Privacy Policy
Last updated: 30 September 2026
1. Who we are
OpenX24 is a trading name of Servolia LLC, a limited liability company registered in the State of Wyoming, USA ("OpenX24", "we", "us"), which operates OpenX24.com. Servolia LLC is the data controller for the personal data described in this policy. This policy explains what personal data we collect, why, and what rights you have over it — including if you're visiting from the UK or EU.
2. What we collect
- Contact and project details you submit through our quiz or enquiry form: your name, email, phone or WhatsApp number, and anything you tell us about your project. If you ask for the free store check or tracking check, also your store's web address — the check reads only the pages your store shows the public, and needs no login or access.
- Your setup details, if you buy from us and complete our intake form: your business and registered company name, contact details, domain, what you sell, your delivery and returns terms, your brand colours, and the facts you want your assistant to be able to state. This is business information you choose to give us so we can build what you ordered.
- Chat messages, if you talk to the assistant on this site. They are processed to generate a reply and are not used to train AI models. Please don't put card details in the chat.
- Payment information when you purchase a plan. Card details are entered directly into Stripe's checkout and are never seen or stored by OpenX24 — Stripe handles this as our payment processor under its own PCI-compliant systems.
- Usage and advertising data via cookies and pixels (e.g. Meta Pixel, Google Ads tracking) used to measure ad performance and retarget visitors who didn't convert. On the pages our adverts link to these load when you arrive; everywhere else we ask first. Section 7 explains exactly what they are and how to refuse them.
3. How we use your data
- To prepare and deliver the store, chatbot, or CRM service you purchased or enquired about
- To follow up on quiz submissions and lead-form enquiries — including, if you ask for the free launch plan, store check or tracking check, a short series of follow-up emails over about two weeks. Every one carries a one-click unsubscribe, and the series stops by itself once you buy, once we are talking to you directly, or when you unsubscribe.
- To process payments and provide receipts
- To measure and improve our advertising campaigns
We do not sell your personal data to third parties.
3a. Our lawful basis for each use
UK data protection law requires a lawful basis for everything we do with personal data. These are ours:
| What we do with your data | Lawful basis |
|---|---|
| Taking and delivering your order, running your dashboard, taking payment and sending receipts | Contract |
| Keeping the site and your account secure and preventing fraud and abuse | Legitimate interests |
| Service emails about your order, your account or your plan | Legitimate interests |
| Answering an enquiry you send us, and the short follow-up series described in section 3 | Legitimate interests |
| Telling Meta, from our server, that an enquiry or a sale came from its advertising (section 7) — you can object at any time | Legitimate interests |
| Advertising and analytics cookies: the Meta Pixel and Google Analytics | Consent — withdraw it at any time |
| Keeping tax and accounting records | Legal obligation |
Where we rely on legitimate interests, it is our interest in running and protecting the business and replying to people who contact us, and you have the right to object (section 6).
4. Who we share data with
We share data only with the service providers needed to run OpenX24, and we name them rather than describing them:
- Stripe — payments and checkout.
- Vercel — hosting, the encrypted storage your enquiry or intake is saved in, and the cookieless page-view counting described in section 7.
- Telegram — when you send an enquiry or an intake we get an instant alert containing what you submitted, so a person sees it within seconds rather than at the end of the day. Your submission therefore passes through Telegram's servers.
- Anthropic — runs the assistant on this site, and receives your chat messages in order to reply.
- Resend — email notifications, where those are switched on.
- Meta — advertising measurement. From our server it receives your email address, phone number and name in hashed form, and your IP address and browser user agent as they are (not hashed), plus the click identifier Meta adds to the link when you arrive from one of its adverts; section 7 has the detail. If you accept cookies, the Meta Pixel in your browser also reports the pages you visit here.
- Google — Google Analytics, only if you accept cookies (section 7).
Each processes data under its own privacy policy and security standards, and some are outside the UK, so those transfers rely on the safeguards in their own terms. We never sell your data and never pass it to anyone for their own marketing.
4a. When a business uses our enquiry form
Some businesses we work for put our enquiry form on their own website. If you send an enquiry through one of those forms, that business decides what happens to your details, and OpenX24 stores and passes them on for the business, on its behalf.
- What is stored: the answers you type into the form (for example your name, email, phone number and message), the time you sent it, the page you sent it from, and a score worked out from your answers. Your IP address itself is not stored: to stop floods of junk, we keep a one-way code made from it that only counts how many enquiries came from the same address that day.
