Skip to content
Xavi Creus

Legal

Privacy policy

What I collect, why, who helps me process it and how you stay in control. Short, because I collect little.

Last updated: 18 September 2026

01

Who is responsible

This site, the coaching sessions and the AI Weekly newsletter are the personal brand of Xavi Creus, operated through Aurum VOS from Barcelona, Spain. The legal name and tax ID of the issuer appear on every invoice.

For anything related to your data, write through the contact form on the home page or to [email protected].

02

What I collect and why

I only collect the data you give me, and only for the purpose you gave it for.

  • Contact form: name, email, company and your message, to answer you. Legal basis: your request.
  • Booking a session: name, email, company, phone (optional), what you want to work on, the time you chose and your timezone, to hold the session, send the calendar invitation and prepare. Legal basis: the contract.
  • AI Weekly: your email and the language you chose, to send you the newsletter, and the state of your subscription. Legal basis: the contract.
  • Payments: Stripe collects your card, billing address and tax ID. I receive the result of the payment and the invoice data, never your card number. Legal basis: the contract and tax law.
03

Who processes it for me

I work with a small number of providers that process data on my behalf under data processing agreements. Some are based in the United States and rely on the EU-US Data Privacy Framework or on standard contractual clauses.

Anthropic models help research and draft the newsletter from public news sources. No subscriber or customer data is sent to them, so Anthropic is not a processor of your data.

  • Stripe: payments, invoices, tax calculation and the customer portal.
  • SendGrid (Twilio): delivery of confirmation emails, calendar invitations and the newsletter.
  • DigitalOcean: hosting of this site, the API and the database, in the European Union.
  • FormSubmit: relay of the contact form to my mailbox.
04

How long I keep it

As long as it is needed for the purpose, and then only what the law requires.

  • Contact messages: up to 2 years after the last exchange.
  • Bookings and invoices: 6 years, as Spanish commercial and tax law requires.
  • Newsletter: while you are subscribed. After you unsubscribe I keep only the minimum needed to respect your choice and the invoices already issued.
05

Cookies and tracking

This site does not use analytics, advertising or tracking cookies. Your booking selection is kept in your browser session storage so a refresh does not lose it, and it disappears when you close the tab.

When the payment form opens, Stripe sets the cookies it needs to process the payment and prevent fraud.

06

Your rights

You can ask to access, correct, delete or export your data, to restrict or object to its processing, and to withdraw any consent, at any time and free of charge. Write to [email protected] and I will answer within a month.

If you think I handled your data wrongly, you can complain to the Spanish Data Protection Agency (AEPD) at aepd.es, or to the authority of your country.