What we hold, and how to make us delete it.

What we collect

When you take the Discovery test, the Full Blueprint, the "Why" Test or the "Bet" Test, your answers go to our server, and our server scores them. When you finish, we receive your email address, your answers, the scores they produced, your archetype and anything you typed about your business.

While you take a test, the site also sends a small record each time you answer a question: which question it was, the answer you picked, your browser's language and time zone, and the site that sent you here. Until you finish and give us your email, that record is tied only to a random number that lives in your browser tab. It has no name on it.

If you fill out the intake form or apply for a founding seat, we also receive what you tell us there: your name, your industry and stage, roughly what the business earns if you chose to say, and how you found us. The revenue question has a "prefer not to say" option, and choosing it costs you nothing.

Your test answers also stay in your browser's own storage, under the key xemya.blueprint.v2 (and xemya.test.why or xemya.test.bet for the short tests). That lets you close the tab and pick the test back up. A purchase you make is remembered under xemya.entitlement, so your paid report opens again on this device. Clearing your browser data removes all of these.

When you pay, Stripe takes your payment on its own page. We never see your card number or bank details. We receive your name, your email, what you bought and the amount.

Xemya serves clients in the United States. The service is for adults, and it is not meant for anyone under 18. Your data is stored in the United States.

The five questions about AI

After you submit the Founder Blueprint and before your results appear, we ask five short questions about how you use AI in your business. They cover how far along you are, what you plan to buy, roughly what you spend each month, your biggest obstacle and how you feel about AI overall. Your answers are stored without your name, your email or the exact time. They sit only beside your archetype, your energy domain, your stage and the week you finished. We count them across everyone to publish the Founder AI Index. Any figure we publish covers a group of at least 30 people, and it never names anyone.

Why we keep it

We keep it for four reasons. We use it to deliver your report. We keep it so we can rebuild your report if you come back later and have lost it. We look across everyone's answers to see which questions do useful work and which don't. If you become a client, we use it to design and run your build.

Looking across everyone means counts and patterns, never a single person. We may publish those counts, as in the Founder AI Index. We don't sell or license anyone's individual answers.

How long we keep it

We keep your test answers for two years after the last time you used anything of ours. Then we delete them, unless you have become a client. Client records are kept for as long as the work and our tax and accounting duties require. You can ask us to delete your record sooner at any time, as the section on deleting your data explains.

Where AI is used

Some of our work uses an AI model, run for us by Google through its paid Gemini service. On those paid terms, Google does not use what we send to train its models. We use it in four places. It writes one paragraph of the paid report from your profile and the idea you typed. It drafts the written plan after a strategy session, from the call's transcript if you allowed recording. It sorts the email that reaches us. It checks whether AI search tools mention Xemya. A person at Xemya reads every plan before it reaches you.

How we measure the site

We built our own measurement for this site and don't rely on an advertising network. It records which page was open, which question was on screen, how long it was visible, and whether a test was finished or left. That record is tied to a random number in your browser tab, which disappears when you close the tab. It isn't a cookie, and it doesn't follow you to other sites.

If you finish a test and give us your email, those page records are joined to your submission. That happens only then, and only for you.

We also use Microsoft Clarity, a tool that records how people move around a page, so we can see where the site is confusing. Clarity works under our account and processes data for us. It sets its own analytics cookies, which are not advertising cookies. Before Clarity loads, we mask every part of the test and the intake form where you could type or choose an answer. Clarity can see that the page was open and for how long. It can't see the questions, your answers, your email or anything you typed on this site.

The site's fonts load from Google Fonts. As with any web page, Google receives your browser's address when it sends the fonts.

Who handles your data for us

A few companies run parts of the service for us. Each one handles your data only to do that job. Supabase stores the database. Microsoft Azure runs our server. Microsoft 365 and Bookings carry our email and calendar. Vercel hosts the site. If our server is ever down when you submit a test, Vercel's backup route emails your submission to us so nothing is lost. Stripe takes payments. Google runs the AI model and serves the fonts. Microsoft Clarity records how pages are used.

The research checkbox

Under the consent box there is a second checkbox, which starts unchecked. It asks whether your answers, without your name, can go into research on how founders build. It is optional, and leaving it unchecked changes nothing about your report or the service you get. If you check it, the research set gets your archetype, your answers, how long each question took and, if you answer them, five optional questions about your stage, team size and revenue band. Your name, your email, your business idea and your individual scores never go into it. You can withdraw at any time by replying to any email from us, and we act on it the same day.

What we do not do

• We do not sell your data, rent it, or hand it to a data broker.
• We do not run advertising trackers, and nothing on this site places an advertising cookie.
• We do not share your individual results with anyone, including an employer who paid for a Team Blueprint.
• We do not let anyone train an AI model on your answers.

Team and org engagements

When a company buys a Team Blueprint or an Org Design Session, the company sees the team as a group. It sees how the group is spread out, where roles and strengths pull against each other, and what to change. Each person gets their own full result, and nobody else sees it. A manager never receives one person's result, and we turn down any request for one. We run a Team Blueprint only for four or more people, so the group picture can't point to one person.

This is a tool for developing people and designing roles. It can't support screening candidates or justifying a firing, and we say so in writing before any team engagement starts.

Deleting your data

Email us and ask. We delete your record from our database and our mail, ask the companies above to do the same where they hold a copy, and confirm it to you. Stripe keeps payment records for as long as the law requires. To remove the copy in your own browser, clear this site's data in your browser settings.

What the Founder Blueprint is

It is an original instrument. The items were written for Xemya and measure constructs drawn from open personality science: aspect-level Big Five traits, motivational drives, and character strengths. It exists to design a business around a specific person.

It is not a validated psychometric, a clinical instrument, or a hiring screen. It has not been normed against a reference population, so it reports where your own signals sit relative to each other rather than where you sit relative to other founders. Any product that tells you that you are in the top ten percent of anything, without published norms behind it, is guessing.

It describes tendencies. Tendencies change with circumstance, effort and time, and a description you disagree with is more likely to be a bad question than a hidden truth. Treat the report as a well-informed second opinion about how to build, not a verdict on who you are.

Xemya is not affiliated with, licensed by, or derived from any proprietary, trademarked or otherwise legally protected assessment, and uses none in its work. Every item in the instrument was written for Xemya.

Xemya is not a medical or psychological organization. We do not diagnose, treat, or provide medical, psychological or mental-health advice, and nothing the instrument produces is a substitute for a qualified professional. If you want that kind of support, please speak to a licensed practitioner.

Contact

Questions about any of the above, a deletion request, or a correction to something we hold: email hello@xemya.com, or use the contact form and mark it as a data question. We answer these ourselves, usually within two business days.