Privacy Policy

Effective date: ·Last updated:

Your privacy matters to us. This policy explains, in plain language, what personal information Xtek AI collects, why we collect it, who we share it with, how long we keep it and what choices and rights you have under the California Consumer Privacy Act (CCPA/CPRA) and other US state privacy laws.

To change your cookie and advertising choices, open . To read the rules for using our website and services, see our Terms and Conditions.

1.Who we are and what this policy covers

Xtek AI (“Xtek AI”, “we”, “us”) is a United States AI implementation and digital marketing agency. We are the “business” (controller) responsible for the personal information described in this policy. We operate online: we do not run a public office, and our meetings with clients take place by video call.

This policy applies to personal information we collect through xtekai.com and its sub-sites (including our landing pages), our contact, quote and newsletter forms, our AI voice and chat assistant, our emails and calls with prospects, and our interactions on Google, Facebook, Instagram and LinkedIn.

Client work. When we build or run automations for a client, we often handle personal information that belongs to the client’s own customers or staff. In that case we act as the client’s service provider, follow the client’s instructions and handle that information under our written agreement with the client. If your information is held by one of our clients, please contact that client first.

Contact: tekmanager@xtekai.com · 609 912 6800.

2.Personal information we collect

This is the personal information we collected in the last 12 months and continue to collect, with the matching California (CCPA) category:

What we collectExamplesWhere it comes fromCCPA category
Contact detailsName, business or organization name, email address, phone number, sector or industry (Next Horizon requests).You, when you complete a contact, quote or newsletter form, or write or call us.Identifiers; customer records (Cal. Civ. Code § 1798.80(e)); professional information (business name)
Your messages and requestsThe description of your project, questions, meeting preferences, and the content of emails and calls with us.You.Commercial information; audio and electronic information (call and email content)
Text message (SMS) recordsYour mobile number, whether and when you opted in or out, the wording you agreed to, the page and device details of your opt-in, and the content and delivery status of the messages we exchange.You, and our messaging platform provider.Identifiers; commercial information; electronic information
AI assistant conversationsYour voice and/or typed messages and the resulting transcript when you use our AI voice or chat assistant.You, through the assistant on our site.Audio and electronic information
Device and usage dataIP address, browser and device type, pages viewed, referring page, approximate location derived from your IP address, date and time.Automatically from your browser. Server logs are always created; analytics and advertising tools apply as described under Cookies.Internet or other network activity; geolocation data (approximate only)
Online identifiersCookie identifiers set by Google Analytics and the Meta Pixel.Your browser, unless you opt out.Identifiers; internet or other network activity
Client and business informationBusiness documents, account access, invoices and workflow data you give us to deliver services.You, during an engagement.Commercial information; professional information
Public profile interactionsReviews, messages or comments you post on our Google Business Profile, Facebook, Instagram or LinkedIn pages.You and the platform.Identifiers; electronic information

Sensitive personal information. We do not ask for and do not intend to collect sensitive personal information (such as health data, Social Security or other government ID numbers, financial account credentials, precise geolocation, biometric data, or information about race, religion, sexual orientation or immigration status). Please do not send it to us through our forms or the AI assistant. Xtek AI is not a HIPAA covered entity and our website is not intended for protected health information.

You are never required to give us personal information, but we may be unable to respond to your request without it.

3.How we use personal information

We use the information above for these business purposes:

  • to respond to your inquiry, schedule meetings and prepare proposals;
  • to provide, manage, support and bill for our services, and to keep records for tax, accounting and legal purposes;
  • to send our newsletter and other marketing about our services (you can opt out at any time);
  • to understand how the site is used and improve it (Google Analytics);
  • to measure and improve our advertising on Facebook and Instagram (Meta Pixel);
  • to operate the AI voice and chat assistant and answer visitors’ questions;
  • to keep the site and our business secure, prevent fraud and abuse, and fix errors;
  • to comply with the law and to establish, exercise or defend legal claims.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects, and we do not use personal information to train our own AI models. We do not sell personal information for money.

4.Cookies, similar technologies and your privacy choices

Notice at collection. When you visit our site, we and our providers may collect device and usage data and set cookies for analytics (Google Analytics) and advertising measurement (Meta Pixel), for the purposes described in this policy and for as long as the cookie durations below. You can opt out at any time.

