AiXGent Privacy Policy

Effective Date: March 24, 2026  |  Company: MFoster LLC (operating as AiXGent)  |  Registered Agent: Wichita, KS  |  Contact: admin@aixgent.ai

This Privacy Policy explains how AiXGent collects, uses, and protects your information across our sites: aixgent.ai, shepherd.aixgent.ai, demo-pa.aixgent.ai, agentx-demo.pages.dev, bmskc.lovable.app, and mckee.lovable.app. We've written this in plain English so you actually understand it.

1. Who We Are

AiXGent is an AI agent orchestration platform operated by MFoster LLC, a Kansas LLC Limited Liability Company with its registered agent in Wichita, KS. We build AI agents for enterprise and life guidance.

2. What Data We Collect

We collect only what's needed to run our services. Depending on which site you use, this may include:

• Messages and conversation content — what you type into AI chat interfaces
• Session data — technical data that keeps your session active (e.g., session tokens, timestamps)
• Access codes — password or access code you enter on gated sites (e.g., demo-pa.aixgent.ai)
• Optional location data — only if you grant permission; used to contextualize responses
• Usage analytics — aggregate, anonymized data on how features are used (no personal identification)
• Browser/device metadata — browser type, OS, IP address (collected by hosting infrastructure)

We do not collect payment information directly. Enterprise billing is handled through separate agreements.

3. How We Use Your Data

Your data is used for the following purposes:

• AI processing — your messages are sent to Anthropic's Claude API to generate responses
• Session management — keeping you logged in and your conversation context active
• Service improvement — anonymized analytics help us understand what's working
• Security — detecting abuse, unauthorized access, and protecting our systems
• Customer support — responding to your questions or data requests

We do not sell your data. We do not use your data for advertising targeting. We do not share your conversations with third parties beyond what's required to operate the service.

4. AI Processing — Anthropic Claude API

Our AI features are powered by Anthropic's Claude API. When you send a message to any AiXGent AI interface, that message is transmitted to Anthropic's servers for processing. This means your messages are subject to Anthropic's Privacy Policy and Terms of Service in addition to ours.

Anthropic's Privacy Policy: https://www.anthropic.com/privacy

We do not store your raw conversation messages indefinitely on our servers beyond what's needed for your active session (see Data Retention below). However, we cannot control how Anthropic processes or retains data on their end — please review Anthropic's policies for details.

5. Cookie Policy

We use session cookies — small files that keep your session active while you're using the site. These are deleted when you close your browser (or shortly after your session ends).

We do NOT use tracking cookies, advertising cookies, or cross-site tracking technologies on most of our sites. We do not participate in third-party ad networks.

Our hosting providers (Cloudflare, Vercel) may set technical cookies as part of their CDN and security infrastructure. These are functional, not advertising-related.

You can block cookies via your browser settings. Note that blocking session cookies may prevent some features from working correctly.

6. Third-Party Services

We rely on the following third-party services to operate:

• Anthropic — AI language model processing (Claude API). Your messages are processed on their infrastructure.
• Supabase — Database and backend services. Stores session data, user records, and application data. Hosted on AWS.
• Cloudflare — Hosting, CDN, and DDoS protection for most of our sites. May log IP addresses for security purposes.
• Vercel — Hosting for Shepherd (shepherd.aixgent.ai). Vercel may collect standard web server logs.
• Railway — Infrastructure (in progress). Used for backend services.

Each of these providers has their own privacy policies. We choose providers who maintain strong data security practices, but we encourage you to review their policies directly.

7. Data Retention

We retain data for as long as necessary to operate the service, then delete it. Here's our general approach:

• Active session data — retained for the duration of your session, then purged
• Conversation logs — not retained long-term on our servers; sessions are ephemeral by design
• Account/user records — retained while your account is active, deleted within 30 days of a deletion request
• Analytics data — anonymized aggregate data may be retained indefinitely; it cannot be tied back to you
• Server logs — standard web server logs retained for up to 90 days for security purposes

To request deletion of your data, email admin@aixgent.ai with "Data Deletion Request" in the subject line.

