Safety and your data
XomiW works on your behalf, so how it asks, stores data and isolates work must be clear. This is the plain-language version; the Privacy policy is the official one.
Asks before anything with an effect
Sending email, creating or changing events, deleting files, sharing outside: XomiW stops and shows an approval card saying what it will do. It only proceeds if you agree. Every approval is logged.
Runs in isolation
Code the AI writes to build files runs in its own isolated environment, without network access outside an allowlist, apart from the main servers.
Ignores instructions hidden in content
Emails, web pages and attachments can hide fake instructions. XomiW treats them as data, not commands, and still asks you before acting.
Never trains on your data
XomiW never trains models on your content and uses provider settings that exclude API data from training.
Isolated and encrypted
Each account's data is isolated at the database level. TLS in transit; Gmail, Calendar and Drive tokens encrypted with AES-256-GCM, a separate key per token.
Stored in Singapore
Servers and database in Singapore; AI models run through providers in the United States. Processing outside Vietnam has its own consent.
Export and delete anytime
In Settings you can download all your data or delete your account, and disconnect Gmail, Calendar or Drive with one button.