Privacy Policy

Understand what information we collect, why we collect it, and how you can update, manage, export, and delete your information.

When you use our products and services, you've trusted us with your information. We do not sell your information and work hard to put you in control.

Introduction

We made this Privacy Policy to help you understand what information we collect, why we collect it, and how you can control your information. We provide a various products and services that help people explore and interact with the world in new ways. Our services include:

Xetarev Apps & sites, like Aeswrite Android, Aeswrite Web, and Krypt
mini Apps (previously Xetarev Labs) like VMatrix, an app that helps web developers understand devices better.
Xetarev ProSuite and Studio products and services that help businesses from all over be empowered, from brand design to building applications.

You can use our products in many different ways to manage your privacy. For example, you can sign up for a Xetarev Account if you want to use the applications from our App Suite. And you can use many Xetarev creations when you're signed out or without creating an account at all, like using Xetarev mini Apps. Here are the definitions for key terms we'll use going forward:

Algorithm A process or set of rules followed by a computer in performing problem-solving operations.
Application data cache An application data cache is a data repository on a device. It can, for example, enable a web application to run without an internet connection and improve the performance of the application by enabling faster loading of content.
Browser web storage Browser web storage enables websites to store data in a browser on a device. When used in "local storage" mode, it enables data to be stored across sessions. This makes data retrievable even after a browser has been closed and reopened. One technology that facilitates web storage is HTML 5.
Cookies A cookie is a small file containing a string of characters that is sent to your computer when you visit a website. When you visit the site again, the cookie allows that site to recognize your browser. Cookies may store user preferences and other information. Learn more
Device A device is a computer that can be used to access Xetarev products and services. For example, desktop computers, tablets, smart speakers, and smartphones are all considered devices.
Xetarev Account You may access some of our services by signing up for a Xetarev Account and providing us with some personal information (typically your name, email address, and a password). This account information is used to authenticate you when you access Xetarev services and protect your account from unauthorized access by others. You can edit or delete your account at any time through your Xetarev Account Settings.
IP address Every device connected to the Internet is assigned a number known as an Internet protocol (IP) address. These numbers are usually assigned in geographic blocks. An IP address can often be used to identify the location from which a device is connecting to the Internet. Learn more about how we use location information.
Non-personally identifiable information This is information that is recorded about users so that it no longer reflects or references an individually-identifiable user.
Personal information This is information that you provide to us which personally identifies you, such as your name, email address, or billing information, or other data that can be reasonably linked to such information by Xetarev, such as information we associate with your Xetarev Account.
XetaPixel tag A pixel tag is a type of technology placed on a website or within the body of an email for the purpose of tracking certain activity, such as views of a website or when an email is opened. Pixel tags are often used in combination with cookies.
Referrer URL A Referrer URL (Uniform Resource Locator) is information transmitted to a destination webpage by a web browser, typically when you click a link to that page. The Referrer URL contains the URL of the last webpage the browser visited.
Sensitive personal information This is a particular category of personal information relating to topics such as any information understood to be private.
Unique identifiers a string of characters that can be used to uniquely identify a browser, app, or device. Different identifiers vary in how permanent they are, whether they can be reset by users, and how they can be accessed. Unique identifiers can be used for various purposes, including security and fraud detection. On other platforms besides browsers, unique identifiers are used to recognize a specific device or app on that device. Unique identifiers may also be incorporated into a device by its manufacturer (sometimes called a universally unique ID or UUID), such as the IMEI-number of a mobile phone.
Server logs Like most websites, our servers automatically record the page requests made when you visit our sites. These "server logs" typically include your web request, Internet Protocol address, browser type, browser language, the date and time of your request, and one or more cookies that may uniquely identify your browser.

Unique identifiers can be used for various purposes, including security and fraud detection or syncing services.

Thank you for your interest in Xetarev ("Xetarev," "we", "our" or "us"). This Privacy Notice explains how information about you, that directly identifies you, or that makes you identifiable ("personal information") is collected, used and disclosed by Xetarev in connection with our website at xetarev.com (the "Site") and our services offered in connection with the Site (collectively with the Site, the "Service").

Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information. For more details on age requirements, please refer to our Terms of Service

How we use cookies

Cookies are small pieces of text sent to your browser by a website you visit. They help that website remember information about your visit, which can both make it easier to visit the site again and make the site more useful to you. Similar technologies, including unique identifiers used to identify an app or device, pixel tags, and local storage, can perform the same function. Cookies and similar technologies as described throughout this page can be used for the purposes described below.

Purposes of cookies and similar technologies

We may store or use some or all of the cookies or similar technologies in your browser, app, or device for the purposes described below. You can also manage cookies in your browser (though browsers for mobile devices may not always completely offer this visibility, they do provide you an option to clear them). Some of these technologies may be managed in your device settings or in an app's settings.

Functionality

Cookies and similar technologies used for functionality purposes allow you to access features that are fundamental to a service. These cookies are used in order to deliver and maintain services we may provide. Things considered fundamental to a service include remembering choices and preferences, like your choice of language; storing information relating to your session, (EG: The content of a shopping cart); enabling features or performing tasks requested by you; and product optimizations that help maintain and improve that service.

Some cookies and similar technologies are used to maintain your preferences. For example, most people who use Xetarev services have a cookie saved to their device to remember login and access. This Xetarev cookie expires 6 months from a user's last use. Other cookies and similar technologies are used to maintain and enhance your experience during a specific session. Certain cookies and similar technologies may also be used to improve the performance of our services

Security

Xetarev uses cookies and similar technologies for security purposes to protect you as you interact with a service by authenticating users, protecting against any potential spam, fraud and abuse, and potentially tracking outages. These cookies and similar technologies used to authenticate users help ensure that only the actual owner of an account can access that account.

Analytics

Xetarev uses cookies and other similar technologies for analytical purposes to understand how you interact with a particular service. These cookies and similar technologies help collect data that allows us to measure audience engagement and site statistics. This helps us to understand how services are used, and to enhance their content, quality and features, while also allowing us to develop and improve new services.

Some cookies and similar technologies help us understand how visitors engage with our services. For example, collecting information and reporting site usage statistics without personally identifying any individual visitors.

Managing cookies in your browser

Most browsers allow you to manage how cookies are set and used as you're browsing, and to clear cookies and browsing data. Also, your browser may have settings letting you manage cookies on a site-by-site basis.

Information we collect

We collect information to provide better services. The information we collect, and how that information is used, depends on how you use our services and how you manage your privacy controls. We also collect and use data that is not associated with your account, like when you're not signed in to a Xetarev Account, we store the information we collect with unique identifiers tied to the browser, application, or device you're using. This lets us maintain your preferences across browsing sessions. When you're signed in, we also collect information that we store with your Xetarev Account, which we treat as personal information.

Information you provide us

When you create an Account with us, you provide us with personal information that includes your name and sometimes a password. You can also choose to add a phone number or payment information to your account. Even if you aren't signed in to a Xetarev Account, you might choose to provide us with information like an email address to receive updates about our services. We also collect the content you create, upload, or receive from others when using our services. This including things like emails you write and receive to and from us, photos and videos you may save, any data you create.

Information we collect as you use our services

Your apps, browsers & devices

We collect information about the apps, browsers, and devices you use to access Xetarev products, which for example lets us provide features like automatic product updates and more. The information we collect includes unique identifiers, browser type and in other cases: settings, device type and settings, operating system, mobile network information including carrier name and phone number, and application version number. We also collect information about the interaction of your apps, browsers, and devices with our services, including IP address, crash reports, system activity, and the date, time, and referrer URL of your request. We collect this information when a Xetarev product running on your browser or on your device device contacts our servers: for example, your device periodically contacts our servers to provide information about your device and connection to our services. This information may include things like your device type and carrier name, crash reports.

Your activity

We collect information about your activity in our services, which we use to improve and personalize your experience. The activity information we collect may include but isn't limited to:

Terms you may search for on our products (if applicable)
Views and interactions with content on our products (if applicable)
Media (like images, files, audio and video) from your interactions using our products (if applicable)
Purchase/financial activity
People with whom you communicate or share content using our products (if applicable)
Activity on third-party sites and apps that use our services

If you use our services to make and receive calls or send and receive messages, we may collect call and message log information like your phone number, calling-party number, receiving-party number, forwarding numbers, sender and recipient email address, time and date of calls and messages, duration of calls, routing information, and types and volumes of calls and messages.

