Privacy Policy

• We collect the least we can: an email address is enough to open an account.
• There is no password anywhere in this product, so there is no password of yours to leak.
• Your walkthroughs are visible only to people you send the link to. Nothing is public and nothing is indexed by search engines.
• We don't sell your data, and we don't share it for advertising.

When you create an account: your email address, and your name if you give us one.

When you set up a build: the address of the property, and roughly when you expect it to be finished. We need the address to turn up at it.

When you write to us through the contact form: your name, email address, whether you're buying or building, and whatever you type in the message.

When you arrive from a link with campaign tags on it: the utm_source, utm_medium and utm_campaign values in the URL, and the address of the page that referred you. We keep the first one only, and use it to work out which of our own efforts are worth repeating.

When we document your build: 360° images and video of the property at each capture visit, along with the date and stage of each capture.

Passwords. Signing in works by emailed link, so no password for your Xavier account exists to be stored, guessed or stolen.

Payment card details. We don't take card numbers through this website.

We don't run third-party advertising or analytics trackers on this site, so there is no advertising profile of you being assembled here.

The imagery we capture is the most sensitive thing we hold, and it is treated that way.

• A walkthrough is visible only to someone holding a link you shared. It is not listed publicly and it carries instructions to search engines not to index it.
• Anyone you send a link to can view it, and can pass it on. Treat a share link the way you would treat a key.
• We capture what is accessible on the day. If there is something in the house you would rather we didn't record, tell us before the visit and we will work around it.
• Our staff and contractors can access your captures where it is necessary to produce, deliver or support them, and not otherwise.

One cookie, and one entry in your browser's local storage. The cookie holds your signed-in session; without it you cannot stay logged in. The local storage entry remembers whether you chose the light or dark theme, and never leaves your device.

No advertising cookies, and no cross-site tracking.

We use a small number of services to run Xavier, and no others:

• Resend, to deliver email — including the sign-in links, which is why we cannot operate without an email provider.
• Fly.io, which hosts the application and its database in the United States.
• GitHub, used only to sign in members of our own team who administer the system. It is not part of a customer account.

Each of them sees only what it needs to do its job. We do not sell your data to anyone, and we do not share it with data brokers or advertisers.

Your walkthroughs are hosted for the period stated on the plan you bought — five or ten years from capture, depending on the plan. We will tell you before that window closes.

Account details are kept while your account is open. Contact-form messages are kept while they are useful for answering you and understanding what people ask us.

Ask us to delete your account and we will, along with the captures attached to it. That is not reversible, so we will confirm before doing it.

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to hello@tryxavier.com and a person will answer.

Depending on where you live you may have additional rights over your personal data. We will honour a request of that kind regardless of where you happen to live, because maintaining two standards would be more work than doing it properly once.

Traffic to and from Xavier is encrypted in transit. Because sign-in is by emailed link, the security of your Xavier account is bound to the security of your email account — protect that one well.

If you believe you have found a security problem in Xavier, please write to hello@tryxavier.com and we will look at it promptly.

If we change this policy in a way that meaningfully affects you, we will tell you by email rather than quietly editing this page. The date at the top always reflects the current version.

Questions about this policy, or about what we hold: hello@tryxavier.com. Xavier is operated by [legal entity name and registered address to be confirmed before launch].