Privacy Policy

This policy explains how XEXE collects, uses, stores and protects your personal information, and what rights you have over your data. We follow the principle of data minimisation and process only what is necessary to provide the service.

What we process: (1) Account information — the email address you register with and your hashed password; (2) Usage data — the spreadsheets you upload, your processing job records and results; (3) Technical data — device fingerprint (salted and hashed, never stored in raw form), IP address (salted and hashed) and access logs, used for quota control and security.

Purposes and legal basis: We process account and upload data on the basis of "performance of a contract" to deliver the service you request; we process technical and security data on the basis of "legitimate interest" to prevent abuse, enforce quotas and keep the system secure. We do not use your data for advertising.

How data is stored and protected: Your files and account data are stored isolated per user, and all traffic is encrypted with HTTPS. Device fingerprints and IP addresses are stored only as salted hashes and cannot be reversed to a plain identifier.

Retention: Guest files are deleted automatically on expiry; files for registered users follow the retention option selected; you can delete your own files and job records at any time. After you close your account, the associated personal information is deleted or anonymised within a reasonable period.

Your rights: Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to processing, to receive a copy of your data (portability), and to lodge a complaint with a supervisory authority. You can manage most of this yourself from your account page, or contact us through the in-app feedback feature to exercise these rights.

Third-party services: Payment and invoicing are handled by our authorised reseller Paddle, which acts as an independent data controller and processes your payment information under its own privacy policy. We do not sell or share your spreadsheet data with third parties for their own purposes.

Model training commitment: This service processes your uploaded spreadsheets with deterministic algorithms and does not use your uploaded data to train any model.

Contact: If you have any questions about this policy or wish to exercise the rights above, please reach us through the in-app feedback feature.