Privacy Policy
This explains what personal data XTEM collects, why, and what you can do about it.
Who we are
XTEM is a trading name of XTEC LIMITED, company number 10703003, 30-32 Knowsley Street, Manchester M8 8HQ. For the data described here we are the controller. Contact us about privacy at hello@xtem.app.
What we collect
- When you book a call: your name, email, store website, the platforms you sell on, where you are based, what you need, and anything you write in the message box.
- When you become a client: your contact and billing details, your onboarding brief, and our emails and messages with you.
- Payments: handled by Stripe. We see the payment status and the last four digits of your card, never the full card number.
- Technical data: when you send a form we record your IP address and browser type to block spam. Our host keeps standard server logs.
We do not use advertising or tracking cookies. The site remembers your chosen currency in your browser's local storage, and that never leaves your device.
Why we use it, and our legal basis
- To reply to your enquiry and arrange your call: our legitimate interest in answering people who contact us.
- To provide the service, bill you and keep records: to perform our contract with you, and to meet our legal obligations for tax and accounting.
- To keep the site and forms safe from abuse: our legitimate interest in security.
We do not sell your data, and we do not send newsletters unless you ask for them.
Your customers' data
When we work on a client's store we may see that client's customers' data. For that data the client is the controller and we act as their processor, as set out in section 10 of our Terms of Service. If you are a customer of one of our clients, please contact that business first.
Who we share it with
We use these service providers (subprocessors) to run XTEM:
- Vercel: website hosting and form storage.
- Stripe: payments and invoices.
- Google Workspace: email and documents.
- Anthropic: the AI models our agents run on, used to carry out client work.
Some of these providers process data outside the UK, including in the United States. Where they do, the transfer is protected by the UK's data adequacy rules or by the UK International Data Transfer Addendum to standard contractual clauses.
We may also share data if the law requires it, or with professional advisers such as our accountants.
How long we keep it
- Enquiries that do not lead to work: up to 12 months, then deleted.
- Client records, invoices and contracts: 6 years after the service ends, as UK tax law requires.
- Your customers' data: deleted or returned when our service to you ends.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, or to object to how we use it. You can also ask us to send your data to you or another company. Email hello@xtem.app and we will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put it right first.
Changes
We will update this page if anything changes, and change the date at the top.