You can visit your Xetarev Account and manage activity information.

Your location information

We collect location information when you use our services, which lets us offer features like location personalization, geographically bound offers and more. Depending on the products you're using and settings you choose, Xetarev may use different types of location information to help make products you use more helpful. These include:

GPS and other sensor data from your device
IP address
Activity on our products
Information about things near your device, such as Wi-Fi access points, cell towers, and Bluetooth-enabled devices

The types of location data we collect and how long we store it depend on your device, the product you're using, or your settings. We use various technologies to collect and store information, including cookies, xetaPixel tags, local storage, such as browser web storage or application data caches, databases, and server logs.

Google Single Sign-On

Xetarev offers Google Single Sign-On and federated Google API access as a convenient authentication and integration option for users who prefer to use their existing Google account to access our services. This section specifically addresses how we handle Google user data and API permissions in accordance with Google's API Services User Data Policy and OAuth verification requirements.

How Google Access Works

Xetarev operates on a federated access model where:

Authentication: You can sign in to Xetarev using your Google account, providing basic profile information (name, email, profile picture, and user ID) for account creation and authentication
API Permissions: When specific Xetarev applications require Google API access to function (such as Aeswrite needing Google Drive access), you grant the necessary Google permissions to Xetarev
Federated Access: Xetarev then federates this Google API access as a resource that the specific application can access
User Control: You can revoke or disconnect Google API access for any application from your Xetarev account dashboard at any time

Google User Data We Access

When you use Google Sign-In for authentication, we access basic profile information. When you grant Google API permissions for specific applications, the scope of data access depends on the application's requirements:

For Authentication (Google Sign-In):

Basic Profile Information: Your name, email address, and profile picture
User Identifier: Your unique Google user ID
Authentication Token: OAuth 2.0 tokens for session management

For Application-Specific API Access (when granted):

Google Drive: File access, storage, and management (for applications like Aeswrite)
Google Gmail: Email access and management (for applications requiring email integration)
Google Contacts: Contact list access (for applications requiring contact features)
Other Google Services: Additional API scopes as required by specific Xetarev applications

We only request the minimum API scopes necessary for each application to function. You must explicitly grant each API permission, and you can revoke access at any time.

How We Use Google User Data

We use Google user data and API access exclusively for the following purposes related to providing and improving our application's functionality:

Account Creation & Authentication: To create and configure your Xetarev Account and securely sign you into our services
Application Functionality: To enable specific Xetarev applications to function as intended (e.g., Aeswrite accessing Google Drive for document storage and management)
Profile Management: To display your name and profile picture in your account settings and where applicable within our services
Service Delivery: To provide the features and services you request through our applications
Federated Access Management: To manage and federate Google API permissions to authorized applications within the Xetarev ecosystem

Important Use Limitations

We strictly limit our use of Google user data and API access to providing and improving user-facing features. We do not use Google user data for:

Targeted advertising or personalized advertisements
Selling to data brokers or information resellers
Credit-worthiness determination or lending purposes
Creating databases for commercial purposes
Training non-personalized AI/ML models
Any purposes other than providing or improving our application's functionality

We do not sell, trade, or transfer Google user data to third parties for purposes other than providing or improving our application's functionality. Google user data and API access may only be shared with:

Authorized Xetarev Applications: Applications within the Xetarev ecosystem that you have explicitly authorized to access specific Google API scopes
Our Service Providers: Third-party data processors (such as Supabase for authentication and database storage) who process data on our behalf under strict confidentiality agreements and in compliance with this Privacy Policy
Legal Requirements: When required by law, regulation, or legal process, or to protect our rights, property, or safety

We do not transfer Google user data or API access to third parties for advertising, data brokering, credit determination, or any prohibited purposes.

Data Protection Mechanisms

We implement comprehensive security measures to protect Google user data and API access:

Encryption: All Google user data and API communications are encrypted in transit using HTTPS/TLS and encrypted at rest where technically feasible
Secure Token Storage: OAuth tokens and API credentials are stored securely using industry-standard encryption and key management practices
Access Controls: Strict access controls and authentication mechanisms limit access to Google user data and API permissions to authorized personnel and applications only
Federated Access Management: Our federated access model ensures that applications only receive the specific API scopes you have explicitly authorized
Regular Security Reviews: We regularly review our security practices to ensure ongoing protection of your information
Compliance: Our data handling practices comply with Google's API Services User Data Policy and applicable privacy regulations

Data Retention and Deletion

Google user data and API access credentials are retained according to the following policies:

Account Active: We retain Google user data and API access tokens while your Xetarev Account remains active and while you maintain authorized API connections
Access Revocation: When you revoke Google API access for a specific application from your account dashboard, we immediately invalidate the corresponding API tokens and access permissions
Account Deletion: When you delete your Xetarev Account, we delete or anonymize all Google user data and invalidate all API access tokens associated with your account
Token Management: OAuth tokens and API credentials are securely stored and automatically expire according to Google's token lifecycle policies. You can revoke our access to your Google account at any time through your Google Account settings
Backup Systems: Deleted data may remain in backup systems for a limited time for disaster recovery purposes, after which it is permanently deleted

Your Control Over Google Data and API Access

You maintain full control over your Google user data and API permissions:

Revoke Application Access: You can revoke Google API access for any specific Xetarev application from your Xetarev account dashboard at any time
Revoke Xetarev Access: You can revoke Xetarev's access to your Google account entirely through your Google Account settings under "Third-party apps & services"
Account Deletion: You can delete your Xetarev Account (including all associated Google user data and API access) by contacting us, we typically process and initiate the deletion process within 12-18 hours.
Data Access: You can request access to the Google user data we have stored by contacting us
Privacy Controls: You can manage your privacy settings, API permissions, and data preferences through your Xetarev Account settings

Changes to Google Data Usage

If we change how we access, use, store, or share Google user data or API permissions, we will:

Update this Privacy Policy to reflect the changes
Notify users of significant changes through prominent notices
Update our Google OAuth consent screen configuration as required
Obtain necessary consents before implementing changes that expand our use of Google user data or API access

For questions specifically about our use of Google user data, federated API access, or to exercise your rights regarding such data, please contact us.

Why we collect that information

We use data to build better services. We use the information we collect from all our services for the following purposes:

Provide our services

We use your information to deliver our services, like processing your account information to provide more personalized and relevant services, information, suggestions, currencies, and much more.

Maintain & improve our services

We also use your information to ensure our services are working as intended, like tracking outages, troubleshooting issues. And we use your information to make improvements to our services like understanding which flow nodes in an application are intuitive and engaging.

Develop new services

We use the information we collect in existing services to help us develop new ones. For example, understanding how people use our products and behavior can allow us to keep creating fluid experiences.

Provide personalized services

We may use the information we collect to tailor our services for you, including providing customized and personalized experiences and recommendations.

Measure performance

We use data for analytics and measurement to understand how our services are used. For example, we analyze data about your visits to our sites to do things like optimize product design. We may use a variety of tools to do this, including analytics services from Google, Cloudflare, Vercel. When you visit any one of our sites or use apps.

Communicate with you

We use information we collect, like your email address, to interact with you directly. For example, we may let you know about upcoming changes or improvements to our services. And if you contact us, we'll keep a record of your request in order to help solve any issues you might be facing.

Protect Xetarev and our users

We use information to help improve the safety and reliability of our services. This includes detecting, preventing, and responding to fraud, abuse, security risks, and technical issues that could harm us, our users, or the public.

We use different technologies to process your information for these purposes. We use automated systems that analyze your content to provide you with new and exciting features. And we analyze your content to help us detect abuse such as spam, malware, and illegal content. We also use algorithms to recognize patterns in data. If other users already have your information you created with us that identifies you, we may show them your publicly visible Xetarev Account information, such as your name and photo. This helps people identify an email coming from you, for example.

