0DE
Back to home

Privacy notice

This notice explains what personal data x25go uses. It also explains the purpose, the services involved and your rights.

Controller

The controller is Management Consulting Mayr, Roman Mayr, Waldaustrasse 2, 9500 Wil SG, Switzerland. Email: info@x25lab.com.

Website audit for SEO, GEO, technical quality and LLMO

The audit is optional. x25go fetches the public URL that you enter. Checks can include status, redirects, title, meta data, headings, links, images, structured data, robots.txt, sitemap and llms.txt.

Private network addresses are blocked. Do not enter a URL with login data, tokens or secret parameters.

For optional AI prioritisation, x25go sends the URL, scores and structured technical findings to OpenAI. The full HTML source is not sent for this step. The request uses store: false. The technical audit also works without OpenAI.

For a report by email, x25go uses your email address, the checked URL and the report. Microsoft Graph sends the message. A copy goes to info@x25lab.com.

A paid report costs CHF 15 including applicable tax. The billing address is checked through OpenStreetMap/Nominatim. Name, email, billing address and payment, tax and transaction data are then sent to Stripe. After confirmed payment, x25go calculates net and tax. x25go creates a PDF invoice, stores it securely and emails the invoice and report. Legal retention duties remain in force.

Audit data that may be stored

For operation and evidence, x25go stores the audit ID, entered and final URL, host, UTC times, runtime, status, scores, findings, AI priority, sending status, payment status, errors and email address.

For proof of consent, x25go may store the consent version, UTC time, IP address, IP hash, browser identifier, language, origin and referrer. Country or region is used only when trusted infrastructure already provides it. x25go does not start a hidden location lookup for this purpose.

PIN codes, cookies, authorisation headers and the full HTML source of the checked page are not stored in the audit record. Audit and evidence data is normally deleted after twelve months. A longer period applies only when payment, invoicing, security or a legal claim requires it.

Booking and remote session

x25go uses contact details, booking data, session data, selected topic, optional notes, payment status and technical logs. This data is used for booking, the remote session, invoicing, security and support.

AI Bot

You can send your own message only after you accept the privacy notice in the AI Bot. Before that, you only see the introduction and fixed quick questions.

When you send a message, x25go uses your text, the needed chat history, language, page path and technical connection data. Do not send passwords, payment data, highly sensitive personal data or confidential content.

Your message and needed context are sent to OpenAI. x25go requests store: false. For operation and safety, logs may include request, answer, time, language, page path, IP address, rough region, browser identifier, model, usage and error status.

The chat history shown in the open browser tab, consent and UI state stay only in the tab session storage. They are deleted when the tab closes. The AI Bot uses no session cookie and no persistent Local Storage for this history. You can withdraw consent for future messages at any time.

Manually checked business contacts

For internal and manual business outreach, x25go may check public professional data. This can include company, person, role and business contact address. OpenAI may help search public sources. Person, role and company are used only when several sources support them. Email addresses are never guessed.

Before a message is sent, x25go checks the legal area, sending basis, sources, recipient and content. For Germany and Austria, external sending is technically blocked without proven consent or a fully documented legal existing-customer exception. Swiss cases need an extra manual review. There are no automatic follow-up series and no open mass-mailing function.

Every external message includes an opt-out path. An objection creates an immediate entry in the global block list. Necessary sending records may remain stored.

Third parties

Stripe processes card payments. Microsoft Teams is used for remote sessions. Microsoft Graph can send emails and audit reports. OpenAI creates AI Bot answers and can prioritise structured audit findings. Hosting and email providers may see technical data where this is needed for operation and security.

Cookies and analytics

Required local settings support language, consent, booking and security. Optional analytics starts only after consent. It uses a first-party endpoint on this website. See the Cookie Policy for details.

Your rights

Depending on the law, you may request access, correction, deletion, restriction or object to processing. Email info@x25lab.com. Legal retention duties remain reserved.

How we handle data in daily use

We collect data only for a clear purpose. A booking needs your name, email address, session time and billing details. A card payment adds the details that Stripe needs. A Teams session needs the contact address that receives the meeting link.

For the website audit, you enter a public URL yourself. The service reads only data that can be reached through that public URL. Private networks are blocked. Do not enter passwords, tokens or secret links. The normal technical audit does not need AI.

The AI Bot processes your own messages only after you agree first. Do not send passwords or highly sensitive data. Check important answers before you use them. The chat in the open browser tab is meant for that session only.

You can ask what personal data we hold about you. You can ask us to correct wrong data. Depending on the law, you may also ask for deletion, restriction or object to processing. We cannot delete data early when an invoice or another legal duty requires us to keep it.

Our basic rule is simple: use as little data as possible and only as much as needed. A service is loaded only when its function needs it. Optional analytics stay off until you agree.

In short, you stay in control. Use only the data that is needed for the task. Optional analytics stays off until you choose it. Keep passwords and secret links out of the audit and the AI Bot.

Last updated

September 2026.