Privacy Policy

This policy covers personal data handled by XRternal Operators, LLC in connection with XRosk. It sits alongside our Terms of Service.

Most of what the Service handles is operational information about displays and headsets rather than information about people. Some of it may still relate to an identifiable person — for example, if you use a person's name in a display, headset, connection, or media label. Where that's the case, this policy applies.

Account and organization data:

• Your name and email address, and those of users in your organization.
• Organization name, membership, and role.
• Authentication data, handled through Amazon Cognito, plus secure session cookies used to keep you signed in.

Casting connections and assignments:

• The label and login email for an ArborXR casting connection, plus the password you choose to provide. The password is encrypted before storage and is never returned to the browser once saved.
• The ArborXR headset identifier assigned to a display or, for direct local-network casting, the headset's network endpoint and optional display settings.

Display and operational data:

• Display names and unique device identifiers used for pairing, authentication, and device messaging.
• Online or offline status, last-seen time, software version, configuration version, and free storage space reported by the display device.
• The selected casting source, headset assignment, idle-display mode, and fallback-media assignment.

Fallback media:

• Videos or images you upload, together with the name, media type, file size, checksum, upload status, and assignment needed to store and deliver them to your displays.

Trial and billing data:

• Cumulative trial casting seconds and device-reported usage events, including a unique event identifier, the reporting display, requested and accepted seconds, and the time received.
• Stripe customer and subscription identifiers, subscribed display quantity, subscription status, and billing-period information.

Payment-card data is handled by Stripe. We receive confirmation of subscription and payment status and never receive your full card details.

Account and configuration information comes from you and your organization's users. Operational status and trial usage come from the paired display software. Billing status comes from Stripe.

For ArborXR casting, the paired display uses the connection credential you provide to request the assigned headset's live cast through ArborXR. For direct local-network casting, the display connects to the headset on your network. Live frames are decoded and rendered by the display software; XRosk does not record or store the live video stream as a recording.

A live cast may still show people, messages, surroundings, or other sensitive content visible inside the headset. You are responsible for choosing where the display is placed, who can see it, and whether notice or consent is required in your setting.

• To create and secure accounts and organization access.
• To pair, configure, authenticate, monitor, and support displays.
• To connect a display to its assigned headset and restore the chosen idle experience when casting stops.
• To store and deliver fallback media selected by your organization.
• To measure the free trial by actual live-casting usage and enforce display-seat limits.
• To bill you and manage your subscription.
• To investigate misuse, troubleshoot failures, protect the Service, and meet legal obligations.
• To improve the Service using aggregated and de-identified information.

We do not sell personal data. We do not use your identifiable data or live headset video to train AI models.

• Account, organization, display, configuration, trial-usage, and subscription records are retained while your account is active and for a reasonable period afterwards for security, billing, support, and legal purposes.
• ArborXR connection credentials are retained until you remove the connection or request account deletion.
• Fallback media is retained until you delete it or request account deletion. Removing a media asset also removes its display assignments.
• Pairing codes and one-time provisioning data expire or are cleared after pairing; secrets held by the display are not stored in plaintext in our database.
• Operational logs are retained for a limited period appropriate for security, reliability, and troubleshooting.

When data is no longer needed, we delete or de-identify it unless the law requires us to retain it. Backups and distributed copies may take additional time to age out through their normal retention cycles.

We use a small number of service providers, who process data on our instructions or under their own terms where you connect their service:

• Amazon Web Services provides hosting, database, authentication, object storage, device messaging, email delivery, and operational logging.
• Stripe processes payments and manages subscriptions.
• ArborXR provides the third-party casting service when you choose ArborXR as a display's casting source, using the account and headset assignment you provide.
• Google may measure advertising on our marketing site only if that feature is enabled and you accept the cookie banner.

Direct local-network casting does not require us to send headset video to ArborXR. Your own network providers and hardware vendors may still process network or device information under their terms.

We may disclose data where legally required, or to protect the rights and safety of users and the public. If the business is sold or merged, data may transfer as part of that transaction, and we'll give notice.

• Data is encrypted in transit and at rest.
• ArborXR casting passwords are additionally encrypted at the application layer before they reach the database and are never returned to the browser once saved.
• Display credentials are scoped to the paired device; reusable device secrets are stored as hashes where the Service only needs to verify them.
• Fallback media is kept in private storage and delivered to authorized displays using time-limited download URLs.
• Access to production data is limited to those who need it.

No system is perfectly secure. We'll notify you of a breach affecting your data where the law requires it, and promptly where it doesn't.

The portal uses cookies that are necessary to sign you in and keep your session secure. These don't track you across other sites and don't require consent.

The marketing site stores your cookie-consent choice in your browser. If optional advertising measurement is enabled, it loads only after you accept the cookie banner. If you decline, ignore the banner, or your browser sends a Global Privacy Control signal, it stays off. Clear this site's data in your browser to reset a choice.

Under California law, advertising measurement can count as "sharing" personal information. The banner is how you opt in or out, and we honor the Global Privacy Control signal as an opt-out. We do not sell personal information.

Depending on where you are, you may have the right to access, correct, export, or delete personal data, to object to or restrict processing, and to complain to a data protection authority.

To exercise these rights, email hello@xrosk.app. We'll verify the request is really from you and respond within any timeframe the law sets, and otherwise within a reasonable time. We won't treat you differently for exercising them.

If your data is in the Service because an organization created your user account or operates the display, that organization controls the data — contact them first, and we'll support their response.

The Service is hosted on AWS infrastructure and data may be processed in a country other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards.

The Service is for organizational use and isn't directed at children. Displays or headsets may be used in education, public demonstrations, or training settings, but XRosk does not need the identity of the person wearing a headset. Avoid putting personal information about individuals into display names, headset identifiers, connection labels, or fallback media unless you have a lawful reason to do so.

We may update this policy. If a change materially affects how we handle data you've already given us, we'll give notice before it takes effect, and we won't retroactively broaden our use of that data without asking you first.

Privacy questions: hello@xrosk.app, or by mail to XRternal Operators, LLC, 30 N Gould St, Suite R, Sheridan, WY 82801.