We'll ask for your consent before using your information for a purpose that isn't covered in this Privacy Policy.

Your privacy controls

Managing, reviewing, and updating your information: When you're signed in, you can always review and update information by visiting the services you use. We also built a place for you to review and control information saved in your Xetarev Account. Your Xetarev Account includes:
Controls: Across our products, you may be able to adjust history and personalization controls to make choices about whether we save some types of data.
Ways to review & update your information: You can review and control data that's saved to your Xetarev Account from your account panel when you're signed in and using Xetarev services. The dashboard allows you to manage information associated with specific products. Manage your contact information, such as your name, email, and phone number.
As explained in our Privacy Policy, we do not sell our users’ personal information and uses personal information the CCPA treats as sensitive only for purposes permitted by the CCPA. Accordingly, when users submit requests to opt out of the sale of personal information or to limit the use of their sensitive personal information, we provide users with information on the limited circumstances in which their personal information may be shared, the controls they have, and additional controls over the collection and use of sensitive information.
Users may exercise their rights under specific privacy laws like the California Consumer Privacy Act (“CCPA”) by contacting us.
Your GDPR Rights
- Right of Access (Data Export): You can download a copy of your data by contacting us.
- Right to Erasure (Deletion): You can delete specific activity items, individual products, or your entire Xetarev Account by contacting us
- Access Limitations: We cannot process GDPR data access or deletion requests for locked or lost accounts where you cannot verify your identity or log in, as security protocols prevent manual overrides even under GDPR.

Removing & deleting your information

To delete your information, you can:

Search for and then delete specific items from your account using your Account settings/dashboard
Delete specific Xetarev products, including your information associated with those products from your Account settings/dashboard
Delete your entire Xetarev Account by contacting us

And finally, you can also request to remove content from specific Xetarev services based on applicable law and our policies.

There are other ways to control the information Xetarev collects whether or not you're signed in to a Xetarev Account, including:

Browser settings: For example, you can configure your browser to indicate when Xetarev has set a cookie in your browser. You can also configure your browser to block all cookies from a specific domain or all domains. But remember that our services rely on cookies to function properly, for things like remembering your language preferences.
Device-level settings: Your device may have controls that determine what information we collect. For example, you can modify location settings on your mobile device.

Our services let you share information with other people, and you have control over how you share. For example, you can share content publicly or you can decide to keep your content private.
When you're signed in and interact with some Xetarev services, your name and photo appear next to your activity. We may also display this information depending on your Shared endorsements setting.

When Xetarev shares your information We do not share your personal information with companies, organizations, or individuals outside of Xetarev except in the following cases:

With your consent - We'll share personal information outside of Xetarev when we have your consent.
For external processing - We provide personal information to our affiliates and other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures.
For legal reasons - We will share personal information outside of Xetarev if we have a good-faith belief that disclosure of the information is reasonably necessary to:
- Respond to any applicable law, regulation,legal process, or enforceable governmental request.
- Enforce applicable Terms of Service, including investigation of potential violations.
- Detect, prevent, or otherwise address fraud, security, or technical issues.
- Protect against harm to the rights, property or safety of Xetarev, our users, or the public.

We may process non-personally identifiable information. For example, we share information publicly to show trends about the general use of our services. We also allow specific partners to collect information from your browser or device for advertising and measurement purposes using their own cookies or similar technologies.

If Xetarev is involved in a merger, acquisition, or sale of assets, we'll continue to ensure the confidentiality of your personal information and give affected users notice before personal information is transferred or becomes subject to a different privacy policy.

Keeping your information secure

All our products are built with security features to protect your data. If detect risk that you should know about, we'll notify you and help guide you through steps to stay better protected. We work hard to protect you from unauthorized access:

Encrypted data transit to keep your data private.
We review our information collection, storage, and processing practices to prevent unauthorized access to our systems

Data Breach Notification

In the event of a data breach involving your personal information that poses a risk to your rights and freedoms, we will notify you without undue delay and in accordance with applicable legal requirements. The notification will include details about the nature of the breach, the categories of personal information affected, the likely consequences, and the measures we have taken or propose to take to address the breach. For breaches where notification to individuals is not required by law, we may provide a public notice or other appropriate communication. We maintain security incident response procedures to detect, contain, and investigate potential data security incidents promptly.

