Xinference Privacy Policy

1. Introduction

This Privacy Policy explains how Xinference Australia Pty Ltd ("Xinference", "we", "us", or "our") collects, uses, stores, and protects information when you visit our website, contact us, request a demo, use our services, or deploy the Xinference Enterprise AI Platform.

Xinference is designed for enterprise-grade private, on-premises, and hybrid deployment scenarios. In customer-controlled deployment environments, customer inference data is processed within the customer-designated infrastructure, unless the customer separately configures external services or integrations.

This Privacy Policy does not replace any separate enterprise agreement, data processing agreement, order form, or other written contract signed between Xinference and a customer. If there is a conflict between this Privacy Policy and a separately signed agreement, the signed agreement will control to the extent of that conflict.

2. Scope of This Policy

This Privacy Policy applies to:

• Visitors to our website.
• Users who submit forms, request demos, contact sales, or contact support.
• Administrative users of the Xinference Enterprise AI Platform.
• Enterprise customers using Xinference private, on-premises, or hybrid deployments.

This Privacy Policy does not apply to third-party websites, services, model providers, cloud platforms, or integrations that are not controlled by Xinference.

3. Customer Inference Data

For self-hosted, private, or customer-controlled deployments, Xinference does not by default collect, transmit, intercept, or store customer inference data outside the customer-controlled environment.

Customer inference data may include:

• Natural language prompts.
• Multimodal inputs.
• Proprietary knowledge base documents.
• Model inputs and outputs.
• Generated AI responses.
• Customer datasets and model weights.

Customers retain ownership and control over their customer inference data. Xinference does not use customer inference data to train models, improve models, or build datasets unless the customer has separately provided explicit written authorisation.

Customers are responsible for their own deployment configuration, access permissions, network settings, external integrations, and any third-party services they choose to connect to the Platform.

4. Information We May Collect

Depending on how you interact with Xinference, we may collect the following categories of information.

4.1 Website and Contact Information

When you visit our website or contact us, we may collect:

• Name.
• Business email address.
• Company name.
• Job title.
• Phone number, if provided.
• Inquiry content.
• Demo request details.
• Communication records.

4.2 Administrative Account Information

For enterprise platform administration, we may collect:

• User names.
• Business email addresses.
• Account roles and permissions.
• Access control settings.
• Authentication and security event records.

4.3 Operational Telemetry and Metrics

Where enabled by the customer or required for enterprise support, we may collect limited operational and administrative data, such as:

• GPU, NPU, CPU, and memory utilisation.
• Cluster health metrics.
• Service availability metrics.
• Token generation speed.
• Cache usage.
• Non-sensitive API usage statistics.
• System logs or diagnostics provided by the customer for support purposes.

We aim to limit telemetry to information needed for platform observability, troubleshooting, security, and service improvement. Telemetry should not include customer prompts, knowledge base documents, model outputs, or proprietary business data unless the customer voluntarily provides such materials for support purposes.

4.4 Support Information

When you request technical support, we may collect information that you voluntarily provide, including:

• Support tickets.
• Error messages.
• Screenshots.
• Deployment configuration information.
• Diagnostic logs.
• Related documents or technical materials.

Please avoid sending confidential business data, personal data, secrets, tokens, or credentials through support channels unless strictly necessary and authorised by your organisation.

5. How We Use Information

We may use the information described above to:

• Provide, operate, and maintain our website and services.
• Respond to inquiries, demo requests, and support requests.
• Manage enterprise accounts and access control.
• Provide technical support and troubleshooting.
• Monitor platform health and availability.
• Improve product reliability, security, and performance.
• Communicate product updates, security notices, and service information.
• Prevent fraud, abuse, unauthorised access, and security incidents.
• Comply with legal, regulatory, contractual, or audit obligations.

We do not sell customer personal information or customer business data.

6. Legal Bases for Processing

Where applicable law requires a legal basis for processing personal data, we may rely on one or more of the following bases:

• Performance of a contract.
• Legitimate business interests, such as providing support, improving security, and operating our services.
• Compliance with legal obligations.
• Consent, where required by law, such as for certain marketing communications or non-essential cookies.

7. How We Share Information

We may share information only in limited circumstances:

• With authorised employees, contractors, or service providers who need access to perform work for Xinference.
• With enterprise customers' authorised administrators or representatives.
• With infrastructure, analytics, communication, or support service providers that help us operate our business.
• When required by law, regulation, legal process, or government request.
• To protect the rights, property, security, or safety of Xinference, our customers, or others.
• In connection with a merger, acquisition, financing, restructuring, or similar corporate transaction.

We require service providers to protect information and use it only for authorised purposes.

8. Data Retention

We retain personal data and operational information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law, contract, security, audit, or legitimate business needs.

Support records, account information, and telemetry may be deleted, anonymised, or aggregated when they are no longer needed.

Customers may request deletion of certain information, subject to legal, contractual, security, and technical limitations.

9. Security

We use reasonable technical, organisational, and administrative safeguards to protect information against unauthorised access, loss, misuse, alteration, or disclosure.

These safeguards may include:

• Role-based access control.
• Authentication and access management.
• Encryption in transit and, where applicable, encryption at rest.
• Audit logs.
• Security monitoring.
• Least-privilege access practices.
• Internal security review and access restrictions.

No system is completely secure. Customers are responsible for securing their own infrastructure, credentials, network environment, deployment configuration, and user access permissions.

10. International Data Transfers

Depending on your location and the services used, information may be processed in countries or regions outside your place of residence or business. Where required by applicable law, we will use appropriate safeguards for international data transfers.

For private or on-premises deployments, customer inference data is generally processed within the customer-controlled environment, unless otherwise configured by the customer.

11. Your Rights and Choices

Depending on your location and applicable law, you may have rights to:

• Access personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of personal data.
• Restrict or object to certain processing.
• Withdraw consent where processing is based on consent.
• Request a copy of your personal data.
• Opt out of marketing communications.

To exercise these rights, contact us at contact@xprobe.io. We may need to verify your identity before responding.

12. Children's Privacy

Our website and services are intended for business and professional users. They are not directed to children. We do not knowingly collect personal data from children.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date and, where appropriate, provide additional notice.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at: