Privacy Policy

Last updated: [DATE]

1. Who We Are

Exendia ("Exendia", "we", "us", "our") is based in Sweden. This Privacy Policy explains how we collect, use, and protect information when you visit exendia.com or shop.exendia.com, or use our products and services.

2. Information We Collect

  • Contact information you provide via forms, audits, or checkout (name, email, company, website URL).
  • Order and billing information processed through our WooCommerce store, including payment details handled by our payment processor.
  • Usage data such as pages visited, referral source, and device/browser information, collected via analytics tools.
  • Communications you send us via email or contact forms.

3. How We Use Your Information

  • To deliver purchased products and services (e.g. AI Visibility Audits, SEO Infrastructure, Content Intelligence).
  • To process orders and payments through shop.exendia.com.
  • To send transactional emails (order confirmations, account notifications) from [email protected].
  • To respond to inquiries and provide customer support.
  • To improve our website, products, and marketing — with your consent where required.

4. Legal Basis for Processing (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we process your data based on: performance of a contract (order fulfillment), legitimate interest (site security, service improvement), consent (marketing communications), and legal obligation (accounting/tax records).

5. Third-Party Services

We work with the following categories of third-party processors:

  • Payment processing and store infrastructure (WooCommerce / Hostinger)
  • Website hosting and CDN (Cloudflare Pages)
  • Automation and workflow tooling (n8n, self-hosted)
  • Content and data storage (Airtable)
  • AI/LLM providers used for internal automation (OpenRouter and underlying model providers)

Each processor is contractually obligated to protect your data in line with applicable law.

6. Cookies

We use essential cookies required for site functionality (e.g. cart, login sessions) and, where applicable, analytics cookies. You can control cookies through your browser settings.

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this policy, or as required by law (e.g. accounting records under Swedish law).

8. Your Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Object to or restrict certain processing
  • Request data portability
  • Lodge a complaint with your local data protection authority (in Sweden: Integritetsskyddsmyndigheten, IMY)

To exercise any of these rights, contact us at [email protected].

9. Data Security

We use industry-standard technical and organizational measures to protect your data, including encrypted connections (HTTPS) and restricted access to customer data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

11. Contact

Questions about this policy? Email us at [email protected].