Retaining your information

We retain the data we collect for different periods of time depending on what it is, how we use it, and how you configure your settings:

Some data you can delete whenever, like your personal info or the content you create or upload, like photos and documents. We'll keep certain data and tied your Xetarev Account until you remove it or choose to have it removed.
Other data is deleted or anonymized automatically after a set period of time, such as analytics data in server logs.
We keep some data until you delete your Xetarev Account, such as information about how often you use our services.
And some data we retain for longer periods of time when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention, or financial record-keeping.
When you delete data, we follow a deletion process to make sure that your data is safely and completely removed from our servers or retained only in anonymized form. We try to ensure that our services protect information from accidental or malicious deletion. Because of this, there may be delays between when you delete something and when copies are deleted from our active and backup systems.

Compliance & cooperation with regulators

We make sure that we process your information in ways that comply with the law. We rely on our providers infrastructure and servers which are based all around the world and your information may be processed on servers located outside of the country where you live. Data protection laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply the same protections described in this policy. We also comply with certain legal frameworks relating to the transfer of data.

When we transfer your personal information internationally, we implement appropriate safeguards to ensure your data remains protected. These safeguards may include Standard Contractual Clauses (SCCs) approved by the European Commission, adherence to the EU-US Data Privacy Framework (if applicable), or other legally recognized data transfer mechanisms. Data protection laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply the same protections described in this policy.

Technologies & Third-Party Services

We use various technologies, infrastructure providers, and third-party services to operate our platform. Including:

Authentication & Identity: Email authentication, verification, OTP login, password storage, and session management. Google Sign-In with federated API access - users can sign in with Google and grant specific API permissions (such as Google Drive, Gmail, or Contacts) which Xetarev then federates to authorized applications like Aeswrite. Users can revoke or disconnect API access from their account dashboard. Tokens are stored securely for authentication and API access purposes only. Revoke access anytime via Google Account settings or Xetarev account dashboard.
Analytics & Performance: Website analytics: Page views, navigation patterns, browser/device info, geographic location (country/region level), and performance metrics; Usage analysis: Visitor interaction patterns to optimize design and functionality; Performance monitoring: Service uptime, reliability metrics, and technical performance
Security & Fraud Prevention: Bot protection to verify human users and prevents automated form abuse; DDoS protection: Protects against denial-of-service attacks; Device fingerprinting: Browser configuration, screen resolution, fonts, and device characteristics for security and fraud prevention. Unlike cookies, fingerprinting cannot be easily cleared. Used to detect suspicious activity, prevent account takeovers, and block automated attacks.; Session security: Monitoring login patterns, device changes, and geographic anomalies
Communication: Email services: Authentication codes, password resets, account updates, notifications, and support communications

Third-party data processors: Supabase (authentication, database), Vercel (analytics, hosting, storage), Cloudflare (CDN, security, bot protection), Payload CMS (content management), email delivery providers. Each processor has their own privacy policies. Contact us for more information about data processing arrangements.

About this policy

Xetarev is committed to transparency about our business operations. If you require information about our legal entity, business registration, or operational details for compliance purposes, you may request this information by contacting us. We will provide all relevant identifiers as permitted by applicable law and our security policies. This information is provided to help you understand who is responsible for processing your personal information and to assist with any regulatory inquiries or compliance requirements you may have.

This Privacy Policy applies to all of the services offered by Xetarev and its affiliates. This Privacy Policy doesn't apply to services that have separate privacy policies that do not incorporate this Privacy Policy.

This Privacy Policy doesn't apply to:

The information practices of other companies and organizations that may advertise our services
Services offered by other companies or individuals, including products or sites they offer that may include Xetarev services to which the policy applies, or products or sites displayed to you in search results, or linked from our services

We change this Privacy Policy from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We always indicate the date the last changes were published and we offer access to archived versions for your review. If changes are significant, we'll provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes)

And if you have any questions about this Privacy Policy, you can contact us.

Effective Date as of "Last updated"

On this page