Privacy policy
Xalerate AB ("we", "us") operates the website xalerate.com.
Data we collect
This website uses Umami Analytics, a privacy-first, open-source analytics tool hosted on our own servers. Umami does not use cookies and does not collect personal data. It records anonymous page views, referrer sources, and device type. No data is shared with third parties.
If you contact us by email, we will receive your email address and the content of your message. This information is used solely to respond to your enquiry.
AI assistant
This website features an AI-powered chat assistant. When you use it, your messages are sent to a third-party AI provider (Anthropic) for processing via their API. We do not store your conversations — they exist only in your browser session and are discarded when you close or refresh the page. Anthropic's API does not use your inputs to train their models. No personal data is collected through the assistant unless you voluntarily include it in your messages. We recommend not sharing sensitive personal information in the chat.
Legal basis for processing (GDPR Art. 6)
Analytics: legitimate interest (Art. 6(1)(f)) — we have a legitimate interest in understanding how visitors use our website. The processing is minimal and privacy-preserving (no cookies, no personal data). AI assistant: consent (Art. 6(1)(a)) — by voluntarily using the chat assistant, you consent to your messages being processed as described above. Email: legitimate interest (Art. 6(1)(f)) — to respond to your enquiry.
Data controller
Xalerate AB (Org. nr 559575-8698), Karlstad, Sweden is the data controller for all processing described in this policy.
Your rights under GDPR
As a data subject under EU/EEA law, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of personal data we hold about you. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY). Contact us at info@xalerate.com.
Data retention
Analytics data is retained for 12 months. Email correspondence is retained for as long as needed to handle your enquiry. AI assistant conversations are not stored.
Third-party processors
Anthropic (AI assistant API processing, USA — with Standard Contractual Clauses for EU data transfers), Railway (hosting, USA — with SCCs). No other third parties receive your data.
Contact
Xalerate AB · Org. nr 559575-8698 · Karlstad, Sweden · info@xalerate.com
Last updated: April 2026