Privacy Policy

XPAND (“we”, “us”) provides web development, digital marketing, AI automation, and booking-system services. This policy explains what information we collect through xpand.management, why we collect it, and the choices you have. Questions any time: agent@xpand.management.

We only collect information you choose to give us:

• Project discovery form — your name, company name, business email, phone or WhatsApp number, an optional website URL, the services you’re interested in, your industry, descriptions of your business, project, and goals, optional meeting preferences (date, time, platform), and any files you choose to attach (up to five, 10 MB each).
• Technical data — when you submit a form we record your IP address and browser identifier. We use these only to rate-limit submissions and prevent abuse of our forms.

We don’t run advertising or analytics trackers on this site, and browsing it requires no account and no cookies. The only cookie we set is an essential authentication cookie inside our own staff-only admin area.

• To respond to your inquiry and prepare a proposal for your project.
• To schedule and hold the call you request.
• To deliver and support the services you engage us for.
• To protect our forms and infrastructure from abuse.

We never sell your personal information, and we don’t share it with third parties for their own marketing.

Form submissions and attachments are stored in our database and private file storage hosted by Supabase on AWS infrastructure in the European Union (Ireland). The website itself is hosted on Vercel, and email notifications about new inquiries are delivered through Resend. These providers process data only on our behalf and under their own security and privacy commitments.

We keep inquiry details for as long as we need them to handle your request and, if you become a client, for the duration of our work together plus what normal business record-keeping requires. If you’d like your information removed sooner, email us and we’ll delete it.

You can ask us at any time to show you the personal information we hold about you, correct it, or delete it. Send your request to agent@xpand.management and we’ll respond promptly.

The site is served over HTTPS, form submissions are validated and rate-limited, uploaded files go into a private access-controlled bucket, and access to inquiry data is restricted to XPAND staff behind authentication.

This site is intended for businesses and is not directed at children under 16. We don’t knowingly collect information from children.

If our practices change — for example, if we add analytics or advertising measurement to this site — we’ll update this page and revise the date at the top before the change takes effect.