Privacy Policy

1. Who We Are

XENEX AI Limited is a company registered in Scotland (Company No. SC869938). We operate the website and platform available at xenex-ai.com (the “Platform”). For data protection purposes, we are the data controller.

Contact: xenex-ai@outlook.com

2. What Data We Collect

We minimise data collection. The Platform is publicly accessible with no account registration required.

• Server logs: our hosting provider (Vercel) automatically records standard server logs including IP addresses and request timestamps for security purposes. We do not access or use these logs for any purpose beyond infrastructure security. These logs are held and managed by Vercel under their own privacy policy.

We do not use cookies, analytics, tracking pixels, advertising technology, or any third-party tracking. We do not collect your name, email address, or any personal information unless you contact us directly.

3. How We Use Your Data

• To provide and maintain the Platform.
• To comply with legal obligations.

Our legal basis for processing under UK GDPR is: legitimate interests (Platform security) and legal obligation where applicable.

4. Data Storage and Security

We do not store personal data on our own servers. Server logs held by our hosting provider (Vercel) are retained in accordance with Vercel's own data retention policy.

5. Third Parties

We use the following third-party services to operate the Platform:

• Vercel — frontend hosting and infrastructure
• Hugging Face — backend Python compute and deployment
• OpenAI — AI language model processing for stock analysis
• Anthropic — AI language model processing for stock analysis
• Groq — AI language model processing for stock analysis
• Google Gemini — AI language model processing for stock analysis
• Supabase — backend data persistence
• Yahoo Finance — delayed market price data (informational only)
• NewsAPI — financial news headlines (informational only)

When you submit a stock ticker for analysis, the ticker symbol (e.g. “AAPL”) is sent to our backend which queries these services. No personal data about you is included in these requests.

We do not sell, rent, or share any personal data with any third party for marketing purposes.

6. Your Rights Under UK GDPR

As we hold no personal data about visitors directly, there is typically nothing for us to provide, correct, or delete. However, UK GDPR rights still apply where any personal data is processed on our behalf (for example, IP addresses in Vercel server logs).

If you wish to exercise any of the following rights, contact us and we will respond within 30 days — and direct you to the relevant third-party processor where appropriate:

• Access — request details of any personal data held about you.
• Erasure — request deletion of any personal data held about you.
• Objection — object to processing based on legitimate interests.

In practice, as we hold no personal data ourselves, our response will typically confirm that we hold nothing about you directly and refer you to Vercel's privacy request process for any server log data.

Contact: xenex-ai@outlook.com. We will respond within 30 days.

7. Cookies

This Platform does not set any cookies on your device. No cookie consent banner is required.

8. Complaints

As we collect no personal data directly, we do not anticipate data-related complaints. However, UK GDPR requires us to inform you that you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been infringed. We would always prefer you contact us first at xenex-ai@outlook.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated date at the top. We encourage you to review this page periodically. Continued use of the Platform after changes constitutes acceptance of the updated policy.