Privacy Policy
Last updated September 24, 2026. This page explains what information xeaura.com collects, why, and what we do with it.
1. Who we are
Xeaura designs, builds, and manages websites for local businesses throughout Orange County, California. This policy covers xeaura.com and the forms on it.
Questions about this policy or your information: contact@xeaura.com.
2. What we collect
Applications (Get Started): your name, email, business name (optional), business type, what you need done, your timeline, and any add-ons you'd like a quote on.
Contact requests (homepage): your name, email, business name (optional), and business type.
Portal password: only if you choose to set one. It's stored as a one-way hash — we can't see or recover it. If you use the portal, we also record when you first set your password and when you last signed in.
How you found us: when you submit an application or contact request, we store the name of the website that referred you (not the full address), the first page you visited on our site, and any campaign tags in the link you used (such as the source of an email we sent), together with your submission.
Emails you send us, and our replies.
Technical data: when you visit, our hosting and network providers process standard request data (such as IP address, browser, and the pages requested) to deliver and protect the site. We also use Cloudflare Web Analytics to see aggregate visit counts.
Abuse prevention: to limit repeated form submissions, we keep a one-way, keyed hash of the IP address and email address used (never the addresses themselves) and delete it automatically once it's more than a day old.
3. How we use it
To review your application or request and reply to you, to provide and manage our services if you become a client, to send the emails described below, and to keep the site running and secure.
We don't use your information for advertising, and the site has no advertising trackers.
4. Emails about your submission
When you submit an application, we email you a confirmation (including a link to set a portal password), and our team gets a notification with the details you entered. If you request a password link later, we email it to the address on your application.
When you send a contact request, the details you entered are shared with the Xeaura team by email so we can respond and follow up.
Replies about your application come from our team by email. We don't add you to a marketing list.
6. Where it's stored and who processes it
We use service providers to run the site: Vercel (website hosting), Neon (the database that stores applications and contact requests), Cloudflare (domain, network delivery and security, and web analytics), Resend (sending our automated emails, such as application confirmations), and Google Workspace (our email inbox, where replies to contact@xeaura.com arrive). They process information on our behalf to provide those services.
We don't sell or rent your personal information.
7. How long we keep it
We keep application and contact records for as long as we need them to respond to you and, if you become a client, to provide our services and keep business records. For clients, what happens to site content after cancellation is covered in our service agreement.
8. Security
The site is served over HTTPS, portal passwords are stored only as one-way hashes, and access to application and contact records is limited to Xeaura team members with admin accounts. No system is perfectly secure, but we work to protect what you share with us.
9. Your choices
You can ask us to show you, correct, or delete the information you've submitted by emailing contact@xeaura.com. Existing clients can also write to support@xeaura.com.
10. Children
Xeaura provides services to businesses. The site isn't directed to children, and we don't knowingly collect information from them.
11. Changes to this policy
If our practices change, we'll update this page and the date at the top.