8. Special Note — Shepherd (Faith & Life Counseling)

Shepherd (shepherd.aixgent.ai) is a faith-based AI counseling tool that may involve sensitive personal conversations — including topics related to mental health, faith struggles, relationships, and personal challenges.

We take extra care with Shepherd conversations:

• Shepherd conversations are NOT shared with third parties, except for AI processing via Anthropic's Claude API (which is necessary to generate responses)
• We do not store Shepherd conversation logs beyond your active session
• Shepherd is not a substitute for licensed therapy or professional pastoral counseling — see our Terms of Service for details
• If you are in crisis, please contact the 988 Suicide & Crisis Lifeline (call or text 988) or your local emergency services (911)

The sensitivity of faith and mental health conversations is not lost on us. We treat this data with the highest level of care we can provide within a software service.

9. Special Note — Healthcare & Industry Demos

AiXGent maintains password-protected demonstration platforms for evaluating AI-assisted workflows in regulated industries including healthcare, finance, and compliance. These demo environments are for evaluation purposes only.

• This site is a DEMO ONLY — it does not process real Protected Health Information (PHI)
• Do not enter real patient data into the demo environment
• AiXGent is not a HIPAA-covered entity in its current demo mode
• No actual clinical decisions should be made based on demo output

If you are evaluating AiXGent for production deployment in a regulated industry, a separate agreement (including any required compliance documentation such as a Business Associate Agreement for healthcare) will be established prior to any production use involving real client or patient data.

10. Minors

Our services are not intended for users under 13 years of age (or under 16 for users in the European Economic Area, per GDPR-K requirements). We do not knowingly collect personal data from minors.

If you believe a minor has provided us with personal data, please contact us at admin@aixgent.ai and we will delete it promptly.

11. Your Rights (GDPR — EEA/UK Users)

If you are located in the European Economic Area or United Kingdom, you have the following rights under GDPR:

• Right of Access — request a copy of the personal data we hold about you
• Right to Rectification — request correction of inaccurate data
• Right to Erasure — request deletion of your personal data ("right to be forgotten")
• Right to Portability — request your data in a portable format
• Right to Restrict Processing — request that we limit how we use your data
• Right to Object — object to processing based on legitimate interests
• Right to Withdraw Consent — where processing is based on consent, you may withdraw at any time

To exercise any of these rights, email admin@aixgent.ai. We will respond within 30 days. We may need to verify your identity before processing the request.

12. California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know — request disclosure of the categories and specific pieces of personal data we have collected about you
• Right to Delete — request deletion of your personal data, subject to certain exceptions
• Right to Opt-Out of Sale — we do not sell your personal data. This right is not applicable, but we want to be transparent about it.
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, email admin@aixgent.ai with "CCPA Request" in the subject line. We will respond within 45 days.

13. FTC Compliance & AI Transparency

In compliance with FTC guidelines on AI transparency and honest advertising:

• All AI-generated responses are produced by artificial intelligence, not licensed human professionals
• We clearly disclose AI use within our interfaces
• We do not make false or misleading claims about the capabilities of our AI
• Users are informed when they are interacting with an AI system

If you have concerns about AI transparency or feel we've been misleading, contact admin@aixgent.ai.

14. Contact Us

For all privacy-related requests, questions, or concerns:

• Email: admin@aixgent.ai
• Subject line for data requests: "Privacy Request — [Your Name]"
• Company: MFoster LLC (operating as AiXGent)
• Location: Kansas City, MO area

We aim to respond to all privacy requests within 30 days.

15. Updates to This Policy

We may update this Privacy Policy as our services evolve. When we make material changes, we will update the Effective Date at the top and, where appropriate, notify users via the relevant site or email.

Continued use of our services after a policy update constitutes acceptance of the revised policy. If you disagree with changes, please stop using the services and contact us to request data deletion.