Your data. Your career.
Your privacy.
Xtell was built for UK professionals in regulated industries — financial services, legal, healthcare, public sector. We know data privacy is not a checkbox. Here is exactly how we handle your information.
Where your data is stored
Your Xtell account data — profile, insights, activity — is stored on infrastructure hosted within the European Union. It is never stored on US servers by Xtell.
AI processing
Xtell uses AI to generate personalised career insights for Pro subscribers. We use Anthropic's commercial API — which explicitly excludes your data from AI model training.
Your data is used to generate your insights. Nothing else.
Does Anthropic train their AI on my data?
No. API data is excluded from training under Anthropic's commercial terms.
How long does Anthropic keep my data?
Up to 7 days for safety monitoring. Then deleted.
Can I use Xtell without AI processing my data?
Yes. Free tier features do not involve AI processing of personal data.
What we never do
- ✗We never sell your data
- ✗We never share your data with third parties for marketing
- ✗We never use your data to train AI
- ✗We never store payment details (handled entirely by Stripe)
- ✗We never send your name or email to AI providers
Your rights under UK GDPR
As a UK resident you have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to processing
- Data portability
Exercise any right by contacting: support@xplorient.com
We respond to all data requests within 30 days.
Security measures
- All data encrypted in transit (TLS)
- All data encrypted at rest
- Row-level security on all database tables
- Industry-standard authentication
- Payments via Stripe — PCI DSS compliant
- No payment data stored by Xtell
Third-party data processing
We are transparent about which third-party services we use, what data they process, and where. Here is the complete picture.
Supabase
What: Your account data, profile data, and career intelligence
Where: European Union
Notes: Our primary database and authentication provider. Your core data stays in the EU.
Stripe
What: Payment processing only. We never see or store your card details.
Where: United States and EU (EU-US Data Privacy Framework certified)
Anthropic
What: Anonymised profile data for AI-powered Pro features only. We never send your name or email address to Anthropic.
Where: EU for UK and EU-based API calls (since August 2025). Data storage in the United States.
Notes: API data retained for up to 7 days for safety monitoring only. Never used to train AI models.
Plausible Analytics
What: Aggregate, anonymised page view and event data. No personal data, no cookies, no cross-site tracking.
Where: European Union
LovableHTML
What: IP addresses and browser information from crawler and bot requests only. Regular user sessions never touch LovableHTML servers.
Where: United States
Notes: Used to ensure search engines and social platforms can correctly index and preview Xtell pages. Does not process account data, profile data, or any user personal data.
Cloudflare
What: Network-level request data (IP addresses) as part of content delivery and DDoS protection.
Where: Global edge network
A note on data residency
Your core personal data — account details, profile information, and career intelligence is stored in the EU via Supabase. Analytics are processed in the EU via Plausible. AI processing for Pro features occurs in the EU for UK-based API calls via Anthropic.
Some supporting services — including our search engine visibility tool (LovableHTML) and payment processing (Stripe) involve data transfers to the United States. These services process only minimal technical data rather than your personal profile information, and appropriate safeguards including Standard Contractual Clauses are in place.
If your organisation has strict UK or EU data residency requirements for all data processing, please contact us at support@xplorient.com before creating an account. We are actively evaluating EU-based alternatives for supporting services as the platform grows.
Contact and complaints
Questions about data privacy: support@xplorient.com
If you are not satisfied with our response you have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk | 0303 123 1113
Third-party services
- Anthropic — AI processing for personalised insights — anthropic.com/privacy
- Stripe — payment processing — stripe.com/gb/privacy
- Cloudflare Turnstile — spam protection on form submissions — cloudflare.com/privacypolicy