Privacy Policy
This policy explains what information XunL (xunl.net, referred to below as “we”) collects, how we use it, and how we protect it when you use our website, free tools and company account services. For authorization methods and technical details, see Data Security and Authorization.
1. Information we collect
- Account information: Your company name, official company website domain, email address and phone number, plus the email addresses and roles of colleagues you invite.
- Data you choose to connect: Website URLs; WordPress application passwords, business email passwords or authorization codes, Feishu / DingTalk application secrets and group bot URLs you choose to provide; and the content of inquiry emails received after you enable the inquiry feature.
- Usage and security records: Login records, audit logs (who added, changed or deleted what, and when), and the results of monitoring and task runs.
- Inputs to free tools: Tools marked “Local processing” calculate in your browser without uploading inputs; tools that require online queries or AI analysis send the content you enter only when you click submit.
- Payment information: Stripe processes payments. We receive only the payment result, amount and order number; we cannot see or store card numbers.
- Browsing analytics: Public pages use Google Analytics for visit statistics; free tool pages display Google AdSense ads, and Google may use cookies according to its policies.
2. How we use this information
- To provide the features you enable, including website monitoring and diagnosis, competitor updates, inquiry filtering and assignment, notifications, and bulk SEO and WordPress operations.
- For login verification, account security, audit logs and troubleshooting.
- To activate plans and record payments and credits.
- To respond to your inquiries and, with your consent, send service-related notifications.
We do not sell your data or use your inquiries, customer information or website credentials to provide services to other customers.
3. Service providers that process information
- Google Gemini: Identifies and analyzes content you submit when AI inquiries are enabled or you use AI tools. Contact details such as phone numbers and addresses in signature blocks are removed before inquiry bodies are sent.
- Google Analytics、Google AdSense: Website visit statistics and advertising on free tool pages.
- Stripe: Online payments.
- Google sign-in: Confirms your email identity only when you choose “Continue with Google”; it does not read Gmail messages.
- Feishu / DingTalk: Sends messages to the groups or people you specify, only after you connect the service.
4. Storage and protection
Website, email and application passwords and secrets are stored using AES-256-GCM encryption, with the decryption key kept separately from the database; the console displays only masked values. Email inboxes are opened in read-only mode, and only new messages received after connection are processed. Data is isolated by company, and colleagues have access according to their roles and user groups.
5. Retention and deletion
- Inquiry data is retained until you delete it by default. In the console, go to “Inquiries → Filtering and Assignment → Data Retention and Deletion” to configure automatic deletion (30 days to 3 years, measured from the receipt date). You can set a separate, shorter retention period for filtered spam and promotional emails.
- You can permanently delete an individual inquiry or delete inquiries in bulk by date at any time. Deletion also removes processing records, automatic acknowledgments and nurture email records, and cannot be undone. The nurture email unsubscribe list is retained to avoid contacting people who have already unsubscribed again.
- When you delete a website, email account or application in the console, its encrypted credentials are deleted as well.
- After a trial ends or a plan expires, your account returns to the free plan. Configuration and data are retained so you can resume use at any time.
- To delete an entire company account and other data, contact us. We will process the request after verifying your identity.
6. Your rights
You may view and correct your account information at any time, revoke the authorization you provided (WordPress application passwords, email authorization codes and group bots), request an export or deletion of your data, or withdraw consent to service notifications.
7. Policy updates
When this policy changes, we will update the date on this page. Important changes affecting your rights will be communicated in the console or by email.
8. Contact us
For questions about privacy or data security, contact us using the phone number, WeChat ID or email address at the bottom of this page.