xplortiv
LegalTermsLicenses

Legal information

Pilot privacy and communication information

This page explains how the standalone landing site handles staged vendor interest before real onboarding begins.

Last updated: 21 May 2026

Privacy and pilot data

The landing site collects staged vendor preflight details only. It does not create real vendor accounts, Supabase Auth users, Stripe onboarding sessions, or business verification records.

What we collect

We ask for contact details, business name, business type, location, website, pilot interest, demo preferences, and communication consent. We avoid collecting unnecessary personal or payment data at this stage.

How data is handled

The browser sends requests only to same-origin Next.js routes. The server stores staged data in a private staging schema and sends confirmation or opt-out emails through Resend.

Communications and opt out

Preflight and notification requests require email confirmation. Visitors can request an opt-out code from the landing page, then verify that code to disable preflight, demo, and notification communication.

Security model

The client bundle does not include Supabase keys, database URLs, database schema information, service-role secrets, or Resend secrets. State-changing routes use CSRF checks and SameSite cookies.