Privacy Policy

This policy describes what this website measures, what we do with information you send us, and who else can see it. It is written to match how the site actually works rather than to cover every theoretical case.

1. Who we are

The controller of your personal data is:

AML Konverzija, Aleksander Malis s.p., trading as Lixum
3310 Žalec, Slovenia
Registration number: 8797153000 · VAT ID: SI33059977
Full registered address on request, and on file with AJPES
Email: info@lixum.agency

We are a small business and have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. Privacy questions go to the address above and are answered by the owner.

2. Information you give us

• Booking a call. Scheduling runs on Calendly, which collects your name, email and the details you enter when booking.
• Forms and questionnaires. The contact and project questionnaires collect what you type into them, typically a name, an email address, a company and a description of what you are trying to solve. If you attach a file to the project questionnaire, we keep it with your answers; a file whose form is never sent is deleted after 7 days.
• Voice input. The project questionnaire has a microphone button for dictating an answer. It listens only after you press it, and your browser’s own speech service (for example Google in Chrome, Apple in Safari) turns what you say into text. We receive only the text.
• Website snapshot. If you use the free website snapshot, the address you type is sent to Anthropic, whose AI, Claude, reads the public pages of that site and writes the report. We keep the report for 7 days, filed under the site and not under you, so the next request for the same site is instant. Your IP address is held in memory for at most a day to limit how often the tool can be used, and is not written anywhere. If you leave your email under a report, it becomes an enquiry like any form above, with the report attached.
• Newsletter. If you subscribe, we store your email address until you unsubscribe. Every newsletter, and every other marketing email we send, carries an unsubscribe link.
• Live chat. The chat bubble is Chatwoot, running on our own server at chat.lixum.agency. An AI assistant answers first, using our own documents about Lixum, and a person from Lixum takes over when needed. Messages you send there are stored so we can reply.
• Client portals. If you are a client, your project portal holds the documents, answers and files exchanged during the engagement, reachable through a private link, and an access code where one is set.

3. What the site measures

We do not use Google Analytics or any third-party analytics product. Traffic is measured by a script we wrote, served from this domain, which records:

• pages viewed, and how long a visit lasts
• clicks, including the text of the element clicked
• how you move through a page: where the pointer or your finger goes, how far you scroll, and where you click or tap, each with its timing, so that a visit can be replayed as a moving pointer over the page. A replay holds no page content and nothing you type.
• how far down each page you got, and how long the page was open
• how quickly the first page you opened loaded and responded, as your browser measures it: timings only
• the referring site and any UTM campaign parameters on the link you arrived through
• the country and city your request came from, as reported by Cloudflare
• the browser and device you use (the user agent your browser sends) and the size of your window

Three things it deliberately does not do, because they are the difference between measuring traffic and identifying people:

• It sets no cookie and writes nothing to your device.
• It does not store your IP address. Your IP is used momentarily, in memory, to rate-limit the endpoint against abuse, and is never written to the database.
• It ignores the email parameter that newsletter links carry in their query string. Recording it would have attached a direct identifier to otherwise anonymous events.

Because it stores nothing on your device and keeps no identifier that follows you from one visit to the next, this measurement does not rely on consent under Article 5(3) of the ePrivacy Directive. It runs on our legitimate interest in knowing whether the site works. You can still switch it off, and we honour three signals: Global Privacy Control, Do Not Track, and the decline button on the site’s own banner, which stops collection immediately and for future visits.

When you send us a form from the site. If you send the project questionnaire, ask for a plan under a website snapshot, or sign up through the newsletter pop-up, the form also sends the id of the visit it was sent from. Your enquiry is then linked to that one visit, so we can see how you found the site and which pages you read before writing, including its replay while that is kept. Nothing else changes: no id is kept on your device, later visits are not recognised as yours, and if you have switched measurement off there is no visit to link. The link is deleted with the visit data after 90 days, or as soon as we delete your enquiry.

4. What is stored on your device

The site keeps a few small values in your browser’s local storage. None of them identify you and none are sent to advertisers:

• lixum-theme: whether you chose light or dark
• lixum_lang: your language preference
• lixum-cookie-consent: whether you dismissed the banner
• lixum-analytics-optout: set only if you decline measurement

Chatwoot sets its own storage so a chat conversation survives a page reload.

