Last updated: March 26, 2026
Xpeak ("we", "us", or "our") is a product operated by Ooh Marketing Limited, committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform at xpeak.io and related services.
Ooh Marketing Limited is a private limited company registered in England and Wales under company number 16860604. Our registered office is at Flat 18 Eton House, Anglian Close, Watford, England, WD24 4RF.
We collect the following categories of information:
Account Information: Name, email address, phone number, business name, and business type when you create an account.
Business Data: Business descriptions, services, FAQs, working hours, and other information you provide to train your AI chatbot.
Customer Contact Data: Phone numbers, names, and message histories of your WhatsApp customers, processed on your behalf as a data processor.
Usage Data: How you interact with our platform, features you use, pages you visit, and performance metrics.
Payment Information: Processed securely by Stripe. We do not store card details on our servers.
We use your information to provide and improve our services, including:
We will never sell your personal data or your customers' data to third parties.
We share data only with the following parties and only as necessary to deliver our services:
Meta Platforms (WhatsApp Business API): To send and receive messages on behalf of businesses using our platform. Meta acts as an independent data controller for its own services.
OpenAI: To process AI chatbot responses. We minimise personal data shared and do not send identifying customer information where avoidable.
Stripe: To securely process subscription payments. Stripe is PCI-DSS compliant.
Clerk: For authentication and user account management.
We retain your account data for as long as your account is active. Message data is retained for 12 months unless you request earlier deletion. If you close your account, we will delete your data within 30 days, except where retention is required by law.
Under GDPR and UK data protection law, you have the right to:
To exercise any of these rights, including requesting deletion of your data, email us at privacy@xpeak.io with the subject line "Data Deletion Request". We will respond within 30 days. You may also manage and delete your data directly from your account settings at xpeak.io/settings.
We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, regular security audits, access controls, and secure infrastructure hosted on SOC 2-compliant providers.
We use essential cookies for authentication and session management. We use analytics cookies only with your consent to understand platform usage. You can manage cookie preferences through your browser settings.
Our platform integrates with Meta's WhatsApp Business API. By using Xpeak, you acknowledge that messages sent via WhatsApp are also subject to WhatsApp's Privacy Policy and Meta's Data Policy.
For privacy-related questions or to exercise your data rights, contact our Data Protection Lead at privacy@xpeak.io.
Ooh Marketing Limited
Company No. 16860604
Flat 18 Eton House, Anglian Close, Watford, England, WD24 4RF