AI Data Processing at Xentra
Transparency notice on the use of artificial intelligence: which Xentra features involve AI, which provider receives the data, and what is redacted before it is sent.
Last updated: 5 September 2026
1. Overview
Xentra uses two providers for AI-assisted features: Google LLC (Gemini API) and Anthropic PBC (Claude API), both based in the USA. This notice explains which feature transmits which data to which provider and what safeguards apply. Transfers take place on the basis of the European Commission's standard contractual clauses.
All AI features are optional and can be disabled in settings.
2. AI Functions in Detail
These features access an AI language model. The "Redacted" column indicates whether personal details are removed or replaced before transmission.
| Function | Provider | Data sent | Anonymized |
|---|---|---|---|
| .funcBotReply | Google Gemini | .funcBotReplyData | ✅ |
| .funcAssistant | Anthropic Claude | .funcAssistantData | ⚙️ .tableConfigurable |
| .funcOnboarding | Anthropic Claude | .funcOnboardingData | ✅ |
| .funcMeeting | Anthropic Claude | .funcMeetingData | — |
| .funcFaq | Google Gemini | .funcFaqData | ✅ |
| .funcGuestPage | Google Gemini | .funcGuestPageData | ✅ |
| .funcUnit | Google Gemini | .funcUnitData | — |
| .funcInvoice | Google Gemini | .funcInvoiceData | ⚠️ * |
| .funcImprove | Google Gemini | .funcImproveData | — |
| .funcTranslate | Google Gemini | .funcTranslateData | — |
| .funcVoice | Google Gemini | .funcVoiceData | — |
.funcInvoiceNote
3. Anonymization Measures
For some guest-facing features, personal details are automatically redacted before transmission:
- Last names are removed
- Email addresses are replaced with [EMAIL]
- Phone numbers are replaced with [PHONE]
- UUIDs are removed
.anonymizationP2
.anonymizationP3
4. Audit Logging
Each AI call is logged in an audit table. The following metadata is captured:
- Name of the called function
- Categories of data sent
- Whether anonymization was applied
- Timestamp and user ID
.auditP2
5. Consent Mechanism
AI functions require explicit activation via the "AI data processing" toggle in settings.
Without this consent, no data is transmitted to Google Gemini.
Disclosure to guests
If a host answers guest messages fully automatically, the guest must be able to recognise that they are interacting with an AI system — as required by Article 50 of the AI Regulation (EU) 2024/1689. Xentra provides a disclosure notice for this, which the host activates in the settings. Responsibility for the disclosure lies with the host, because the message is sent in their name.
6. No Training by Google
Under the terms of use of both providers, data sent via the application programming interface is not used to train their models.
7. Legal Basis
Processing is based on consent (Art. 6(1)(a) GDPR) and legitimate interest (Art. 6(1)(f) GDPR).
8. Contact
For questions about AI data processing, please contact:
Stellar Tourism Innovations GmbH
E-Mail: datenschutz@myxentra.com