Privacy Policy
Last updated: February 2026
Prompt Engineering, Inc ("we," "us," or "XTAL Search") operates the website at xtalsearch.com and the XTAL Search platform. This policy explains what information we collect, how we use it, and your choices regarding that information. Sections 1–5 below cover the marketing website. Section 6 covers data flowing through the XTAL Search platform; binding contractual terms for the platform are in our Product Terms.
Information We Collect
Information You Provide
- Demo request form: name, work email address, company name, and an optional description of your current search challenges.
- Newsletter subscribe: email address only.
Information Collected Automatically
- Google Analytics (GA4): We use Google Analytics to collect anonymized usage data including pages visited, time on site, referral source, and general geographic region. Google Analytics uses cookies to distinguish unique users.
- Vercel Analytics: We use Vercel Analytics to collect web performance metrics (page load times, web vitals). This data is aggregated and does not identify individual users.
- UTM parameters and referrer: When you submit a demo request, we record the page you were on, your referring URL, and any UTM campaign parameters from the URL. This helps us understand how visitors find our site.
How We Use Your Information
- To respond to demo requests and schedule product demonstrations.
- To send newsletter updates if you subscribe (you can unsubscribe at any time).
- To understand how visitors use our site and improve the experience.
- To measure the effectiveness of our marketing efforts.
Where Your Data Is Stored
- Google Sheets: Demo request submissions are stored in a private Google Sheets document via a secure webhook.
- Mailchimp: Email addresses from both demo requests and newsletter signups are synced to our Mailchimp audience for email communications. Mailchimp's privacy practices are described at intuit.com/privacy/statement.
- Google Analytics: Analytics data is processed by Google. See Google's Privacy Policy.
Data Sharing
We do not sell your personal information. We share data only with the service providers listed above (Google, Mailchimp, Vercel) as necessary to operate this website and communicate with you.
Your Choices
- Unsubscribe: Every email we send includes an unsubscribe link.
- Analytics opt-out: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
- Data deletion: To request deletion of your personal data, contact us at the email below.
Information Collected Through the XTAL Search Platform
When a merchant deploys the XTAL Search platform on its digital property, four classes of data flow through our systems. These are defined and contractually governed in our Product Terms; the descriptions below are summary only.
- Merchant Data: the merchant's product catalog, brand configuration, and account information. Owned by the merchant.
- Shopper Data: end-shopper search queries, clicks, add-to-cart and conversion events, and pseudonymous session identifiers. Owned by the merchant. We do not store shopper email addresses except for transient click-to-order matching where the merchant has connected an email service provider such as Klaviyo.
- Service Data: operational telemetry of XTAL's own systems (latency, error rates, billing events). Owned by XTAL.
- Aggregated Data: data derived from the above and de-identified and aggregated such that it cannot reasonably identify any merchant or end-shopper. Owned by XTAL.
LLM subprocessors. Search requests are processed in part by third-party large language model providers, including OpenAI (query enhancement, intent classification, aspects), Anthropic (explanations and reasoning), and Groq (fast aspects and reasoning). Each is accessed under terms that prohibit training on submitted content. Prompts and contexts sent to these providers necessarily include the shopper's search query and relevant product context.
Cross-tenant boundary. Raw Merchant Data and raw Shopper Data attributable to a single merchant are never shared with or used to directly serve any other merchant. XTAL may use Aggregated Data to improve the platform, including tuning generic pipeline prompts and training XTAL's own machine learning models. See the Product Terms for the full cross-tenant prohibition, re-combination clause, retention windows, and the complete subprocessor commitment.
Contact
If you have questions about this privacy policy or your data, contact us at privacy@xtalsearch.com.