Terms & Privacy

xDots is an AI-native creative canvas operated by Dot AI, Inc. (“xDots”, “we”, “us”). This single document contains both the terms you agree to when you use xDots and the privacy policy describing what we do with your information.

Last updated 1 September 2026

Part One

Terms of Service

1. Agreement to these terms

By creating an account or using xDots, you agree to these terms. If you are using xDots on behalf of a company or other organisation, you confirm you have authority to bind it, and “you” means that organisation.

If you do not agree to these terms, do not use the service.

2. Accounts and eligibility

You must be at least 13 years old to use xDots, and old enough to form a binding contract where you live. If you are under 18, you may use xDots only with the involvement of a parent or guardian.

Accounts are created through Google or GitHub. You are responsible for activity under your account and for keeping access to the provider account you sign in with secure. Tell us at privacy@xdots.app if you believe your account has been used without your permission.

One person or organisation per account. Do not share credentials, and do not create accounts by automated means.

3. The service

xDots lets you write briefs, plan stories and storyboards, and generate images and video through third-party AI models. The service changes frequently. We may add, alter or remove features, and we may change or discontinue models we route to, without notice.

xDots is provided as a tool for producing creative work. It is not a content archive and not a backup service. Keep your own copies of anything you cannot afford to lose.

4. Your content

Your content stays yours.“Your content” means everything you put into xDots — briefs, prompts, uploaded images and video, notes, project structure — and everything the service generates for you from it.

You are responsible for your content. You represent that you have the rights necessary to submit it, and that submitting it does not infringe anyone’s intellectual property, privacy or publicity rights. Do not upload material you do not have the right to use, including images of people who have not agreed to appear.

5. The licence you grant us

To run the service, we need permission to handle your content. You grant Dot AI, Inc. a worldwide, non-exclusive, royalty-free licence to host, store, reproduce, transmit, transcode, resize and display your content, and to transmit it to the model providers listed in the privacy policy below, for the sole purpose of operating, securing and supporting the service for you.

In plain terms: this licence exists so we can put your image in a bucket, resize it for a thumbnail, send your prompt to a model, and show the result back to you. It is not a licence to publish your work, market with it, or train on it. It ends when you delete the content or close your account, except for copies in backups that are already scheduled for deletion.

If you choose to share a project through a share link, or publish it to a public surface in the product, you additionally grant us permission to display that content to the people you have shared it with, for as long as the share remains active.

6. Generated output

As between you and us, you own the output xDots generates for you, to the extent it is capable of being owned. Three things you should understand about that:

• Output is not unique. Other users submitting similar prompts may receive similar or identical results. We make no claim of exclusivity in output.
• Copyright in AI output is unsettled. In several jurisdictions, including the United States, purely machine-generated material may not attract copyright protection. We do not warrant that output is protectable or that it is free of third-party rights.
• Model providers set their own terms.Output is produced by the third-party models listed below, and those providers’ terms apply to how their models may be used.

You are responsible for reviewing output before you publish or rely on it, and for making sure your use of it is lawful.

7. Acceptable use

You may not use xDots to create, upload or distribute:

• Sexual content involving minors, or any material that sexualises a minor, in any form.
• Non-consensual intimate imagery, or sexual content depicting a real identifiable person without their consent.
• Content that impersonates a real person or organisation in order to deceive, including synthetic depictions of real people presented as genuine.
• Content that harasses, threatens or incites violence against a person or group, or that promotes self-harm.
• Material that infringes someone else’s copyright, trademark, privacy or publicity rights.
• Content designed to defraud, including fake documents, fake endorsements and fabricated records.
• Malware, or anything intended to disrupt or gain unauthorised access to any system.

You also may not:

• Reverse-engineer, scrape or systematically extract the service, its prompts or its models.
• Resell, sublicense or provide the service to third parties as your own, or use it to build a competing model or product.
• Circumvent rate limits, credit limits, safety filters or access controls.

We may remove content and suspend accounts that break these rules. Where we are legally required to report material — child sexual abuse material in particular — we will.

8. Credits and plans

Generations consume credits. Credits are a licence to use the service, not currency, not property, and not redeemable for cash. They have no value outside xDots and cannot be transferred between accounts.

Credits are consumed when a generation is submitted. A generation that fails for a reason on our side is refunded to your balance; output you simply do not like is not, because the compute has been spent either way.

We may change credit prices and allowances. If we do so in a way that materially disadvantages you on a paid plan, we will give notice before the change takes effect.

9. Third-party services

xDots depends on third parties for authentication, storage, delivery and model inference. They are named in the sub-processor table. Their availability, their terms and their content policies are outside our control, and an interruption at any of them may interrupt xDots.

