Case Analysis feature. No security system is risk-free; avoid uploading material you are not authorized to send to this service.

Retention, deletion and your choices

Active records are retained until you delete them or your account, subject to service and legal needs. Deleting an original does not delete separately saved AI reviews, notes or reports. Account deletion removes the account’s records and objects from active application storage. Infrastructure backups, logs and provider-held copies may have separate retention schedules; immediate erasure from every provider system is not promised.

Download files and reports through your account. For privacy, access or deletion questions, contact legal@xyqen.com with your account email and a description of the request, without sending case contents. We may need to verify your authority before acting. The service is intended for adults, not children.

AI and sensitive-document disclosure

AI may produce inaccurate, incomplete, biased or fabricated statements, dates, quotations and citations. Check the source yourself. Outputs are drafts for personal organization, not legal advice, verified evidence, findings about a person, predictions or certified reports.

Only the sources you select and your question are sent for that request. Email Responses also sends the incoming email and drafting goal you provide, cross-references up to four selected originals, and saves the incoming text, draft and source references in your account. It does not connect to a mailbox or send email. Edits to a reply do not automatically update its AI review notes. Requests use the OpenAI API with response storage disabled through the API’s store setting; this does not mean all provider retention is disabled. Saved results remain in your account until deleted.

Timeline notes and relationship connections require your review and save action. A document hash identifies supplied bytes; it does not prove origin, truthfulness, chain of custody or authenticity. PDF exports use a basic Latin font and may replace unsupported characters. Originals remain authoritative.

Before uploading sensitive or restricted information, consider redaction and whether you have permission to use cloud processing. Consult an appropriate professional about confidentiality, privilege, court orders, filing obligations or evidence preservation.