NameProviderPurposeCategoryTypical duration
xtek-cookie-consentXtek AI (stored in your browser’s local storage)Remembers your privacy choices.Strictly necessaryUntil you change it or clear your browser data
_ga, _ga_G-29BT1LZTS0Google Analytics 4 (Google LLC)Tells visitors apart and measures how the site is used.AnalyticsUp to 2 years
_fbp, _fbcMeta Pixel (Meta Platforms, Inc.)Measures the results of our Facebook and Instagram ads and attributes visits to them.Marketing / advertisingUp to 90 days

Other third-party requests

To display the site we load some resources from third parties that receive your IP address and browser details when your browser requests them: animation scripts from cdnjs (Cloudflare) and unpkg, some photographs from Unsplash, and the AI assistant widget from ElevenLabs (loaded after you interact with the page or after a few seconds). Fonts are served from our own domain.

Your Privacy Choices

  • Open (also linked in the footer) to opt out of analytics and/or advertising cookies. When you opt out we stop loading those tools and delete their cookies; you can change your mind there at any time.
  • Global Privacy Control (GPC). If your browser or extension sends a GPC signal, we treat it as a valid request to opt out of the sale or sharing of your personal information and of targeted advertising, and we do not load analytics or advertising tools for that browser.
  • You can also block or delete cookies in your browser settings, which may affect how some pages work.
  • Opt out of Google Analytics across sites with the Google Analytics opt-out add-on and manage ads on Facebook and Instagram in your Meta ad preferences.

Do Not Track. “Do Not Track” browser signals are not a recognized standard, so we do not respond to them. We do respond to Global Privacy Control, as described above.

5.AI voice and chat assistant

Our website offers an AI-powered assistant (“Start a call”) provided by ElevenLabs. You are talking to an artificial intelligence, not a person. When you use it, your voice or messages are sent to the provider so the assistant can understand and answer you, and the conversation may be recorded, transcribed and stored. We use it to answer questions about our services and to help you reach us. By using it you agree to this recording.

  • Using the assistant is optional; you can contact us by form, email or phone instead.
  • Do not share sensitive information (health, financial account, government ID or password details) with the assistant.
  • The assistant can make mistakes. It does not give legal, medical or financial advice, and nothing it says is a binding offer.
  • Conversation data is handled under our agreement with the provider and this policy, and kept only as long as described under “How long we keep information”.

6.Text and email messages

We send two kinds of messages, and our forms ask for your agreement to each one (for text messages, see also our SMS Terms):

  • Service messages (text and email) about your inquiry and appointments: replies, meeting scheduling, confirmations, reminders and follow-ups. You agree to these by checking the required service-messages box when you submit a form, because we use them to answer you and manage your appointments.
  • Marketing messages: offers, promotions and news about our services. These are optional. Marketing texts and marketing emails each have their own unchecked box, and consent to them is never a condition of any purchase.

We collect and keep your mobile number, a record of each consent (the wording you accepted, the date and time, the page you used, and your browser and IP address) and the messages we exchange with you.

  • Message frequency varies. Message and data rates may apply. Reply STOP to opt out of texts at any time and HELP for help; every marketing email has an unsubscribe link.
  • We use a third-party messaging platform and mobile carriers to deliver text messages; they process your number and message content on our behalf.
  • No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third party for their own use.

7.Who we share personal information with

In the last 12 months we disclosed personal information for business purposes to:

  • Service providers that act on our instructions: website hosting and content delivery; workflow-automation and email/CRM tools that receive form submissions; scheduling and video-meeting tools; the AI assistant provider (ElevenLabs); and analytics (Google) and advertising measurement (Meta) providers.
  • Professional advisers such as accountants, lawyers and insurers, under confidentiality duties.
  • Authorities and other parties when the law requires it or to protect rights, safety and security.
  • A successor if we are involved in a merger, acquisition or sale of assets.
  • Others at your direction, for example when you ask us to connect with one of your vendors.

Sale and sharing. We do not sell personal information for money. Advertising and analytics cookies (the Meta Pixel and Google Analytics) send identifiers and internet activity to Meta and Google, which some state laws treat as a “sale” or as “sharing” for cross-context behavioral advertising. We do this only for visitors who have not opted out. You can opt out at any time through or with a Global Privacy Control signal. We do not knowingly sell or share the personal information of anyone under 16.

Mobile information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third party for their own use. See “Text and email messages” above.

