What data Xakrom keeps and who can see it

Xakrom is a practice space. To make it work, we keep the minimum necessary, and we want you to know exactly what that is, who can see it and how long it is kept.

What we keep

Your account: your email and, if you provide them, your name and your profile photo. You upload the photo, only you see it, and you can remove it whenever you like from My account, where you also change your name, your email and your password. No ID numbers, no phone. Passwords are handled by our identity provider; Xakrom never stores them. When you create your account, sign in with your email or ask for a link to change your password, Cloudflare Turnstile checks that a person is doing it and not an automated program, using your IP address and technical data from your browser; we do not keep it and it sets no Xakrom cookies.
Your tests: your Xakrom profile (result and answers) and any colleague profiles you create. A colleague profile is stored only under the anonymous reference you write, never with data that could identify that person, and is deleted after 6 months.
Your practice sessions: the conversation transcript and your SCORE result. Transcripts and narrative reports are kept for 12 months; after that they are deleted and only your scores remain, as your progression history.
Your cases and your development: what you write about real situations at work to turn them into practice, and your development cycles. They are private spaces: only you can see them, and you can delete them from the app whenever you like.
Your minutes: how long each conversation lasts and what it uses from your plan, to keep track of your balance. Never the content.
If you buy a plan or minutes: payment is handled by Stripe. Your billing details and your card are collected and stored by Stripe; Xakrom never sees your card number and only keeps the reference to your Stripe account and the status of your payments.
If you agreed to take part in the research: your answers and the data you chose to share, pseudonymised (separated from your name and email), for a maximum of 5 years.

On this website

The waiting list: your first name, your surname, your email and, if you want to tell us, the conversation you would like to practise, together with the date and time you gave your consent. We only use it to let you know when places open, and we keep it until then and for no more than one year from the day you joined.
The contact form for organisations: your first name, your surname, your work email, your organisation, the size of your team and whatever you tell us. We only use it to reply to you, and we keep it for no more than one year from your last message.
Form emails: when you sign up we send you a confirmation email, and we receive a notice with what you wrote. Both are sent from our own server.
Measuring visits: Google Analytics counts the pages viewed and where visits come from, using an identifier for your browser. It only runs if you accept it in the cookie notice.
Delivering and securing the website: Cloudflare receives your IP address to serve the website and protect it from attacks, and our server logs attempts to log in to the site's administration.
The anti-bot check on the forms: when you send the waiting list or the contact form for organisations, Cloudflare Turnstile checks that a person is sending it and not an automated program, using your IP address and technical data from your browser. It only loads on the form pages and sets no cookies for this website.
Your preferences: the language you choose is stored in a cookie, and the text size and high contrast from the accessibility button are stored only in your browser: they never reach us. Your choice in the cookie notice is also stored only in your browser, for one year.

Cookies on this website

wp-wpml_current_language: remembers your language. It is needed for the website to work and does not ask for permission.
_ga and _ga_ followed by a code: these belong to Google Analytics, are only set if you accept them and last for up to one year. You can change your choice at any time from the Cookies link at the foot of every page.

Who can see it

You. Your profile, sessions, cases and results are yours.
Your organisation, aggregates only. If you use Xakrom through your employer, your organisation receives only group-level aggregate data. It never sees your individual profile, your answers, your transcripts, your cases or your exercises, and it does not know whether you take part in the research.
The Training Games team, only as strictly needed to operate and improve the platform. To manage plans and minutes, the administrator sees your email, your plan and how much you have talked; never the content of your sessions, your cases or your development, nor your photo.

Who is responsible for your data

Training Games, S.L. (tax ID B61429353), with its registered office at Parque Empresarial La Finca, Paseo del Club Deportivo 1, building 4, first floor, 28223 Pozuelo de Alarcón (Madrid, Spain), entered in the Madrid Commercial Register, volume 25124, folio 157, section 2, sheet 452488, is the controller of the data on this website and of the data of anyone who uses Xakrom on their own account. If you use Xakrom through your employer, your employer is the controller of your data on the platform, and Training Games processes it on its behalf.

Who we work with

The platform relies on technical providers processing data on our behalf: the voice conversation is processed by ElevenLabs during the session (Xakrom does not store the audio); artificial intelligence models from Google and OpenAI voice the characters and the coach, models from Anthropic score your sessions and prepare your cases, and we do not use your content to train models; authentication and, if you upload a profile photo, its storage are handled by Supabase (Frankfurt, European Union); hosting and database run on Hostinger (France, European Union); Cloudflare protects access to the website and the app; the app's email is sent by Resend, and this website's form emails by our own server at Hostinger; Google Analytics measures visits to this website; and payments are handled by Stripe. Stripe also processes part of the payment data on its own account (fraud prevention and its legal obligations), under its own privacy policy. Cloudflare also uses the data from the anti-bot check, on this website's forms and when you access the app, to improve its bot detection, under its own privacy policy. Cloudflare, on this website and in the app, and Google, on this website, may process data outside the European Union, with the safeguards required by the General Data Protection Regulation.

You will always know you are talking to an AI

Xakrom characters are artificial intelligence agents and never present themselves as real people.

Your rights

You can request access, correction or deletion of your data by writing to [email protected], and you can leave the waiting list whenever you like. If you use Xakrom through your employer, you can also exercise them through your organisation. You change your name, your photo, your email and your password yourself from My account, and your billing details in the payment portal, from My account. Deletion is real: your data is removed from all our systems, except invoices, which the law requires us to keep. If you feel we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Last updated: October 2026