Privacy policy

XORH VENTURES FZE LLC, operating the XorhFlow brand, is responsible for the information described here. We are licensed by Ajman Nuventures Centre Free Zone under licence and registration number 262515837888.

Registered address: CWS-2V-226306, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates. Privacy contact: mark@xorhflow.com.

This policy covers our website and operations. Client-system information we process on a client’s behalf is governed by their instructions and an applicable data-processing agreement.

• Intake: name, work email, company, website, firm type, deal-size and revenue ranges, service needs, timeline and optional notes.
• Accounts: email, display name, account identifiers, access roles and credentials handled by our authentication service.
• Engagements: correspondence, proposals, contracts, invoices, amounts, currencies, project status and administrative records.
• Acceptance: the name entered, consent confirmation, acceptance time and associated document.
• Booking: information you provide to Cal.com after following its external link.

Do not submit passport details, payment-card data, sensitive client records or unnecessary sensitive information through intake. Online payment collection is not currently connected.

We use information to respond to enquiries, assess fit, arrange eligible calls, manage accounts, deliver work, issue and track documents, send operational emails, keep records and protect services.

Where a legal basis is required, we rely as appropriate on pre-contract steps you request, contract performance, legal obligations or legitimate interests such as responding to enquiries and securing services. Where consent is needed for another purpose, we request it separately. Intake is not blanket consent to unrelated marketing.

Selected deal-size, revenue, needs and timeline answers are scored on our server to assess service fit and decide whether a booking link is offered. We also maintain internal lead status and notes. A score does not itself create an engagement.

Contact us if information is inaccurate or you would like a person to review your enquiry.

• Lovable Cloud provides hosting, database and authentication, processing enquiry, account and document records needed to operate the site.
• Our managed email service processes recipient addresses, message content and operational delivery records for account and project notifications.
• Neo Mail handles correspondence through our business mailbox.
• Cal.com receives information you provide when booking on its external site; its own privacy policy applies.
• Google Fonts receives ordinary connection details, including IP address and browser request information, when fonts load from Google’s servers.
• Authorised staff and professional advisers may receive information needed for delivery, accounting, legal requirements or disputes.

Information may be disclosed as legally required or to protect rights and investigate misuse. We do not sell personal information.

Lovable provides analytics on our published site. It uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors.

It records pages visited, where visitors came from, country, browser, operating system, device type, time on the site, page-load speed, errors and clicks on buttons and links. Clicks are identified by location on the page. Detailed data is kept for 90 days and daily summaries for one year.

No consent banner is currently connected to analytics on this site. Clicks and the other information listed here are recorded for every visitor. Page visits, time on page, page speed and errors are recorded without cookies and without identifying anyone.

Lovable collects this data for us. Lovable’s privacy policy explains how it handles it.

Analytics does not use browser storage, but authentication does: signing in stores session information in local storage to maintain account access. Signing out clears the active session.

We use country-level hosting information to suggest a language and currency, without storing your IP address for that purpose. Your manual language and currency choices are saved in local browser storage so they remain selected.

Valid, unguessable document links can allow access to sent documents without signing in. Treat them as confidential and share only with intended recipients. They do not expose the underlying lead record.

External services may use their own cookies or storage after you leave this site.

Enquiry, account and engagement records are retained as reasonably necessary for their purposes, including delivery, required accounting and contractual records, legal obligations and disputes. We do not currently publish fixed retention periods for every record type. Contact us to ask about your records or request deletion.

Authentication, restricted administrative access and protected document links help reduce unauthorised access. No online service guarantees absolute security. Keep credentials and access links confidential and report suspected misuse.

We are based in the UAE. Hosting, authentication, email, booking and font providers may process information in other countries. Applicable data-protection requirements, provider safeguards and contractual protections should be considered for transfers. Contact us for processing-location and safeguard details for your engagement.

Depending on applicable law, you may have rights to access, correct or delete information, restrict or object to processing, receive portable information or withdraw consent where processing relies on it. Exceptions may apply, including required recordkeeping.

Email mark@xorhflow.com with a request. We may need proportionate identity verification and will respond within applicable legal time limits. You may complain to a relevant data-protection authority where that right applies.

This site is intended for business representatives, not children. Contact us if a child has provided information so we can review and address it.

We may update this policy as practices change. The date above identifies the latest revision.