01Controller
Vizologi Strategic Business Models SL, tax ID B42677302, operates this website and the Xendai trading brand. Contact address supplied: Distrito Digital, Edificio 1, Avinguda de Jean Claude Combaldieu, s/n, 03008 Alicante, Spain. Privacy and rights requests: legal@xendai.ai. General enquiries: hi@xendai.ai.
02Personal data collected
Start a Project contains seven fields: name, company, work email and problem description (required), and systems/tools, scope and investment (optional). We also process the content and contact details you send by email and the correspondence needed to handle your enquiry.
Browsing may generate technical information needed to deliver and secure the website, such as IP address, connection details, error or security logs, depending on the actual infrastructure. Cookies and similar technologies are addressed in our Cookie Policy, which must be finalized against a live technical audit.
Please do not send special-category data, passwords, credentials or unnecessary personal or confidential information in an initial enquiry. If you mention other individuals, share only what is necessary and ensure you are entitled to do so.
03Purposes and legal bases
Answer enquiries and assess project requests.
We review the information you send, reply, request clarification and, where appropriate, prepare or discuss a proposal. Depending on the relationship, the lawful basis is steps taken at the data subject's request before entering into a contract (GDPR Art. 6(1)(b)) or our legitimate interests in managing B2B enquiries and professional contacts (Art. 6(1)(f), together with Spanish Organic Law 3/2018 Art. 19 where applicable).
Manage professional correspondence.
We maintain reasonable follow-up on project discussions and proposals. The basis is pre-contractual/contractual necessity or legitimate interests for professional relationships as applicable.
Website operation and security.
We deliver the website, prevent form abuse and investigate security issues. The basis is our legitimate interest in maintaining a secure service (Art. 6(1)(f)), as well as applicable legal duties where relevant. Device storage/access technologies are also governed by the Cookie Policy and applicable rules.
Legal compliance and claims.
We retain documentation when required by tax, accounting or other applicable laws (Art. 6(1)(c)) and where necessary for the establishment, exercise or defense of legal claims on the appropriate basis.
Operational form measurement.
Cloudflare Analytics Engine records the submission outcome, locale and an acceptance counter. These events do not contain your name, company, email or project description. The rate limiter uses an HMAC-derived IP identifier; that identifier is not included in conversion events. This does not determine or exclude providers’ own technical logs.
Submitting a project enquiry does not automatically subscribe you to newsletters or authorize unrelated marketing. Any independent promotional activity requires its own applicable legal basis and notice.
04Required and optional information
The four required fields — name, company, work email and problem description — are needed to handle the request. The other three fields — systems/tools, scope and investment — are optional. You can contact us by email without using the form.
05Retention
Information is used to handle the enquiry and necessary professional follow-up. The specific retention and deletion criteria for enquiries, emails, technical logs and backups remain subject to approval and verification in the services used. No unconfirmed deletion period is promised here. Applicable legal obligations and claims must be taken into account.
06Recipients and processors
The form uses Cloudflare Workers to receive and validate the request, Cloudflare Turnstile to verify it and a request limiter to prevent abuse. Resend receives the submitted fields, reply address, locale and timestamp to send the email to hi@xendai.ai, received in Google Workspace. The application does not store enquiries in a lead database or automatically add them to the CMS.
A website enquiry does not authorize automatic uploading of its contents to external AI tools or using it for model training. Data flows in contracted client projects are governed by separate arrangements, including data-processing agreements where appropriate.
07International transfers
Some technology providers or collaborators may access or process information outside the European Economic Area. Before any transfer takes place, the relevant adequacy decision or appropriate safeguards must be identified (for example, the European Commission's standard contractual clauses and supplementary measures where needed). Actual destination countries, recipients and safeguards, and how to obtain information about them, must be disclosed.
08Your rights
You may request access, rectification, erasure, restriction, objection and data portability where applicable by contacting legal@xendai.ai. Where processing relies on your consent, you can withdraw it without affecting previous lawful processing. We may request proportionate identity-verification information where necessary and will respond within applicable statutory periods.
You may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
09Security and automated decision-making
We apply technical and organizational measures proportionate to the risks to protect personal data against unauthorized access, loss, alteration and disclosure. No website or system can promise absolute security. Initial project-enquiry assessment through this website should not involve solely automated decision-making with legal or similarly significant effects. If actual workflows involve such decisions, these must be documented and disclosed before use.
10Work carried out for clients
This policy covers personal data processed through the public website and Xendai's business-contact channels. In client AI-system projects, controller/processor roles, instructions, security, subprocessors and international transfers will be determined in the relevant contract and, where required, a separate data-processing agreement. This policy does not replace that agreement.
11Changes and contact
This policy may be updated when actual processing, technology or law changes. The published version must state a real last-updated date after approval. For privacy enquiries, contact legal@xendai.ai.