Privacy policy.

This page describes how XContent (Pty) Ltd (trading as XContent RED) processes personal information collected through hax.xcontent.red and the Hax marketing assets.

What we collect

• Information you submit through the demo or contact form (name, work email, company, role, primary domain, message, engagement timing).
• Standard server logs (IP address, user agent, requested path, timestamp) for security and abuse prevention.
• Anonymous usage analytics (Google Analytics 4, Microsoft Clarity) — you can opt out via your browser's Do Not Track signal.
• Anti-spam tokens issued by Cloudflare Turnstile when submitting forms.

Why we collect it

• To respond to your enquiry and schedule a demo.
• To pre-research the domain you supply (passive reconnaissance only) so the demo isn't a cold start.
• To improve the site through aggregate usage metrics.
• To prevent abuse of our forms and infrastructure.

Where we store it

Personal information submitted through forms is delivered via Microsoft Graph to the hax@xcontent.com mailbox in Microsoft 365 (South Africa region) and stored there as standard mail. When the platform onboarding migrates to Dynamics CRM, we will update this policy. We do not sell, rent, or share personal information with third parties.

Your rights (POPIA / GDPR)

You have the right to request access, correction, or deletion of your personal information at any time. To exercise these rights, email privacy@xcontent.com with the subject line "Data subject request". We respond within 30 days.

Contact

XContent (Pty) Ltd
Information Officer
privacy@xcontent.com