Privacy Policy

1. Introduction

Xenco Labs, Inc. (“Xenco Labs,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at xencolabs.com and our suite of applications, including ResumeCoach, Blogcraft, Imagecrafter, and other services we operate.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials through our identity provider (Clerk). We may also collect profile information you choose to provide.

Usage Data

We automatically collect certain information when you visit our site, including your IP address, browser type, operating system, referring URLs, and pages viewed. This helps us improve our services and understand how our products are used.

Application Data

Depending on the Xenco Labs application you use, we may collect content you create (such as resumes, blog posts, or image prompts), preferences, and configuration settings.

3. Third-Party API Integrations

Xenco Labs integrates with third-party platforms to provide enhanced functionality. When you connect a third-party account, you explicitly authorize us to access certain data from that platform.

Upwork Integration

When you connect your Upwork account via OAuth, we may access:

• Job listings and marketplace search data
• Your Upwork profile information (name, skills, work history)
• Job analytics and market trends

We use this data to provide AI-powered job matching, scoring, and proposal drafting assistance. We do not submit proposals or perform actions on your behalf without your explicit approval.

QuickBooks / Intuit Integration

If you connect your QuickBooks account, we may access financial data such as invoices, payments, and expense records to provide business analytics and reporting features. Access is limited to the scopes you explicitly authorize.

OAuth Tokens & Credentials

When you authorize a third-party connection, we receive OAuth access tokens and refresh tokens. These tokens are:

• Encrypted at rest using industry-standard encryption (AES-256)
• Never shared with other users or third parties
• Used only to access the specific data you authorized
• Revocable at any time by disconnecting the integration in your account settings or revoking access directly on the third-party platform

4. How We Use Your Information

• To provide, operate, and maintain our services
• To personalize your experience and deliver relevant content
• To process transactions and send related information
• To send administrative information, updates, and security alerts
• To respond to your comments, questions, and support requests
• To analyze usage patterns and improve our services
• To detect, prevent, and address technical issues and fraud
• To provide AI-powered features such as job matching, content generation, and analytics

5. Data Storage & Security

We implement appropriate technical and organizational security measures to protect your personal information. This includes encryption in transit (TLS/SSL), encryption at rest for sensitive data such as API tokens, regular security assessments, and access controls limiting data access to authorized personnel only.

Our services are hosted on reputable cloud infrastructure providers. While we strive to use commercially acceptable means to protect your data, no method of transmission or storage is 100% secure.

6. Data Retention & Deletion

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. API tokens for third-party integrations are retained only while the integration is active.

You may request deletion of your account and associated data at any time by contacting us at privacy@xencolabs.com. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

7. Third-Party Services

Our services may contain links to or integrations with third-party websites and services (including Upwork, Intuit/QuickBooks, Clerk, and Vercel). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with your information.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Revoke consent: Disconnect any third-party integrations and revoke OAuth access at any time
• Data portability: Request your data in a portable format

To exercise any of these rights, contact us at privacy@xencolabs.com.

9. Children's Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of our services after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at: