Privacy Policy

Last Updated: December 19, 2025

1. How we protect your privacy

Xcapa (“we”, “us”, or “our”) is committed to protecting your privacy and the security of your personal data.

Xcapa provides services that help individuals and small teams record and manage expenses more easily, including an online platform for hosting your personal or business data.

In the course of providing our services, we collect and process certain information related to you and your use of the platform. This data is necessary for operating the service, improving user experience, and maintaining platform security.

This Privacy Policy explains:

  • What information we collect
  • Why we collect it
  • How we use, store, and protect it
  • What rights you have regarding your personal data

2. Information We Collect

Most of the personal data we collect is provided directly by you when you register for or use our services. Some data is collected automatically when you interact with our website and services.

2.1 Account and Contact Information

When you create an Xcapa account, use our services, request a free trial, or contact us through forms, you may provide:

  • Name
  • Email address

We do not store or process your credit card information. All payments and subscription-related transactions are handled by PCI-DSS–compliant third-party payment processors (such as Stripe).

2.2 Customer Data and Usage Content

When you record or upload data in Xcapa (such as expense records, invoices, categories, or notes):

  • The data always belongs to you
  • You retain full ownership and control over it

We process this data only when:

  • Providing the service itself
  • Acting on your explicit actions or instructions
  • Performing necessary technical support, maintenance, or security operations

2.3 Browser and Device Information

When you visit Xcapa.com or use our online services, we may automatically collect:

  • Browser language
  • Approximate location (country or region level)
  • Access time and visited pages
  • Browser type, version, and operating system

This information is used primarily to:

  • Maintain service security
  • Improve product performance and user experience
  • Perform statistical and analytical analysis

2.4 Cookies and Session Data

We use cookies to:

  • Maintain login sessions
  • Store language and preference settings
  • Ensure the proper functioning of the service

If you disable certain non-essential cookies, the website will continue to function, but some features or experiences may be limited.

2.5 Children’s Privacy

Xcapa’s services are not intended for users under the age of 16. We do not knowingly collect personal information from minors. If we become aware that such data has been collected, we will take steps to delete it as soon as possible.

3. How We Use Your Information

We use the collected information only to the extent reasonably necessary, including but not limited to the following purposes:

3.1 Service Provision and Maintenance

  • Creating and managing user accounts
  • Providing core features (such as expense tracking and data visualization)

3.2 Communication and Support

  • Responding to inquiries or requests
  • Providing technical support and important service-related notices

3.3 Billing and Account Management

  • Processing subscriptions, payments, and related accounting matters

3.4 Product Improvement

  • Analyzing usage data in an aggregated or anonymized form
  • Improving product functionality and user experience

3.5 Automated Processing

Certain features of Xcapa may involve automated data processing (for example, expense categorization or field recognition). Such processing is used solely to provide the service and is not used for advertising, user profiling, or sale to third parties.

4. Third-Party Service Providers

To operate our services, we may rely on third-party providers for:

  • Cloud hosting and database services
  • Payment processing
  • Basic analytics and security services

We share only the minimum data necessary with these providers and require them to comply with applicable data protection laws and process data solely for agreed-upon purposes.

5. Your Rights

Subject to applicable laws, you have the right to:

  • Access your personal data
  • Correct or update your information
  • Request deletion of your personal data
  • Restrict or object to certain data processing activities

5.1 How to Exercise Your Rights

5.1.1 Account and Contact Information

You may log in to your Xcapa account at any time to view or update your information. To permanently delete your account or personal data, please contact us using the details below.

5.1.2 Customer Data

You may, at any time:

  • Modify or delete your data
  • Export a complete data backup
  • Delete your entire database through the control panel

Except where retention is required by law (such as accounting or tax obligations).

6. Data Retention

  • 6.1 Account and contact data: Retained only as long as necessary to provide the service or comply with legal obligations
  • 6.2 Customer data: Retained for the duration of service use and deleted within a reasonable period after account deletion
  • 6.3 Technical and security logs: Retained only for necessary security or compliance purposes

7. Security

We take data security seriously and implement reasonable technical, administrative, and organizational measures to protect your data from loss, misuse, or unauthorized access.

If a data security incident occurs that may affect your personal information, we will take appropriate action and notify affected users in accordance with applicable laws.

8. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. The updated policy will be published on our website with the latest revision date.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact Xcapa Technical Support: support@xcapa.com.