Who we are
xyagent.ai is operated by Neil Armstrong, an independent AI consultant based in England, UK. For any privacy-related queries, contact neil@xyagent.ai.
What data we collect
We collect the following personal data when you use our services:
- AI Opportunity Finder: Company name you enter. We also temporarily log your IP address for rate limiting purposes.
- Contact & interest forms: Name, email address, company name, and message content.
- Analytics: If you consent to cookies, Google Analytics collects anonymised usage data (pages visited, time on site, device type, and — where you are signed into a Google account with personalised ads enabled — aggregate demographic and interest category data via Google Signals). See our Cookie Policy for details.
Why we collect it
- To provide our service: The AI Opportunity Finder analyses publicly available Companies House data to generate a report for you.
- To respond to enquiries: Contact form submissions are emailed to us so we can reply to you.
- To prevent abuse: IP-based rate limiting protects the service from misuse.
- To improve the website: Analytics data (with consent) helps us understand how visitors use the site.
Legal basis for processing
Under UK GDPR, we process your data on the following grounds:
- Consent: Analytics cookies are only set with your explicit consent.
- Legitimate interest: Rate limiting and service protection.
- Contract performance: Processing form submissions to respond to your enquiry.
Third parties
Your data may be processed by the following third-party services:
- Anthropic (Claude API): Company data is sent to generate AI analysis. Anthropic does not retain input data for model training on API requests.
- Resend: Email delivery service used to send form submissions to us.
- Companies House: Public company data is retrieved from the UK government registry.
- Netlify: Website hosting and serverless functions.
- Google Analytics (including Google Signals): Website usage analytics (only with your consent). Google Signals is enabled on this property, which allows Google to collect aggregate demographic and interest data for visitors who are signed into their Google account and have personalised ads enabled. This data is used to improve our understanding of our audience and, in future, to serve relevant ads. Google's privacy policy applies: policies.google.com/privacy.
Data retention
- AI analysis results are cached for up to 7 days, then automatically deleted.
- Contact form emails are retained in our inbox for as long as needed to respond to your enquiry.
- IP addresses used for rate limiting are held in memory only and not persisted to disk.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Data portability
- Withdraw consent at any time (for analytics cookies)
To exercise any of these rights, email neil@xyagent.ai.
Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated date.