Product
Why it mattersHow a Call is madeProof it worksWho we work withPlans
Solutions
For Private EquityFor Corporate DevelopmentFor Investment Banking
Research
Research and track recordThe ledgerChangelog
About
Book a demo
Sign inStart a mandate

Privacy Policy

How we handle your data.

Short and plain. This explains what we collect on xenaris.io, why, who sees it and what you can do about it.

Last updated 18 October 2026

1Who we are

Xenaris runs the website xenaris.io. In this policy, "Xenaris", "we" and "us" mean Xenaris. We are the controller of the personal data described here.

You can reach us at roey@xenaris.io. We have not appointed a data protection officer. Send privacy questions to that address.

2What this policy covers

This policy covers the xenaris.io website, including the sample week page and the demo request form. It also covers the emails we send in reply to those forms.

It does not cover the Xenaris product at signal.xenaris.io or other sites we link to. Those have their own terms and notices. Other sites are not under our control.

3Data we collect

Data you give us. When you send the sample week form we collect:

  • Your name
  • Your work email
  • Your firm
  • Your firm type, chosen from a list
  • A short note about what you are looking for. This is optional, so please do not include sensitive data

When you send the demo form we collect your name, email, company and any notes you add. If you email us, we keep the email and your address.

Data collected from your visit. When you land on the sample week page from an ad, we also store:

  • Google click ids (gclid, gbraid and wbraid)
  • Campaign tags (UTM values and the match type)
  • The page address you landed on and the page that referred you
  • Your browser and device type (the user agent), saved with your request

The click ids and campaign tags are kept in your own browser for 30 days. They are only sent to us if you send the form. They help us see which ad led to your request.

Data from cookies and similar tools. With your consent, Google Analytics 4 and Google Ads set cookies and collect usage data such as pages viewed, device, browser and approximate location. We also record your cookie choice in your browser and keep it for 6 months.

Our hosting provider and a privacy-friendly traffic counter process technical data such as your IP address and pages requested. The traffic counter does not use cookies.

We do not ask for sensitive personal data. We do not sell your personal data.

4Why we use your data and our legal bases

We only use personal data when the law lets us. This is what we do and why.

  • Reply to your sample week or demo request and send you the sample

    Data: Name, work email, firm, firm type, your note

    Legal basis: Steps at your request before a contract, and our legitimate interests in answering enquiries

  • Follow up about your request and keep a record of leads

    Data: The form details and the date of your request

    Legal basis: Our legitimate interests in running and improving our business. You can object at any time

  • Measure website traffic with Google Analytics

    Data: Cookie identifiers, pages viewed, device and approximate location

    Legal basis: Your consent

  • Measure which ads lead to a request with Google Ads

    Data: Click ids, campaign tags, cookie identifiers, the fact that a form was sent

    Legal basis: Your consent

  • Count visits without cookies, keep the site secure and stop abuse

    Data: IP address, browser details, pages requested, hosting logs

    Legal basis: Our legitimate interests in a safe and reliable website

  • Meet legal duties and handle legal claims

    Data: Any data needed for the duty or claim

    Legal basis: Legal obligation or our legitimate interests

5Cookies, Google tags and your choice

We use Google Analytics 4 to understand how people use the site. We use Google Ads measurement to see whether an ad led to a request. Both use the Google tag.

We use Google Consent Mode. Until you choose, the tag runs with analytics and advertising storage switched off. If you reject, it stays off. In that case Google may still receive limited signals that do not use cookies, such as a ping that a page was viewed. If you accept, Google Analytics and Ads may set cookies and use identifiers.

We also use your browser storage to remember your cookie choice for 6 months and your ad click details for 30 days. These items are first party and stay in your browser.

You can change your choice at any time:

You can also block or delete cookies in your browser settings. Google offers its own controls, including the Google Analytics opt-out add-on and Ads Settings.

6Who we share data with

We share data only with providers who help us run the site and the sample week service. They act on our instructions, except where noted.

  • Google Analytics and Google Ads, for measurement. For advertising, Google may also act as an independent controller under its own policy
  • Google Workspace, including Google Sheets and Gmail, where we store leads and send replies
  • Vercel, which hosts the website and runs our form handling
  • Our application platform provider, which receives demo requests and runs the Xenaris product
  • Professional advisers, insurers and authorities, where the law requires or to protect our rights
  • A buyer or investor, if Xenaris is involved in a sale, merger or financing. We would tell you if that changed how your data is used

We do not sell your data and we do not share it for other companies to market to you.

7International transfers

Our providers may process data outside the UK and the European Economic Area, including in the United States. Where they do, we rely on safeguards the law accepts. These include the UK and EU adequacy decisions for certified US providers, such as the Data Privacy Framework, and standard contractual clauses with the UK addendum where needed.

Ask us at roey@xenaris.io if you want more detail about the safeguards for a provider.

8How long we keep data

  • Sample week and demo requests. Up to 24 months after our last contact, unless you ask us to delete them sooner
  • Emails with us. Up to 24 months after the conversation ends
  • Google Analytics data. Up to 14 months
  • Ad click details in your browser. 30 days
  • Your cookie choice in your browser. 6 months, then we ask again
  • Hosting and security logs. A short period set by the provider, normally weeks
  • Records we must keep by law. For as long as the law requires

When the period ends we delete the data or make it anonymous.

9Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you
  • Correct data that is wrong or incomplete
  • Ask us to erase your data
  • Ask us to restrict how we use it
  • Receive your data in a portable format
  • Object to our use of your data, including for direct marketing
  • Withdraw consent at any time. This does not affect what we did before you withdrew it

To use a right, email roey@xenaris.io. We may ask you to confirm who you are. We aim to reply within one month.

You can complain to your data protection authority. In the UK this is the Information Commissioner's Office (ico.org.uk). In the EU you can contact the authority in your country of residence or work. We would like the chance to help first, so please contact us if you can.

If you live in a US state with a privacy law, you may have similar rights to know, delete and correct your data and to opt out of sale and targeted advertising. We do not sell personal data. You can use the Cookie settings link to opt out of advertising measurement. We will not treat you worse for using your rights.

10Security

We use reasonable technical and organisational measures to protect personal data. These include encrypted connections, access controls and limiting who can see lead data. No system is fully secure. We cannot promise absolute security.

11Children

Our website and services are for business users. They are not directed at anyone under 18. We do not knowingly collect data from children. If you think a child has sent us data, tell us and we will delete it.

12Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If a change is significant, we will take reasonable steps to tell you, for example with a notice on the site.

13Contact

Questions about this policy or your data? Email roey@xenaris.io.