- Who it goes to: the business, by email (sent through Resend); to the business's own Telegram chat only if the business has connected one (Telegram); and to a Google Sheet only if the business asked us to connect one (Google). It is stored, encrypted, with Vercel.
- How long: for as long as the business's plan with us is active. While it is, once the plan's number of stored enquiries is reached the oldest are removed as new ones arrive. When the plan ends, the enquiries are deleted 60 days later, which gives the business time to download them — later only if we have to hold them for a stated time, such as during a dispute.
- Deleting them: you can ask the business, or email hello@openx24.com with the email address or phone number you used, and we will delete every enquiry you sent to that business.
5. Data retention
We keep enquiry and project data for as long as needed to deliver your service and meet our accounting and legal obligations, and delete or anonymise it when no longer needed unless you ask us to remove it sooner. If you cancel a Run plan we will export your data to you in a standard format, free, for 60 days afterwards. Enquiries sent through a business's enquiry form are kept as section 4a says. Chat messages are not retained by us beyond generating the reply.
6. Your rights (UK/EU visitors)
If you are in the UK or EU, you have the right to access, correct, delete, or export the personal data we hold about you, and to object to or restrict certain processing (including marketing/ad tracking). To exercise any of these rights, email hello@openx24.com and we will respond within a reasonable timeframe.
If you are unhappy with how we have handled your data, you have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113. We would appreciate the chance to put it right first, so please write to us too — but you do not have to.
7. Cookies and your choice
Cookies needed to make the site work are always active. Beyond those we use two advertising and analytics tools — the Meta Pixel and Google Analytics — which tell us which adverts brought people here and which pages they read, so we can stop paying for advertising that does not work. We do not sell your data, we do not share it with anyone beyond the processors listed in section 4, and we do not use it for anything other than measuring and improving our own advertising.
One thing that is not a cookie, and so is not part of the choice below. We also use Vercel Web Analytics, which counts page views on our own site. It sets no cookies, stores nothing on your device, and does not follow you to any other website — it records the page, the country, and the kind of device and browser, and nothing that identifies you. Because it cannot recognise you, it cannot be switched off by a cookie choice, and we run it on every page including this one. It is how we know which of our pages are read at all; the two tools above are what we ask about, because those do set cookies and do work across sites.
Where we ask, and where we do not. On every page of this site we ask before either tool loads, and if you decline neither is set. The exceptions are our advertising landing pages (/start, /store, /start-us and /tracking-check), the pages our paid adverts link to: there the two tools load when you arrive, because measuring what that advertising does is the only reason those pages exist. If you have already pressed Decline anywhere on this site, they do not load there either. You can refuse by any of the means below, and refusing changes nothing about the page or what we will do for you.
If you would rather not be measured, any one of these works and none of them affects the site:
- Block cookies for openx24.com in your browser settings, or open the site in a private window.
- Use any standard tracker or ad blocker — these stop both tools.
- Turn off ad personalisation in your Meta account settings and your Google account settings, which applies wherever you go, not just here.
- Email hello@openx24.com and we will delete anything we hold about you and exclude you from our advertising audiences. Your rights under section 6 apply here in full.
Separately, when you submit the enquiry form — or complete a purchase — our server tells Meta about it so we can measure which advertising produced genuine enquiries and sales. It sends your email address, and your phone number and name where we have them, hashed (turned into a one-way code Meta can match against its own users but that cannot be turned back into your details). It also sends, not hashed, the IP address and browser user agent (the browser and device description every browser sends) of your own request — for a purchase, the one you made when you opened the payment page, which we keep with the payment for this purpose — because Meta uses them to match the event. If you arrived from a Facebook or Instagram advert, the link carried a click identifier Meta added to it (“fbclid”); we read it from the page address, not from a cookie, keep it with the payment, and send it too, so the sale can be matched to that advert. And, if you accepted cookies, the Meta Pixel's own browser identifiers. For a purchase it also sends what you bought and the amount. This happens on our server rather than in your browser, so it is not affected by the cookie choice above. If you would rather we did not do this, reply to any email from us or write to hello@openx24.com and we will exclude you.
8. Security
We take reasonable technical and organisational measures to protect the data you share with us. No online service can guarantee absolute security, but payment data is never handled directly by OpenX24 — it goes through Stripe's secure infrastructure.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.
10. Contact
Questions about this policy or your data can be sent to hello@openx24.com.