Privacy notice
How HuntX handles information when you use the website and process interview.
Download and save this document ↓Team Challenge
Team Challenge answers are linked to the relevant BLUEPRINT through an invitation code. The ordering company receives aggregate results only, without names or individual answers. HuntX administrators can view individual Challenge entries. Participants may use an alias.
Controller and contact
Venator Holding B.V., trading as HuntX, is responsible for the processing described here. Send correspondence and privacy requests to Venator Holding B.V., attention HuntX Privacy, Zuid-Hollandlaan 7, 2596 AL The Hague, Netherlands.
HuntX Level Up
When you start the challenge, HuntX stores your first name or nickname, self-assessment, answers, progress, sector, selected AI uses, result and timestamps. Completed games also record elapsed time, including pauses. This helps HuntX understand AI use and opportunities. Only designated administrators can view game records. You may use a nickname; no account or email is required. Reloading or starting a new game does not delete the central record. Game data is not sent to an AI service. For questions or deletion requests, include the name used and the date you played.
Agent Build & Buy intake
For a request to configure an existing or custom agent, we store business and contact information, selected disciplines, mission, process, intended access and limits, commercial preferences, progress and any explanations. Your browser retains your answers and a personal access token until you clear it; ‘Save & continue’ and ‘Save and finish later’ also save the draft centrally. Your private link lets you resume your own file on another device. Anyone holding that link can access it, so share it only with authorised people. Designated administrators can change the stage from intake through delivery, record draft versions and approvals, and manually link a challenge session. Part 1 is used to prepare a draft proposal. Only after approval by a HuntX administrator are the proposal and terms sent to your provided email address through our mail service. We record the approved version and sending status. Part 2 becomes available after your order approval is recorded, reusing part 1 details for each agent. This intake is not automatically sent to an AI service, and submitting it does not place an order. You may upload up to six small reference files; receipt does not mean they have been reviewed or processed. Do not upload unnecessary sensitive case files, passwords or access keys. Individual employee challenge answers remain visible only to designated administrators. Unsubmitted drafts are removed at the first processing after 90 days without changes. Submitted enquiries without an active build project are removed at the first processing after 12 months without changes; an actual contract can trigger separate accounting and retention obligations. The WhatsApp button opens a prefilled share message with the intake link and, after submission, a reference number; your detailed answers are not included.
XenA session and personal contact
We use the necessary huntx_xena cookie for security and continuity: a random key lasting up to 24 hours, HttpOnly, SameSite=Lax and Secure on the public website. You can chat without giving your name or email address and without an email code. The server limits use by session and hashed IP identifiers, with cost caps. Each session allows up to 60 replies, with a daily limit per network. For personal contact, we separately ask for your name, company and email address. On the basis of our legitimate interest in service delivery and abuse prevention, protected conversation history is retained for seven days and cost records without message content for 90 days. Previously collected chat profile details are deleted after at most 30 days during the next processing; previously verified email identifiers may also be used for abuse prevention during that period. Contact profiles are not sent to the AI provider. You can object at info@huntx.nl.
XenA questions and review queue
From 5 to 12 October 2026, we temporarily record all XenA questions and answers, language, page, broad device category, response time and errors for quality review. Only designated HuntX administrators can view these conversations. Each message expires after seven days and is deleted during the next processing operation; new full recording stops automatically after 12 October. Conversations are not automatically added to the knowledge base. XenA uses approved HuntX information. Until the AI connection is activated, it provides existing knowledge answers. When generative conversation is activated, your question and up to 12 previous messages (12,000 characters in total) are sent to the OpenAI API to compose an answer; the request uses store:false. This does not promise any particular retention period across the provider’s systems. Do not share confidential or sensitive data. Unknown, ambiguous, partially answered, disputed and referred questions may be stored with the answer, language, page and up to 12 previous messages for review. These records are removed on the first processing after 90 days. A visitor question does not automatically become general knowledge; an administrator first approves additions. Do not share sensitive data. For personal contact, you submit business contact details separately. Handoff stores the context and subsequent messages as a support conversation. An available team member can take over in admin; XenA then stops replying. Submitting contact details creates a ticket; once email is connected, an alert with the context is sent to the configured HuntX support address. Support conversations are deleted on the first processing after 90 days without activity. The browser session keeps an access token under huntx:support for up to two hours to resume your own support conversation.