The booking calendar is Calendly’s. It loads only when you press “Choose a time” on the booking page. From then on Calendly and the services it uses (Cloudflare, OneTrust, Stripe) set their own cookies, under Calendly’s privacy policy.

5. Why we are allowed to process it

• Contract, or steps before one. Answering your enquiry, running a project, issuing invoices.
• Consent. Newsletter subscription only, withdrawable at any time.
• Legitimate interest. Understanding site usage and how an enquiry came about, and keeping the site available and free of abuse.
• Legal obligation. Invoices and accounting records, which Slovenian tax law requires us to keep.

6. Who else processes it

We do not sell your data and we do not share it for advertising. These providers process it on our behalf:

• Hostinger: the server running this site, our chat and our automation, located in the EU.
• Cloudflare: sits in front of the site for delivery and abuse protection, and tells us the country a request came from.
• Google Firebase / Firestore and Google Sheets: the database behind form submissions, portals and analytics events, and a working copy of enquiries kept by our automation. Note this stores data in the United States, under the Data Privacy Framework agreed between the EU and the US.
• Calendly: booking and scheduling.
• Hostinger Email: sending and receiving mail.
• xAI (Grok): the AI model behind the assistant in the site chat, and behind some AI features in our back office.
• OpenAI: turns each chat message into a search key, so the assistant can find the relevant part of our own documents. It does not write the replies.
• Pinecone: holds the search index of our own documents, and receives those search keys.
• Anthropic (Claude): the AI assistant inside our back office. When we ask it about an enquiry or a client, it can read what you sent us: form and questionnaire answers, emails and portal messages. When we switch it on, it also reads new emails from enquiries and clients as they arrive and suggests updates to our records, which a person checks before anything changes; we keep its one-line summary of each email for 14 days, never the email itself. When we write up a call with you, it reads the transcript or our notes of that call. It also reads the public pages of a site you enter into the website snapshot, and writes that report. Once a week it writes us a short summary of the site’s traffic from counts (visits, pages, where visitors came from, their countries), which names no visitor. Anthropic’s terms do not allow it to train its models on any of this.

xAI, OpenAI, Pinecone and Anthropic are based in the United States, and what they receive may be processed there. Each offers data processing terms to its business customers; write to us for the safeguards that apply to a particular provider. No decision with legal or similarly significant effect is made about you by automated means alone.

7. How long we keep it

• Analytics events: 90 days. A scheduled job deletes anything older, automatically.
• Visit replays: 30 days, deleted by the same job.
• Which visit an enquiry came from: 90 days, like the visit itself, or until the enquiry is deleted.
• Newsletter: until you unsubscribe.
• Enquiries and chat: for as long as the conversation is live, and afterwards while a working relationship is plausible.
• Conversations with the AI assistant in our back office: deleted automatically 90 days after the last message.
• Website snapshot reports: 7 days, and they are about the site, not about you.
• Client project data: for the engagement, and afterwards where we are required to keep it.
• Invoices: as long as Slovenian accounting law requires.

8. Your rights

Under the GDPR you may ask us to:

• give you a copy of the data we hold about you (access)
• correct anything inaccurate (rectification)
• delete it (erasure)
• pause our use of it while a dispute is resolved (restriction)
• hand it over in a portable format (portability)
• stop processing based on legitimate interest (objection)
• withdraw consent you previously gave, without affecting what came before

Write to info@lixum.agency and we will respond within one month. If you are not satisfied, you can complain to the Slovenian supervisory authority, the Information Commissioner (Informacijski pooblaščenec).

9. Security

Traffic is encrypted in transit with TLS. Our database and stored files are encrypted at rest by the provider. Administrative access is restricted to named accounts, client portals are reachable only with a private link (and an access code where one is set), and internal service calls are authenticated. We describe what we do rather than name a cipher, because the specific algorithm is the provider’s choice and can change without us knowing.

10. Changes

When the site changes what it collects, this page changes with it, and the date at the top moves. This revision describes linking an enquiry sent from the site to the visit it came from (section 3), and the weekly traffic summary Claude writes for us (the Anthropic entry in section 6).