1. Introduction
Extreme XL ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website extremexl.com or use our Extreme XL Tools software (the "Services").
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.
2. Information We Collect
2.1 Personal Information You Provide
We collect personal information that you voluntarily provide to us when you:
- Register an account on our website
- Purchase our products or services
- Subscribe to our newsletter or communications
- Contact us via email or contact forms
- Submit support requests or help inquiries
The personal information we collect may include:
- Contact Information: Name, email address, phone number
- Account Credentials: Username, password (encrypted)
- Payment Information: Processed securely through Stripe (we do not store credit card information)
- License Information: License keys, activation dates, product editions
- Communication Data: Messages sent through contact forms or email
2.2 Automatically Collected Information
When you access our website or use our software, we automatically collect certain information about your device and usage:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent on pages, links clicked, referral sources
- Software Usage: Extreme XL Tools feature usage, error logs, performance data (anonymized)
- Cookies and Tracking: Session cookies, authentication tokens, preferences
3. How We Use Your Information
We use the information we collect for the following purposes:
- Product Delivery: To process orders, deliver software licenses, and provide download access
- Account Management: To create and manage your account, authenticate access to help resources
- Customer Support: To respond to inquiries, provide technical support, and troubleshoot issues
- Product Improvement: To analyze usage patterns, identify bugs, and improve software features
- Communication: To send transactional emails (purchase confirmations, license keys, updates)
- Marketing: To send promotional emails about new features, updates, or offers (with your consent)
- Security: To detect fraud, prevent abuse, and protect the security of our services
- Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our agreements
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us provide and improve our services.
4.1 Types of Cookies We Use
- Essential Cookies: Required for website functionality, user authentication, and security. These cookies enable core features like account login and access to protected content.
- Session Cookies: Temporary cookies that maintain your session while you browse our website and access help resources. These cookies are deleted when you close your browser or after a set period.
- Preference Cookies: Remember your settings, choices, and preferences to provide a more personalized experience on return visits.
- Analytics Cookies: Help us understand how visitors use our website, which pages are most popular, and how we can improve the user experience.
You can control cookies through your browser settings. However, disabling essential cookies may limit your ability to use certain features of our website, such as staying logged in or accessing help documentation.
5. How We Share Your Information
We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:
5.1 Service Providers
We use trusted third-party service providers to help us operate our business and deliver our Services. These providers include:
- Payment Processors: Secure payment processing for purchases and subscriptions
- License Management Services: License key generation, validation, and management
- Web Hosting Providers: Website and application hosting infrastructure
- Email Service Providers: Transactional and marketing email delivery
Each service provider has access only to the information necessary to perform their specific function and is contractually obligated to maintain the confidentiality and security of your information.
5.2 Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:
- Comply with legal obligations
- Protect our rights, property, or safety
- Prevent fraud or abuse
- Respond to law enforcement requests
5.3 Business Transfers
If Extreme XL is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website of any change in ownership or use of your personal information.
6. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:
- Encryption: SSL/TLS encryption for data transmission, secure HTTPS connections
- Secure Authentication: Password hashing, secure session management, HttpOnly cookies
- Access Controls: Limited employee access to personal data on a need-to-know basis
- Regular Security Audits: Monitoring for vulnerabilities and security threats
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
7. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
- Account Data: Retained while your account is active and for 3 years after account closure (for legal and tax purposes)
- Purchase Records: Retained for 7 years for tax compliance and financial reporting
- License Keys: Retained indefinitely for perpetual licenses, or until subscription expiration + 1 year
- Support Communications: Retained for 2 years for quality assurance and dispute resolution
- Usage Logs: Retained for 90 days, then anonymized or deleted
8. Your Privacy Rights
8.1 Rights for All Users
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Opt-Out: Unsubscribe from marketing emails (transactional emails required for service delivery)
- Object: Object to processing of your information for certain purposes
8.2 GDPR Rights (EU/EEA Residents)
If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):
- Data Portability: Receive your data in a structured, machine-readable format
- Restriction: Request restriction of processing under certain conditions
- Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
- Lodge a Complaint: File a complaint with your local data protection authority
8.3 CCPA Rights (California Residents)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):
- Know: Request disclosure of categories and specific pieces of personal information collected
- Delete: Request deletion of personal information
- Opt-Out: Opt-out of sale of personal information (we do not sell personal information)
- Non-Discrimination: Exercise privacy rights without discrimination
8.4 Exercising Your Rights
To exercise any of these rights, please contact us at [email protected] with "Privacy Request" in the subject line. We will respond to your request within 30 days.
9. International Data Transfers
Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from your country of residence.
When we transfer personal information internationally, we use appropriate safeguards such as:
- Standard Contractual Clauses approved by the European Commission
- Service provider privacy certifications and commitments
- Technical security measures to protect data in transit and at rest
10. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will delete such information from our systems.
11. Third-Party Links
Our website may contain links to third-party websites, services, or resources. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending email notification to registered users (for significant changes)
- Displaying a prominent notice on our website
Your continued use of our services after changes become effective constitutes acceptance of the revised Privacy Policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Acknowledgment: By using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.