10. Our intellectual property

The service itself — the software, the interface, the xDots name and marks, and everything we produce that is not your content — belongs to Dot AI, Inc. and its licensors. These terms grant you a limited, revocable, non-transferable right to use the service, and nothing more.

If you send us feedback or suggestions, we may use them without obligation or compensation to you.

11. Suspension and termination

You may stop using xDots and delete your account at any time. We may suspend or terminate your access if you breach these terms, if we are required to by law, or if your use creates risk or legal exposure for us or other users. Where circumstances allow, we will tell you why.

On termination, your right to use the service ends. We will delete your content in line with the retention section below. Sections that by their nature should survive termination — content ownership, disclaimers, liability, indemnity, governing law — do.

12. Disclaimers

The service is provided “as is” and “as available”, without warranties of any kind, whether express or implied, including implied warranties of merchantability, fitness for a particular purpose, title and non-infringement. We do not warrant that the service will be uninterrupted, secure or error-free, that output will be accurate or suitable for any purpose, or that defects will be corrected.

AI models produce output that can be wrong, biased, or that resembles existing work. You are responsible for reviewing output before you use it.

13. Limitation of liability

To the fullest extent permitted by law, Dot AI, Inc. and its officers, employees and suppliers will not be liable for indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, lost revenue, lost data, or business interruption, arising out of or relating to the service, whether or not we were advised such damages were possible.

To the fullest extent permitted by law, our total liability arising out of or relating to the service is limited to the greater of the amount you paid us in the twelve months before the event giving rise to the claim, or one hundred US dollars (US$100).

Some jurisdictions do not allow the exclusion of certain warranties or the limitation of certain damages. Where that is the case, the exclusions and limitations above apply only to the extent permitted, and nothing in these terms limits liability for death or personal injury caused by negligence, or for fraud.

14. Indemnity

You will indemnify and hold harmless Dot AI, Inc. against claims, damages, losses and reasonable legal costs arising out of your content, your use of the service, or your breach of these terms — except to the extent the claim arises from our own breach or negligence.

15. Changes

We may update these terms. When we make a material change, we will update the date at the top of this page and give notice in the product or by email before it takes effect. Continuing to use xDots after a change takes effect means you accept the updated terms.

16. Governing law and disputes

These terms are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-laws rules. The state and federal courts located in Delaware have exclusive jurisdiction over any dispute arising out of these terms, and you and we consent to that jurisdiction.

If you are a consumer resident in the European Economic Area or the United Kingdom, nothing here deprives you of the protection of the mandatory laws of your country of residence, or of your right to bring proceedings there.

Before filing a claim, please contact us at privacy@xdots.app. Most disputes are resolved faster that way.

Part Two

Privacy Policy

This part explains what personal information Dot AI, Inc. collects when you use xDots, why we collect it, who we share it with, and what control you have over it.

1. Information we collect

Information you give us

• Account data. When you sign in with Google or GitHub, our authentication provider passes us your email address, your name and your profile image, plus an identifier for the provider account. We never receive your Google or GitHub password.
• Content data. Briefs, prompts, project and shot structure, notes, and any images, video or audio you upload or generate.
• Team data.If you create or join a team, the team’s name and membership, and which projects are shared within it.
• Communications. Anything you send us by email or through a support or feedback channel.

Information we collect automatically

• Usage data. Which features you use, what you generate, when, and the credits it consumed. We keep a credit ledger so both of us can see what a balance was spent on.
• Device and connection data. IP address, browser and operating system, device type, screen size, language, and referring page.
• Diagnostic data. When something breaks, our error monitoring records the error, a stack trace, the page you were on and an identifier for your account, so we can find the fault.
• Cookies and local storage. We use cookies for the session that keeps you signed in and for your theme preference. We use browser storage to hold in-progress work so a reload does not lose it. We do not run third-party advertising or cross-site tracking cookies.

2. How we use information

• To run the service. Authenticate you, store your projects, route generations to model providers, deliver media, and keep your credit balance accurate.
• To support you. Answer your questions and investigate problems you report.
• To improve the service. Understand which features are used and where they fail, in aggregate.
• To keep the service safe. Detect abuse, enforce the acceptable-use rules, prevent fraud, and secure accounts.
• To communicate with you. Send service messages about your account, changes to the product, and changes to this document. Marketing email, if we ever send it, will be something you can opt out of.
• To comply with the law and to establish, exercise or defend legal claims.

3. Training and your content

We do not train AI models on your content, and we do not sell your content or your personal information. Dot AI, Inc. does not build or fine-tune models on the briefs, prompts, images or video you put into xDots.

