Xzar Privacy Notice

Effective date: October 15, 2026

369 Mint LLC, a Wyoming limited liability company offering services under the name Xzar ("Xzar," "we," "us," or "our"), operates the Xzar website and AI evaluation services. This Privacy Notice explains how we collect, use, disclose, and retain personal information when you visit our website, contact us, register for an account, or use our API, plug-in, or related evaluation services.

1. Information We Collect

Depending on how you interact with Xzar, we may collect:

• Contact information: name, work email address, company, and information you provide in a contact or inquiry form.
• Account information: account identifiers, authentication information, API-key records, account settings, credit balances, and purchase history.
• Evaluation and service data: evaluation tasks run, AI-generated responses and other submissions, scores, reports, tool-call records, timestamps, and information about how the service is used.
• Technical information: IP addresses, device and browser information where available, request records, diagnostic information, and security logs.
• Communications: information contained in messages you send us and our responses.

Payment card details are processed by our payment processor. We may receive transaction information, such as payment status, amount, and transaction identifiers, but we do not intend to store full payment-card details ourselves.

2. How We Collect Information

We collect information directly from you when you submit a form, contact us, register, purchase credits, or use our services. We also generate information through the operation of our website and evaluation services, including technical logs and evaluation records. Our service providers may process information on our behalf to provide hosting, payment processing, email, and related services.

3. How We Use Information

We use information as reasonably necessary to:

• respond to inquiries and communicate with you;
• create and administer accounts and authenticate access;
• provide evaluation tasks, scores, reports, and related services;
• process payments and maintain transaction records;
• secure, troubleshoot, maintain, and support the service;
• detect misuse, fraud, security incidents, and violations of our terms;
• meet legal obligations and establish, exercise, or defend legal claims; and
• analyze service reliability and performance using aggregated statistics designed not to identify individuals or customers.

We do not use customer submissions to train or fine-tune AI models unless separately agreed in writing or otherwise lawfully permitted and disclosed as required.

4. How We Disclose Information

We may disclose information to:

• Service providers that help us operate the service, including hosting, payment-processing, and email providers;
• Professional advisers who need the information to provide legal, accounting, security, or similar services;
• Authorities or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, security, or the service; and
• A successor or transaction partner in connection with a proposed or completed merger, financing, acquisition, restructuring, or sale of all or part of our business, subject to appropriate safeguards where required.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use advertising trackers.

5. Retention

We retain information for as long as reasonably necessary for the purposes described in this Notice, including providing the service, maintaining security, resolving disputes, and meeting legal or accounting requirements.

As a general policy:

• Contact and inquiry records are retained for up to 24 months after our last substantive contact.
• Account, billing, evaluation, and service records are retained while an account remains open and generally for up to 24 months afterward.
• We may retain particular records for longer where required by law, needed to resolve a dispute, or necessary to maintain security or verify transactions and results.

Actual retention may vary by record type. Information may remain in backups for a limited period after deletion from active systems.

6. Your Choices and Privacy Requests

You may contact us to request access to, correction of, or deletion of personal information, or to close your account, by emailing hello@xzar.si. We may need to verify your identity or authority before responding. We will handle requests in accordance with applicable law, including any applicable exceptions to deletion or other rights.

If a privacy law gives you additional rights, such as the right to know, correct, delete, or opt out of certain processing, you may exercise those rights using the contact method above. We will not unlawfully discriminate against you for exercising applicable privacy rights.

7. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the information we handle. These measures may include access controls and encryption in transit where supported. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children

Our services are intended for business and professional use and are not directed to children under 18. We do not knowingly seek to collect personal information from children under 18.

9. International Processing

Xzar is based in the United States. Information may be processed in the United States and other locations where we or our service providers operate, subject to applicable law.

10. Changes to This Notice

We may update this Notice from time to time. We will post the updated version on our website and change the effective date. Where required by law, we will provide additional notice or obtain consent for material changes.

11. Contact

For privacy questions or requests, contact: 369 Mint LLC, offering services under the name Xzar, 309 Coffeen Avenue, Suite 1200, Sheridan, Wyoming 82801, USA. Email: hello@xzar.si