A project by Quantyque.
Privacy policy
This page explains which data XPTOSI uses, why, and how to contact us.
Updated 25 October 2026
Who is responsible
The XPTOSI project belongs to Quantyque, responsible for the service and data-related contact. For privacy matters, contact hello@xptosi.me.
Data we use
For accounts, we use your email, authentication data managed by the authentication service, and associated domains, audits and notifications. Audits receive the URL you enter and read public page content. Infrastructure requests also involve technical connection data and logs needed for operation and security.
Payments and subscriptions
If you subscribe, Stripe processes payment and billing details. XPTOSI stores identifiers linking your account to Stripe and the status, plan and billing period of your subscription. We do not store full card numbers. These records are used to manage payments, renewals and cancellations. Contact hello@xptosi.me for billing and data requests.
Purposes and legal basis
We use data to provide the requested service, manage your account and answer support requests, on the basis of providing the service or steps you request. Protecting the platform and preventing abuse serve our legitimate interest in keeping the service secure. Where a feature relies on consent, consent is requested separately and can be withdrawn.
AI-assisted analysis
When you use the advisor or simulator, the URL and parts of the public page content may be sent to configured AI providers, such as Groq and Mistral, to generate the response. The estimates shown are not answers collected from the ChatGPT, Claude or Perplexity products.
Providers and optional connections
The service uses Hetzner for hosting, Supabase for authentication and database services, and email configured through Domínios.pt. Google or Microsoft connections are used only when enabled and authorised by the user to read permitted search data. Providers process data according to their contracted functions and applicable terms.
Where processing takes place
Some providers may process data in countries other than yours, including outside the European Economic Area. Contact hello@xptosi.me for current information about the services used, locations and transfer mechanisms that apply.
Retention and deletion
Account data and saved results are retained to manage your account and provide the requested history. You can remove domains in the dashboard or request account and associated data deletion by email. Security or legal records may require different retention; any backups follow the relevant provider’s retention cycle.
Your rights
You may request access, correction, deletion, restriction or portability and object to processing where applicable. Withdraw consent through the relevant feature or contact hello@xptosi.me. You may also complain to the competent data protection authority. We may request appropriate information to verify your identity before responding.
Browser storage
We use local storage for language preference and authentication sessions. See the Cookies page for details. The current site does not integrate advertising pixels or marketing analytics.