Privacy Policy
Last Updated: December 19, 2025
1. How we protect your privacy
Xcapa (“we”, “us”, or “our”) is committed to protecting your privacy and the security of your personal data.
Xcapa provides services that help individuals and small teams record and manage expenses more easily, including an online platform for hosting your personal or business data.
In the course of providing our services, we collect and process certain information related to you and your use of the platform. This data is necessary for operating the service, improving user experience, and maintaining platform security.
This Privacy Policy explains:
- What information we collect
- Why we collect it
- How we use, store, and protect it
- What rights you have regarding your personal data
2. Information We Collect
Most of the personal data we collect is provided directly by you when you register for or use our services. Some data is collected automatically when you interact with our website and services.
2.1 Account and Contact Information
When you create an Xcapa account, use our services, request a free trial, or contact us through forms, you may provide:
- Name
- Email address
We do not store or process your credit card information. All payments and subscription-related transactions are handled by PCI-DSS–compliant third-party payment processors (such as Stripe).
2.2 Customer Data and Usage Content
When you record or upload data in Xcapa (such as expense records, invoices, categories, or notes):
- The data always belongs to you
- You retain full ownership and control over it
We process this data only when:
- Providing the service itself
- Acting on your explicit actions or instructions
- Performing necessary technical support, maintenance, or security operations
2.3 Browser and Device Information
When you visit Xcapa.com or use our online services, we may automatically collect:
- Browser language
- Approximate location (country or region level)
- Access time and visited pages
- Browser type, version, and operating system
This information is used primarily to:
- Maintain service security
- Improve product performance and user experience
- Perform statistical and analytical analysis
2.4 Cookies and Session Data
We use cookies to:
- Maintain login sessions
- Store language and preference settings
- Ensure the proper functioning of the service
If you disable certain non-essential cookies, the website will continue to function, but some features or experiences may be limited.
2.5 Children’s Privacy
Xcapa’s services are not intended for users under the age of 16. We do not knowingly collect personal information from minors. If we become aware that such data has been collected, we will take steps to delete it as soon as possible.
3. How We Use Your Information
We use the collected information only to the extent reasonably necessary, including but not limited to the following purposes:
3.1 Service Provision and Maintenance
- Creating and managing user accounts
- Providing core features (such as expense tracking and data visualization)
3.2 Communication and Support
- Responding to inquiries or requests
- Providing technical support and important service-related notices
3.3 Billing and Account Management
- Processing subscriptions, payments, and related accounting matters
3.4 Product Improvement
- Analyzing usage data in an aggregated or anonymized form
- Improving product functionality and user experience
3.5 Automated Processing
Certain features of Xcapa may involve automated data processing (for example, expense categorization or field recognition). Such processing is used solely to provide the service and is not used for advertising, user profiling, or sale to third parties.
4. Third-Party Service Providers
To operate our services, we may rely on third-party providers for:
- Cloud hosting and database services
- Payment processing
- Basic analytics and security services
We share only the minimum data necessary with these providers and require them to comply with applicable data protection laws and process data solely for agreed-upon purposes.
5. Your Rights
Subject to applicable laws, you have the right to:
- Access your personal data
- Correct or update your information
- Request deletion of your personal data
- Restrict or object to certain data processing activities
5.1 How to Exercise Your Rights
5.1.1 Account and Contact Information
You may log in to your Xcapa account at any time to view or update your information. To permanently delete your account or personal data, please contact us using the details below.
5.1.2 Customer Data
You may, at any time:
- Modify or delete your data
- Export a complete data backup
- Delete your entire database through the control panel
Except where retention is required by law (such as accounting or tax obligations).
6. Data Retention
- 6.1 Account and contact data: Retained only as long as necessary to provide the service or comply with legal obligations
- 6.2 Customer data: Retained for the duration of service use and deleted within a reasonable period after account deletion
- 6.3 Technical and security logs: Retained only for necessary security or compliance purposes
7. Security
We take data security seriously and implement reasonable technical, administrative, and organizational measures to protect your data from loss, misuse, or unauthorized access.
If a data security incident occurs that may affect your personal information, we will take appropriate action and notify affected users in accordance with applicable laws.
8. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. The updated policy will be published on our website with the latest revision date.
9. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact Xcapa Technical Support: support@xcapa.com.