Privacy Policy

This Privacy Policy explains how Xblu (“Xblu,” “we,” “us”) collects, uses and protects information when you visit xblu.com, contact us, chat with our AI Assistant, or use software we provide, including EASEO, the Xblu AI Assistant and Carma CRM.

1. Who we are

Xblu is a digital marketing and web development agency located at 1307 S. Wabash Avenue, Chicago, Illinois 60605. You can reach us at inquiries@xblu.com or 312-206-5875.

2. Information we collect

Information you give us

• Contact and quote forms: your name, email, phone, company, website, the services you’re interested in, budget and timeline ranges, and your message.
• AI Assistant chats: the messages you type, and any contact details you choose to share so our team can follow up.
• Client work: information you provide while we work together, such as account access, content and business details.

Information collected automatically

• Usage and device data: pages viewed, links clicked, referring pages, browser and device type, and approximate location derived from your IP address.
• Cookies and similar technologies: see Cookies, analytics and advertising.
• Security data: to prevent spam and abuse, our systems may temporarily process IP addresses (for example, to rate-limit requests). Our AI Assistant stores a one-way hashed visitor identifier for usage statistics rather than your raw IP address.

3. How we use information

• To respond to your inquiries, provide quotes and deliver our services.
• To operate, secure and improve our website, AI Assistant and software.
• To understand how our website is used and measure the performance of our marketing.
• To send you information you ask for. We don’t add you to a mailing list without your permission.
• To comply with legal obligations and protect our rights.

We do not sell your personal information.

4. Our AI Assistant

Our website AI Assistant is powered by OpenAI. When you chat with it, the text of your messages (and recent messages in the same conversation) is sent to OpenAI to generate a reply. Please don’t share sensitive information such as passwords, payment details or health information in the chat.

• Under OpenAI’s API data policies, information sent through the API is not used to train OpenAI’s models by default.
• If you share your contact details so we can follow up, they may be saved as a lead in our own WordPress database (our Carma CRM) and emailed to our team.
• AI replies can be inaccurate. They’re for general information and aren’t a quote, contract or professional advice.

5. EASEO and Google user data

EASEO is a WordPress plugin developed by Xblu that audits websites for search engine optimization. Website administrators can optionally connect EASEO to Google Search Console. This section explains how EASEO handles data received from Google.

What EASEO accesses

When an administrator connects Google Search Console, EASEO requests read-only access (the webmasters.readonly scope) to Search Console data for the website property the administrator selects. This includes search performance data such as clicks, impressions, click-through rate, average position, page URLs and search queries, and the list of Search Console properties the account can access. EASEO cannot make changes to your Search Console account.

How EASEO uses it

• Only to show search performance reports and SEO recommendations inside that website’s WordPress dashboard, to the site’s administrators.
• If an administrator uses EASEO’s optional AI features, relevant summarized search data (for example, a page’s top queries and click-through rate) may be sent to OpenAI solely to generate the suggestions the administrator requested.

How EASEO stores and protects it

• Search Console data is stored in the WordPress database of the website where EASEO is installed. It is not sent to Xblu’s own servers unless Xblu hosts that website for you.
• Google access tokens are encrypted at rest, and all requests to Google use secure, encrypted connections.

What EASEO does not do

• It does not sell Google user data or use it for advertising.
• It does not use Google user data to train AI or machine-learning models.
• It does not transfer Google user data to others except as needed to provide the features described above, to comply with law, or with your consent.
• People do not read your Google user data unless you ask us to (for example, for support), it is needed for security or legal reasons, or the data has been aggregated and anonymized.

Disconnecting and deleting

An administrator can click Disconnect in EASEO’s settings at any time. This revokes EASEO’s access with Google and deletes the stored Search Console data from the site. You can also remove access from your Google Account at myaccount.google.com/permissions.

6. Cookies, analytics and advertising

We and our partners use cookies, pixels and similar technologies to keep the website working, understand how it’s used, measure marketing and show relevant ads. These may include:

• Analytics tools such as Google Analytics, to understand site traffic and usage.
• Advertising tools such as Google Ads and the Meta (Facebook) Pixel, to measure campaigns and show ads to people who have visited our site.
• Security tools such as Google reCAPTCHA, to protect our forms from spam. reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.
• Embedded content such as Vimeo videos and Google Maps, which may set their own cookies when you interact with them.
• Functional storage in your browser, for example to remember your preferences.

You can block or delete cookies in your browser settings, opt out of Google Analytics with the Google Analytics opt-out add-on, adjust Google ad personalization at adssettings.google.com, and manage Meta ad preferences in your Facebook or Instagram settings.

7. How we share information

We share information only as needed to run our business and provide our services, including with:

• Service providers who help us operate, such as hosting and content delivery, email delivery, form processing, analytics and advertising platforms, and AI providers like OpenAI.
• Professional advisors, such as lawyers and accountants, where necessary.
• Authorities, if required by law or to protect rights, property or safety.
• A successor business, if Xblu is involved in a merger, acquisition or sale of assets.

8. How long we keep information

We keep information only as long as needed for the purposes described here: for example, inquiry and lead records for as long as needed to respond and maintain our business records, and security logs for a limited time. When it’s no longer needed, we delete or anonymize it.

9. How we protect information

We use reasonable safeguards, including encrypted connections (HTTPS), access controls, encryption of sensitive credentials, security monitoring and regular backups. No method of transmission or storage is completely secure, but we work hard to protect your information.

10. Your choices and rights

Depending on where you live, you may have the right to access, correct or delete personal information we hold about you, or to object to certain uses. To make a request, email inquiries@xblu.com. We’ll verify your request and respond within the time required by applicable law. We won’t discriminate against you for exercising your rights.

11. Children

Our website and services are intended for businesses and adults. We don’t knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we’ll delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we’ll change the “Last updated” date at the top of this page. Significant changes will be highlighted on this page.

13. Contact us

Xblu
1307 S. Wabash Avenue, Chicago, Illinois 60605
inquiries@xblu.com · 312-206-5875