8.Where information is processed

Xtek AI is based in the United States and offers its services to businesses in the United States. We store and process personal information in the United States. We do not currently offer our services to individuals in the European Economic Area, the United Kingdom or Switzerland. If you access our site from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

9.How long we keep information

We keep personal information only as long as needed for the purposes above, using these criteria:

  • Inquiries and prospects: until your request is resolved and for a reasonable period afterwards so we can follow up; deleted on request unless we need it for a legal reason.
  • Clients: for the length of the engagement and afterwards for the period required for tax, accounting, contract and dispute purposes.
  • Newsletter: until you unsubscribe, after which we keep a minimal suppression record so we do not email you again.
  • Analytics and advertising data: for the retention period configured in those tools; cookies expire as listed above.
  • Consent records: the record of your text-message and email consent is kept for at least four years after your last interaction or opt-out, or longer if the law requires, so that we can show what you agreed to.
  • AI assistant conversations and server logs: for as short a time as is needed to answer, improve reliability and keep the service secure.

When we no longer need information we delete or de-identify it.

10.How we protect information

We use reasonable administrative, technical and physical safeguards appropriate to the risk, including encrypted connections (HTTPS/TLS) between your browser and our site, access limited to people who need it, and providers that maintain their own security programs. No system is completely secure, so we cannot guarantee absolute security. If a breach affects your information, we will notify you and the authorities as the law requires.

11.Your privacy rights (California and other US states)

Depending on where you live, laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”) and the privacy laws of Colorado, Connecticut, New Jersey, Oregon, Texas, Virginia and other states give you rights over your personal information. We honor these rights for residents of every state that grants them.

  • Know / access: the categories and specific pieces of personal information we hold about you, the sources, the purposes, and the categories of recipients (see the table above and “Who we share personal information with”);
  • Delete personal information we collected from you, subject to legal exceptions;
  • Correct inaccurate personal information;
  • Portability: receive your information in a portable, readily usable format;
  • Opt out of sale, sharing and targeted advertising: use or a GPC signal, which we treat as a valid opt-out request;
  • Limit use of sensitive personal information: not applicable, because we do not collect it for inference or profiling;
  • No retaliation: we will not deny you services, charge different prices or give a different quality of service because you exercised a right.

How to make a request. Email tekmanager@xtekai.com or call 609 912 6800 and tell us which right you want to exercise. We will confirm receipt within 10 business days and respond within 45 days (we may extend once by another 45 days and will tell you why). To protect you, we verify a request by matching details you give us with what we already hold. You may use an authorized agent, who must show your written permission; we may still verify your identity directly with you.

Appeals. If we decline your request and your state gives you a right to appeal, reply to our decision (or email us with the subject “Appeal”) within 60 days and we will respond within the period your state requires. You can also contact your state attorney general.

California “Shine the Light” and Nevada. California residents may ask once a year which personal information we shared with third parties for their direct marketing (we do not do so). Nevada residents may submit an opt-out request about the sale of personal information; we do not sell it as Nevada law defines the term.

12.Emails, calls and marketing preferences

We send marketing emails only to people who subscribed or whom we may lawfully contact for business purposes, in line with the CAN-SPAM Act. Every marketing email includes a working unsubscribe link and our contact details, and we honor opt-outs within 10 business days. You can also ask us to stop by emailing tekmanager@xtekai.com.

We may call you about your inquiry at the number you provide; tell us if you prefer not to be called and we will stop and add your number to our internal do-not-call list. We send service messages by text and email (replies, scheduling, confirmations, reminders and follow-ups) because you agreed to them when you submitted a form. We send marketing texts and emails only if you checked the separate, optional boxes for them or otherwise opted in (see “Text and email messages” and our SMS Terms), and we never make consent to marketing a condition of buying anything (Telephone Consumer Protection Act). You can opt out of marketing at any time.

13.Children

Our website and services are intended for businesses and adults. They are not directed to children under 16, and we do not knowingly collect personal information from them (in line with the Children’s Online Privacy Protection Act). If you believe a child has given us information, contact us and we will delete it.

15.Changes to this policy

We may update this policy as our practices or the law change. We will post the new version here with a new effective date and, for material changes, give additional notice (for example on the site or by email).

16.Contact us

Questions, requests or complaints about privacy? Email tekmanager@xtekai.com or call 609 912 6800. We are an online business without a public office, so please contact us electronically or by phone.