privacy policy

XYZ.vision is operated by Alessio Cappuccio, VAT IT14803300962, Italy. This policy covers xyz.vision, myshop.xyz.vision and myblog.xyz.vision. Data controller: Alessio Cappuccio, contact info@xyz.vision.

It depends on what you do:

• You book a call: name, email and the optional note go directly to Cal.com (our scheduling provider), which generates the Google Meet link and sends the confirmations. They never pass through our servers.
• You order a product on the shop: email, the form answers (texts, colours, brief), the files you upload (logo, 3D model), the amount and the order status. Payment happens on Stripe: card details are seen by Stripe only; we receive email, amount and outcome.
• You write to the chatbot: messages are processed by a language model on our server and are not stored.
• You use the SEO scanner: the address you enter is fetched and analysed on the spot; the result is not stored.
• You browse: Vercel, which hosts the sites, may keep technical logs (IP, browser, time). We use Vercel Analytics, which is cookie-free and counts visits in aggregate.

Orders are used to produce and deliver what you bought: inputs and files are processed on our infrastructure (a server run by XYZ.vision), the deliverable reaches you by email via Resend, and we get an internal notification of the order (product, amount, email). We do not use your data for marketing, do not sell it and do not pass it to anyone beyond the providers listed below.

Shop orders and files live on Cloudflare (D1 database and R2 storage). Uploaded files and working files are deleted 90 days after delivery. Order data (email, product, amount, date) is kept for tax and accounting obligations (10 years). Call bookings live in Alessio Cappuccio's Cal.com account and Google Calendar.

To make everything work we use: Vercel (hosting and cookie-free analytics), Stripe (payments), Cloudflare (shop database and files), Resend (delivery emails), Cal.com and Google Meet (calls), Telegram (internal order notification). Each processes data under its own policy and, where needed, with the GDPR safeguards for transfers outside the EU.

At any time you can ask us for:

• access to the data we hold about you
• correction of inaccurate data
• deletion (except what we must keep by law)
• a copy of your data in a portable format
• and you can lodge a complaint with the Italian data protection authority (garanteprivacy.it).

For any privacy request: info@xyz.vision. We answer within 30 days.