Privacy Policy - XELTA FORGE

1. Introduction

XELTA FORGE ("we," "our," or "us"), operated by XELTA Studios, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website accessibility scanning service.

By using XELTA FORGE, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

Email Address: When you request a full accessibility report
Website URLs: URLs you submit for accessibility scanning
Account Information: If you create an account, we collect your name and email

2.2 Information Collected Automatically

Usage Data: Pages visited, time spent, and features used
Device Information: Browser type, operating system, and device type
IP Address: For security and fraud prevention

2.3 Information We Do NOT Collect

We do NOT collect payment card information (handled securely by LemonSqueezy)
We do NOT store passwords in plain text
We do NOT access the content of websites beyond what is publicly accessible

3. How We Use Your Information

We use the information we collect to:

Provide and deliver accessibility scan reports
Send you the reports you request via email
Process your transactions through our payment provider
Improve and optimize our service
Respond to your inquiries and provide customer support
Detect and prevent fraud and abuse

We do NOT sell your personal information to third parties.

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

Data is encrypted in transit using TLS/SSL
Data is encrypted at rest
We use Supabase for database services (SOC 2 Type II compliant)
We use Vercel for hosting (SOC 2 Type II compliant)
Access to data is restricted to authorized personnel only

5. Data Retention

Free Users: Scan data is retained for 90 days
Paid Users: Scan data is retained for the duration of your subscription plus 30 days
Account Deletion: Upon request, we will delete your data within 30 days

6. Third-Party Services

We use the following third-party services that may collect information:

Supabase: Database and authentication
Vercel: Website hosting and analytics
LemonSqueezy: Payment processing

Each of these services has their own privacy policies governing their use of your data.

7. Your Rights

Depending on your location, you may have the following rights:

7.1 For All Users

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Opt-out of marketing communications

7.2 For EU/EEA Residents (GDPR)

Right to data portability
Right to restrict processing
Right to object to processing
Right to lodge a complaint with a supervisory authority

7.3 For California Residents (CCPA)

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to opt-out of the sale of personal information
Right to non-discrimination for exercising these rights

To exercise any of these rights, contact us at privacy@xeltaforge.com.

8. Cookies

We use essential cookies only, which are necessary for the service to function. These cookies do not track you across websites.

Authentication Cookies: To keep you logged in
Security Cookies: To prevent CSRF attacks

We do not use advertising or tracking cookies.

9. Children's Privacy

XELTA FORGE is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected personal information from a child under 13, we will delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: privacy@xeltaforge.com
Website: xeltaforge.com