Privacy
What this website collects, why, how long it is kept and how to have it deleted. It covers xovris.ai; how the product handles your data is on the trust centre.
Who is responsible
Xovris is the controller of the personal data this website collects. Write to [email protected] about anything on this page.
Xovris’s registered company details are added here when Companies House registers the company.
The free checks
When you run a check, your browser asks public DNS – Cloudflare’s and Google’s public resolvers – and the domain’s registry, found through IANA’s directory or rdap.org, about the name you typed. Those requests go straight from your browser without cookies, so those services see your IP address and the name under their own privacy policies. Xovris receives nothing from this half of the check.
From launch, Xovris’s probe also checks the certificate and the page. It receives your IP address and the address you typed. To count your free checks – 3 different websites a day without an account, 10 from one network, at most 10 checks in 10 minutes, and at most 30 different visitors checking one website in 10 minutes – it stores a keyed hash (HMAC-SHA256) of your IP address and of each website you checked, never the readable address, for 25 hours, then deletes it. The result is kept in memory for 60 seconds so the same check is not run twice.
Your browser keeps the last address you checked, on your device only, so the next page can offer it again.
Lawful basis: our legitimate interest in giving you the check you asked for, and in stopping the checker being used to probe other people’s sites.
Early access
When you join early access we store your email address, the website address you gave if any, that you agreed and when. We use them only to send one email, when your account is ready. We also store a salted hash of your IP address – never the address itself – to accept at most 5 sign-ups an hour from one connection.
Lawful basis: your consent, given with the tick box. We keep your entry until your account opens or you ask us to delete it, whichever comes first. Write to [email protected] to withdraw your consent and have it deleted at any time.
Serving the website
Cloudflare serves this website and stores the early-access list for Xovris, as our processor. To deliver each page and protect the site from attacks, Cloudflare processes your IP address and the details of each request as it is served. Xovris adds no analytics, advertising or tracking of its own to this site and keeps no log of your visits.
Lawful basis: our legitimate interest in delivering the site and keeping it secure.
Where your data goes
Cloudflare is a US company with data centres around the world, so your data may be processed outside the UK. Where it is, it is protected by the safeguards in Cloudflare’s data processing terms. Xovris does not sell your data or share it with anyone else.
Your rights
You can ask for a copy of your data, have it corrected or deleted, restrict or object to how it is used, receive it in a portable form and withdraw your consent at any time. Write to [email protected]; we answer within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would like the chance to put it right first. How to complain to the ICO
The product
How the product handles your data – where it is stored, the companies that process it and how long it is kept – is on the trust centre. Read the trust centre
Ask or delete
Every question or request about your data goes to [email protected].