The online interview
You provide company name, role, sector, team size, processes, systems and optional context. These details may identify a person, such as a sole trader. For paid orders, answers and progress are stored centrally once the save confirmation appears. Resume works in the same browser while the order cookie is present. Preview examples are not stored as a paid customer intake. When AI analysis is enabled, the required answers are sent to the AI service. Completed reports are linked to your order and can be downloaded again. Order records are separate from interview answers and are stored centrally. Do not enter employee names, health information, passwords or other sensitive information.
Purposes and legal bases
We use your input for the ordered analysis, payment processing and necessary order administration. Personal data necessary for a contract with you or your requested pre-contractual steps is processed under GDPR Article 6(1)(b). For organisational contact persons and necessary security, we rely on legitimate interests in handling business enquiries and operating a secure website, balanced against your privacy. Legally required administration relies on a legal obligation. Any separate consent purpose will be explained in advance and consent can be withdrawn.
Hosting and technical data
OpenAI Sites hosts this website using Cloudflare infrastructure. Providers may process IP address, time, browser and requested page for delivery and security. The current HuntX app has no advertising pixels. Level Up game registration is described above. HuntX has not set a retention period for platform logs and cannot manage those logs in this version. Specific provider settings and any transfers outside the EEA must be established before customer storage is added.
AI and external processing
The paid AI analysis is not yet available. External AI processing will only be enabled after data flows, processor terms, retention and any non-EEA transfers have been established and explained here. This route makes no solely automated decisions with legal or similarly significant effects on you. You choose whether to pursue a proposal.
Retention and sharing
When checkout is available, we record company and contact name, business email, billing address, Chamber of Commerce number, package, amounts, accepted terms with version and timestamp, order reference and payment status. Mollie processes payments and receives the amount, package description and order reference; HuntX receives no bank passwords or full card details. Basic financial administration is generally retained for seven years. Failed and incomplete orders are periodically reviewed and deleted when no longer needed for handling, security or legal requirements. Answers, process descriptions and reports are stored with the paid order for resuming and delivery. Retention and deletion procedures will be established before paid service opens. The prepared email adapter uses Resend and will only be enabled after verification of the sender, supplier arrangements and data processing; business email and confirmation or report content are then shared. We do not sell personal data. Client information is not automatically added to the knowledge base or reused for identifiable case studies without a separate agreement.
Your rights
You may request access, correction, erasure or restriction and, where applicable, object or request portability. Consent can be withdrawn without affecting prior lawful processing. Write to the above address. We normally respond within one month and explain any lawful extension. We may request proportionate information to verify identity. You may complain to the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.
Choices and updates
Core business context is needed to prepare a relevant proposal; optional fields can be left blank. Accepting terms is not consent to marketing, tracking or knowledge-base reuse. This notice is updated before new processing starts. The version date is shown above.Business contact details and sole trader details may also be personal data. A business purchase does not disapply the GDPR.
Contact requests and usage measurement
Personal contact records your name, company, email, subject, message and time to answer your enquiry. This is not a marketing subscription. We rely on contract necessity for your own contract and legitimate interests in business correspondence for company representatives. The website counts page views without tracking cookies or unique visitor identification. Level Up results and XenA improvements support service delivery and our legitimate interest in quality improvement; you may object. These purposes do not authorise identifiable publication or indiscriminate AI training. Retention periods for contact requests and Level Up and provider terms for the hosting already in use still need to be specified; full compliance cannot yet be confirmed.
Invoicing and bookkeeping
For invoices we process legal company name, legal form, billing address, contact details, registration number, order details, amounts, VAT, payment date and invoice number. Phone is optional and is not printed on the invoice. Customers receive invoices digitally. A separate copy goes to Venator’s designated bookkeeping administration at venator@boekhouding.nl for financial administration and statutory retention. Resend handles delivery once the email service is activated. Invoices, credit notes and supporting records are kept digitally for at least the applicable seven-year tax retention period. Reports and conversations are not included in the bookkeeping copy. Access is restricted to authorised staff and service providers.