Developer privacy
The private developer portal stores your name, email, verified account identity, invitations, access expiration, credential fingerprints, usage counts, and feedback you submit. Firebase provides account authentication and stores the server-managed records.
Passwords are managed by Firebase Authentication. Invitation registration passes your password to Firebase over HTTPS without storing it in the portal database. Raw XA credentials are shown once; the server stores a fingerprint rather than the credential. Account sessions are kept for the current browser session.
Downloading XA does not upload any project information. Captures, source, and reports stay on your computer unless you explicitly approve an XA upload. Feedback forms accept text only; exclude credentials, customer data, source, and screenshots.
Hosted reviews use the approved evidence and source through XA’s Firebase service and OpenAI. Bounded service records include request status, timing and token usage. The portal does not give other testers access to your feedback, credentials or account.
Firebase App Check uses Google reCAPTCHA Enterprise to assess browser requests for abuse without asking you to solve a puzzle. Google processes browser and device signals for this security check. See Google’s Privacy Policy and Terms of Service. App verification does not replace your account or invitation checks.
Access can be suspended, revoked or allowed to expire. Revocation prevents further authenticated downloads and hosted requests; it cannot remove files already downloaded. Ask support@xezom.com for account assistance, deletion of portal records, or an approved private route for diagnostic evidence.