Privacy Policy
Xtended ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our services.
Information We Collect
We collect the following types of information:
Account Data
Name, email address, and password when you sign up.
Usage Data
IP address, browser type, operating system, device information, and interaction logs.
Content Data
Information you input into the Xtended platform, including structured entries and custom field values.
Users are solely responsible for the content they choose to input, store, or manage within Xtended. We recommend not storing sensitive personal data unless absolutely necessary and with proper legal basis or consent from data subjects.
How We Use Your Information
We use your data to:
- •Provide and maintain our service
- •Analyze product usage to improve features (via PostHog)
- •Authenticate and authorize access to the platform
- •Communicate with you regarding updates, support, or service-related matters
- •Ensure platform security, including audit logging
Third-Party Services
We use the following third-party services, which may process your data on our behalf:
Stripe
Payment processing
Supabase
Authentication and data storage
Railway
Hosting infrastructure
Resend
Transactional email delivery
PostHog
Analytics and session recording (only after consent)
These providers are restricted from using your data for any purpose other than providing their contracted services.
Security
We employ industry-standard security measures, including:
Data Retention and Deletion
We retain your data as long as your account remains active. Upon account deletion, your data will be purged within 30 days unless required by law.
To request deletion of your data, contact us at [email protected]
Data Roles and Responsibilities
Xtended acts as a data processor for user-submitted content, and as a data controller for account and platform usage data. Users are the data controllers for the information they input into the platform and are responsible for ensuring its lawful collection and use.
As data controllers of your content, you must ensure compliance with applicable data protection laws, including obtaining necessary consents and legal basis for any personal data you process through Xtended.
Your Rights
Depending on your location, you may have the right to:
- ✓Access, correct, or delete your personal information
- ✓Withdraw consent for non-essential data use
- ✓Lodge a complaint with a data protection authority
To exercise your rights, please email [email protected]
Use of Cookies and Analytics
We use cookies and similar technologies to:
- •Maintain secure sessions
- •Analyze usage patterns (via PostHog)
- •Improve user experience
Session replay and user tracking are only enabled after explicit user consent. You may manage your cookie preferences at any time.
Children's Privacy
Xtended is not intended for individuals under the age of 13. We do not knowingly collect data from minors. If you believe we have unintentionally collected such data, please contact us for removal.
International Transfers
Data may be processed and stored in countries outside of your own. We implement appropriate safeguards, such as standard contractual clauses, to protect your data during such transfers.
Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be notified via the platform or email where possible. The updated policy will be posted here with a revised effective date.
Contact Us
If you have questions or concerns about this policy, contact us at:
UNBOUNDED SOFTWARE LTD
Company No. 15433829
Unit A, 82 James Carter Road
Mildenhall, Suffolk, IP28 7DE
United Kingdom