Your information. Handled with care.

Newsletters. Your choice.

When you subscribe on a connected business website, Xentiu stores your email address, that business's list membership, the signup page, consent wording/version and confirmation date. We use email confirmation to check ownership; subscribing does not create a Xentiu account. Enquiries, bookings and CRM contacts are not automatically added to marketing lists.

Resend delivers Newsletter email using Xentiu's shared marketing account. Each business can access only its own subscribers and campaigns. Unsubscribing stops newsletters sent through this shared Xentiu account, including other businesses. We retain minimal unsubscribe and suppression records to honour that choice, including after an app is removed. Installation or syncing cannot silently resubscribe you. Every campaign includes an unsubscribe link that works without login.

We process aggregate delivery, bounce and failure results to operate the service; Newsletter open and click tracking are disabled. Authorised workspace staff control newsletter content and sending. Provider operations and email delivery can involve the United States, as described below. For access, correction, deletion or privacy complaints, contact support@xentiu.com; no password is needed.

What you share with us.

When you create an account or set up a website, we store the details you provide: your name, email, optional profile photo, business and onboarding answers, website brief, chosen package, content, uploaded files and domain preference. We use these to run your account, organise your project and provide the services you request.

Team invitations use the recipient details you enter. Workspace members can access shared business information according to their permissions. Chats store messages, attachments, polls, reactions, replies and read information so participants can communicate. Your online visibility follows your chat privacy preference. A profile photo can be shown to your contacts and teammates.

Please only upload information you are authorised to share. We do not use website briefs, messages or uploaded content as analytics event data.

Login, security and service messages.

Essential cookies and browser storage keep you signed in, remember required preferences and protect account access. They are not controlled by the optional analytics choice. Authentication and hosting services process technical information, such as network addresses and security logs, to operate and protect the service.

We use account and invitation details to send verification, security and team emails. These are service messages, not permission to send marketing campaigns.

Limited statistics. No account-linked browsing.

Where collection is enabled, limited first-party statistics help us improve Xentiu’s navigation, onboarding and performance. In reviewed no-consent markets, these statistics may run unless you object. Other countries, unknown locations and markets with unconfirmed exemptions use prior opt-in: no collection until you choose Allow in the prompt or enable the control above. Closing the prompt means no collection, not consent. Your browser choice does not enable statistics while site collection is disabled.

These statistics include visits, page views, broad referral categories, approximate device and country, visible-tab time, button counts, coarse click and scroll bins, onboarding-step counts, validation categories and loading measurements. We do not send typed answers, full referral addresses or URL query values.

Events are immediately combined into statistical counters. The analytics database does not store visitor identifiers, individual interaction records or account-linked browsing histories. Reports do not match visits or button clicks to customers, purchases or saved business industry. Small breakdowns with fewer than five measurements are withheld. Reports are private to the Studio owner.

There are no recordings, advertising pixels, cross-site profiles or analytics of private message content. Studio, recognised staff, previews and private chat interactions are excluded. Signed-in identity may be checked to exclude staff; it is not stored with traffic. Browser privacy signals and existing refusals keep collection off.

You can object or withdraw consent at any time on the Cookies & analytics choices page or using the control above. This stops new collection and clears the temporary tab state without affecting your account, saved brief or chats. Already-combined statistics cannot be matched back to an individual for deletion. Choosing to allow limited statistics does not enable other tracking or override site restrictions. Old opt-out preferences are not reused as consent to the new opt-in notice; a fresh choice is required where consent applies.

Storage and retention.

A first-party preference cookie remembers your choice for up to 180 days. A browser preference also keeps a refusal effective until changed or that storage is cleared. The temporary tab state contains visit counters and a broad referral category, not a visitor identifier. It expires after 30 minutes of inactivity, and always within two hours. There is no long-lived returning-visitor identifier.

Traffic events are aggregated on receipt, rather than kept for 90 or 400 days. Combined traffic counters are retained for up to 25 months for historical comparisons, then removed by scheduled cleanup. Opaque anti-replay hashes contain no route, event payload, account or visit identifier; they expire for deduplication after five hours and are deleted on later ingestion or the daily cleanup job. Cleanup can leave an expired hash physically stored until the next daily job, but it cannot be used to reconstruct browsing.

Account verification, completed onboarding, and genuine payment/delivery facts are separate service records. They support aggregate business reporting without attaching browsing histories. Account, business, project and chat records are kept while needed to provide the service and handle security, disputes or legal obligations. Declining optional statistics does not prevent your account or project from saving.

Chat disappearing-message preferences can remove older messages after confirmation. Backups and hosting logs have separate provider retention periods. The analytics database does not store raw network addresses; a daily-changing server hash is used only for abuse limits. Infrastructure providers may process network information in operational logs.

Where information is processed.

We use Supabase for authentication, database and file storage, Vercel for website hosting and server functions, and Resend for transactional email. Analytics uses our existing Supabase database, not a separate advertising platform.

Our application server functions and primary database are configured in Sydney. Provider support, operations, email delivery and subprocessors can involve processing outside Australia, including the United States. Their linked notices describe their own practices. Xentiu limits access through workspace permissions, server-side checks and private Studio authentication; no system can promise absolute security.

We may disclose information when necessary to provide your requested service, comply with a legal requirement or protect the service against abuse. External links and hosted previews have their own privacy and access settings.

Your information and your questions.

You can update supported profile, business and chat settings in your workspace. To request access, correction or deletion of other information, withdraw a consent, or raise a privacy complaint, email support@xentiu.com. Tell us what you need without sending a password or verification code. We may need to verify your identity before disclosing or changing private records.

We will review your request, explain any information we must retain and work with you to resolve concerns. Where applicable, you may also raise a concern with your local privacy regulator, including the Office of the Australian Information Commissioner.

We will update this page when our information-handling practices change. Additional tracking purposes will be assessed separately and require consent where applicable; this statistical preference is not permission for advertising or personal browsing profiles.