Pages,never people.

What you send

When you contact us or complete an intake form, we collect the information you choose to submit. Depending on the form, that can include your name, email address, phone number, business details, website, project goals, budget range, timelines, social links, and uploaded project files.

What analytics records

If you allow analytics, Google Analytics records how the site is used: the pages you view, how far you scroll on longer pages, the buttons and links you use (such as a contact button, the menu, an FAQ or a link to a client's site), how far you get through the brief, whether you open the assistant and roughly how many messages you send, whether you open Brief mode and how many of its fields you confirm, whether you used the question at the top of the home page (whether you started from an example, spoke instead of typing or added a suggested detail, whether its examples came from a page you viewed or the link you arrived by, roughly how long your text was and which version of that section you saw, never the words themselves), how fast pages load, the campaign or site that sent you, and your approximate location, browser and device.

What analytics never gets

Analytics never receives your name, email address, phone number, or anything you type into a form or the assistant. When you send a brief, it records only the kind of project, timing and budget range you picked, and from Brief mode, how many fields were filled in.

We use submitted information to respond to enquiries, assess and scope possible work, prepare proposals, deliver projects, support clients, prevent abuse, and keep a record of our business conversations.

We use aggregated website analytics to understand which pages help people, find technical problems, and improve the site. We do not sell personal information.

This website is hosted on Vercel. Google Analytics provides consent-aware website measurement. Form submissions are sent into x Create's client and project systems at app.xcreate.io so the team can respond and manage the work.

When you use Ask x Create, including Brief mode and the prompt on the home page, what you type into it is sent to Anthropic, the AI provider that writes its replies. Anthropic processes it to answer you and, under its commercial terms, does not use it to train its models. The conversation stays in your browser tab until you close it. If you use the microphone on the home page's prompt, your browser's own speech recognition turns your voice into text (Chrome sends the audio to Google and Safari to Apple to do this); we never receive the audio. That prompt also remembers, in your browser tab only, which case study or industry page you last viewed, to suggest a relevant example. A brief you choose to send goes to app.xcreate.io like any other form.

We may also use service providers for hosting, storage, communication, security, and project delivery. They receive information only where it is needed to provide those services, operate the business, comply with law, or protect the site and its users.

Asking first

On your first visit we ask whether you allow analytics. Google Analytics only loads after you choose “Allow analytics”. Choose “Only necessary” and it never loads. Either way, advertising storage, advertising data, ad personalisation and Google signals stay off.

What is stored

Google Analytics uses a first-party cookie with a random ID to tell visits apart. If you allow analytics, we also keep a note of how you first arrived (the landing page, any campaign tags and the kind of site that sent you) for this browser session only. If you send a brief, that note goes with it, so we can see which channels lead to real conversations.

Changing your choice

You can change your choice any time through “Analytics settings” in the footer. Choosing “Only necessary” later deletes the analytics cookies and the session note. You can also block or delete cookies in your browser settings.

We keep enquiry and project information only for as long as it is reasonably needed for the conversation, project delivery, support, business records, dispute handling, security, or legal obligations. Retention periods therefore differ by record type and relationship.

We use access controls, encrypted connections, and reputable infrastructure providers to protect information. No internet service can guarantee absolute security, so please do not submit passwords, card details, identity numbers, health information, or other sensitive secrets through these forms.

x Create is operated from South Africa and works with clients internationally. Some service providers and infrastructure process information in other countries. We use providers and safeguards appropriate to the service and applicable requirements.

Depending on the law that applies to you, you may ask to access, correct, delete, restrict, or object to our use of your personal information, or withdraw consent where processing relies on consent. We may need to verify your identity before completing a request, and some records may need to be retained where law or an active business relationship requires it.

To make a privacy request, use the contact page and write “Privacy request” in the message. We will route it to the person responsible for the website and client records.