Privacy should be understandable.

Xiara is operated by Rocketch. This Privacy Policy explains how Rocketch handles information when you use Xiara on the web and related services.

Depending on how you use Xiara, we may process account and authentication information, conversation content and history, memories you explicitly save or confirm, profile and tone preferences, music context you choose to provide, plan and billing status, and basic usage or diagnostic information needed to operate the service.

Paid subscriptions are processed by Stripe. Rocketch does not need to store your full payment-card number in order to provide Xiara.

Xiara uses AI model providers to generate conversational responses. Message content and relevant context may be sent to those providers when necessary to produce a reply, maintain continuity, or resolve a request.

Rocketch does not sell your conversations or build advertising profiles from the private content of your chats.

Conversation history and long-term memory are not the same thing. Xiara may keep conversation history with your account so you can return to a thread, but a long-term memory is meant to be created only when you ask Xiara to remember something or confirm a memory suggestion.

Saved memories are designed to remain visible and controllable. You can edit them, pause them, ask Xiara to use them less, or delete them.

Xiara can remember what a song, artist, ritual, person, place, or mood means to you when you choose to save that context. Xiara does not require a complete history of everything you listen to in order to do this.

When Xiara opens music in Spotify, Apple Music, YouTube Music, Bandcamp, Tidal, or another service, your use of that external service is governed by its own privacy terms.

We use information to operate Xiara, preserve conversation continuity, apply the preferences and memories you choose, provide music links and context, manage plans and billing, protect accounts, diagnose failures, respond to support needs, and improve reliability and product quality.

Rocketch may use providers for authentication, hosting, databases, analytics, AI models, email, security, and billing. They receive information only as needed for the services they provide to Xiara or as otherwise required by law.

We do not sell personal information. We may disclose information when required by law, to protect the service or its users, or in connection with a legitimate corporate transaction subject to appropriate safeguards.

Conversation history may remain associated with your account while you use Xiara so the product can provide continuity. Long-term memories remain until you change, pause, or delete them. Certain account, security, transaction, or billing records may need to be retained for legitimate operational or legal reasons.

Where available in the product, use the built-in controls to remove memories or other saved context. You may also request deletion of account-associated information through the contact methods published on www.xiara.co.

Rocketch uses reasonable technical and organizational measures intended to protect Xiara data. No online system can guarantee absolute security, so we cannot promise that unauthorized access will never occur.

You decide what becomes long-term memory. You can remove or pause memories, change profile preferences, choose your preferred music destination, stop using Xiara, or request account-related deletion where applicable.

If a feature asks for broader access in the future—for example voice, device, or native-app permissions—it should ask separately rather than treating that access as implied by ordinary text use.

Xiara and its service providers may process information in the United States and other countries. Data-protection rules can differ by location, and Rocketch uses service providers and safeguards appropriate to the services involved.

We may update this Privacy Policy as Xiara changes. Material changes will be reflected by updating the date on this page and, when appropriate, by providing additional notice.

Questions about privacy can be directed to Rocketch through the contact information published on www.xiara.co.