Privacy Policy

Xolumix is a product of Ximplex, operated from Costa Rica. For anything related to your privacy, contact us at support@ximplex.app.

• Account information: your email address, and your name and profile picture if you sign in with Google or GitHub.
• What you add to Xolumix: the spreadsheets you upload, the records in your apps, and who changed what and when (the change history).
• Your team: the email addresses of the people you invite and their role.
• Your messages: when you use our contact bubble or email us, we receive your name, email, topic and message.
• Payment information: handled entirely by Paddle. We only receive the status of your subscription.
• Technical information: basic logs (like IP address and browser type) that our hosting provider keeps to run the service securely.

Your sheets may include information about other people, like your customers. You decide what goes in, and we only store and show it so your apps work. We never contact those people, and we never sell or share their information. You're responsible for having the right to store it. Please don't upload sensitive data such as health records, card numbers, passwords or government ID numbers.

• To run Xolumix: build and show your apps, save your changes and keep the history.
• To send you service emails, such as team invitations.
• To keep Xolumix secure and prevent abuse.
• To improve Xolumix, using overall, non-identifying usage information.

We don't sell your data, we don't use it for advertising, and we don't share it except with the service providers below.

We rely on a few trusted companies to run Xolumix. They only process data to provide their service to us:

• Supabase: Stores your account and your apps' data (database).
• Vercel: Hosts and runs the Xolumix website and app.
• Resend: Sends service emails (like team invitations) and delivers the messages you send us.
• Google and GitHub: Let you sign in to your Ximplex account if you choose them. We receive your name, email and profile picture. You can also sign in with a link sent to your email.
• Paddle: Processes payments as our Merchant of Record. Paddle handles your card details; we never see or store them.

Some of these providers process data in the United States and other countries.

We only use the cookie that keeps you signed in. It's shared by the Ximplex apps, so you sign in once. Your day or night choice is saved in your own browser. We don't use advertising or tracking cookies.

We keep your data while your account is active. You can export it to Excel at any time. If you ask us to delete your account, we'll remove your data within 30 days, except where we must keep something for legal reasons.

Data is encrypted in transit (HTTPS), access to the database is restricted to our server, and each person can only see the apps they own or were invited to.

Under Costa Rica's data protection law (Law 8968) and other laws that may apply to you, you can ask us at any time to give you a copy of your data, correct something that's wrong, or delete it. Just write to support@ximplex.app. We'll reply within 30 days.

Xolumix is not intended for anyone under 18, and we don't knowingly collect their data.

If we make important changes, we'll let you know by email or in the app. The date at the top of this page always shows the latest version.