Privacy

Last updated 27 October 2026

This explains what XUMU AIR (air.xumu.ai, operated by XUMU) collects, why, and your choices. The short version: no third-party trackers, no bought lists, and one click ends our email for good.

What we collect, and where it comes from

Business contact details — name, role and work email — come only from what your company publishes on its own website or in public event listings, or from you directly. We never buy lists, scrape personal data or guess email addresses, and we record where every address was found.

Snapshot page activity — when a private Snapshot link is opened, which sections were read, time on page, and whether the PDF or plans page was used. This is measured by our own server against the link's token. There are no third-party trackers, no advertising pixels and no cross-site anything on our pages.

What you give us — order details (billing email, optional PO number), programme applications, and the company facts you confirm for readings.

What we use it for

To prepare and show you a reading of how AI engines describe your company; to send at most a handful of emails about it (one reading, at most two follow-ups, then we stop); to fulfil orders and invoices; and to run the service. We don't sell or share your data for advertising, full stop.

Email, and how to stop it

Every email we send includes a one-click opt-out that needs no login. Opting out adds your address to a permanent suppression list that is checked before every send — it is how we make sure we never email you again, so it is the one record we keep after you opt out.

Where it lives

Data is stored with Supabase (database) and the site runs on Vercel; email is sent through Google Workspace. Each processes data on our instructions. [Data locations and any DPA references: to be confirmed by Roger.]

How long, and your rights

Readings and their answers are kept while the engagement lasts and for a reasonable period after, so later readings can be compared against them. You can ask at any time for a copy of the personal data we hold about you, for corrections, or for deletion — write to roger@air.xumu.ai and we'll do it promptly. Depending on where you are, you may also have rights under laws like the GDPR; we honour them regardless.

Questions

roger@air.xumu.ai. [Postal address and data-controller details: to be confirmed by Roger.]