To generate anything, we must send your prompt and any reference material to the model provider you are generating with. Those providers are named in the table below, and what they do with data they receive is governed by their own terms. If this matters to your work, read the terms of the provider behind the model you are using, and write to us at privacy@xdots.app and we will tell you what arrangement we have with them.

A small number of people on our team can access content when it is necessary to investigate a fault you have reported, to respond to a legal request, or to act on a report of abuse. We do not browse user projects otherwise.

4. Who we share it with

We share personal information with the service providers below, each only to the extent needed for the purpose shown. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

We may also disclose information:

• To comply with a law, regulation, subpoena or other valid legal process, after reviewing whether the request is properly scoped.
• To protect the rights, property or safety of Dot AI, Inc., our users or the public.
• To an acquirer, in connection with a merger, financing, reorganisation or sale of assets — with notice to you, and subject to this policy continuing to apply.
• To anyone else, with your direction or consent.

5. International transfers

Dot AI, Inc. operates from the United States, and the providers above process data in the United States, with one exception: generations routed to Jimeng are processed in China. Data protection law in those countries may differ from the law where you live.

Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on the European Commission’s Standard Contractual Clauses, or the UK Addendum to them, together with additional safeguards where they are needed.

6. Your rights and choices

Wherever you live, you can ask us to give you a copy of the personal information we hold about you, correct it, or delete it. You can delete individual projects and media in the product at any time, and you can close your account, which deletes the content associated with it.

Write to privacy@xdots.app. We will respond within the period the applicable law requires — 30 days in most cases, 45 in California. We may need to verify your identity before we act, and we will not treat you differently for exercising a right.

7. EEA and UK residents

If you are in the European Economic Area or the United Kingdom, Dot AI, Inc. is the controller of your personal data, and we rely on these legal bases:

• Performance of a contract — to provide the service you have asked for, including running generations and storing your projects.
• Legitimate interests — to secure the service, prevent abuse and fraud, understand how features are used, and improve the product, where those interests are not overridden by your rights.
• Consent — where we ask for it, such as for optional communications. You can withdraw consent at any time.
• Legal obligation — where the law requires us to process or retain data.

You also have the right to object to processing based on legitimate interests, to request restriction of processing, to data portability, and to lodge a complaint with your local supervisory authority. We would rather hear from you first, at privacy@xdots.app.

8. California residents

Under the California Consumer Privacy Act, as amended, you have the right to know what personal information we collect and disclose, to request deletion, to request correction, and not to be discriminated against for exercising those rights.

In the past twelve months we have collected the categories of personal information described in section 1: identifiers, account and profile data, commercial information (your credit ledger), internet and device activity, and the user-generated content you create. We collect it from you and from your device, for the purposes described in section 2, and we disclose it for business purposes to the providers in section 4.

We have not sold personal information, and we have not shared it for cross-context behavioural advertising, in the past twelve months. We do not use or disclose sensitive personal information for purposes that require an opt-out. We do not knowingly sell or share the personal information of anyone under 16.

9. Other US state rights

Residents of other US states with comprehensive privacy laws — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and Montana — have comparable rights to access, correct, delete and obtain a portable copy of their personal information, and to opt out of targeted advertising, sale, and certain profiling. As described above, we do not sell personal information, do not conduct targeted advertising, and do not carry out profiling that produces legal or similarly significant effects.

Use the same address — privacy@xdots.app — to exercise a right or to appeal a decision we have made about a request.

10. Security

Data is encrypted in transit and at rest with our infrastructure providers. Access to production systems is restricted to the people who need it. Authentication is handled by a dedicated provider, so we never hold your password.

No service is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant regulators as the law requires.

11. Retention

We keep personal information only as long as we need it for the purposes described here.

• Projects and media — until you delete them, or until you close your account.
• Account data — for the life of your account. When you close it, we delete or anonymise account data within 30 days, except where we must keep something to meet a legal obligation or to resolve a dispute.
• Backups — deleted content persists in backups for a limited window before those backups roll over.
• Diagnostic and log data — retained on a short rolling window and then discarded.

12. Children

xDots is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, write to privacy@xdots.app and we will delete it.

13. Other sites and services

xDots links to and integrates with services we do not control. This policy does not cover them, and we are not responsible for their practices. Read their policies before giving them information.

14. Changes to this policy

We will update this page when our practices change, and we will move the date at the top when we do. For material changes we will give notice in the product or by email before they take effect.

15. How to contact us

Dot AI, Inc., operator of xDots. For any privacy question, any request about your data, or anything in this document: privacy@xdots.app.

Dot AI, Inc. · xdots.app · Last updated 1 September 2026