Privacy Policy

This Privacy Policy explains what information XMLDir ("we", "us") collects, how we use it, and the choices you have. XMLDir is free to use.

Information we collect

• Account information. When you are granted access, we store your email address and authentication details needed to sign you in.
• Guest workspace information. If you use XMLDir without creating an account, we create an anonymous authentication identity so your workspace remains private to your browser session.
• Content you ingest. XML documents you add by URL or upload, and the structure we extract from them, are stored in your private workspace.
• Usage analytics. With your consent, we use Google Analytics 4 to understand how the site is used. Analytics stays off until you allow it via the cookie banner.
• Operational events. We record product actions, outcomes, aggregate document statistics, browser information, and a one-way hash of a network identifier for reliability, abuse prevention, support, and product administration. These logs do not duplicate raw XML, passwords, or webhook secrets.

How we use information

We use your information to operate the service, authenticate you, store and process the documents you ingest, respond to your requests, protect the free service from abuse, understand feature health, and — where you have consented — improve the product using aggregate analytics. Operational logging is necessary to run the service and is separate from optional Google Analytics. We do not sell your personal information.

Cookies and analytics

We use a small number of cookies and similar technologies. Analytics and advertising signals default to denied until you opt in. See our Cookie Policy for details and to change your choice at any time.

Where your data lives

Data is stored with our infrastructure providers, including Supabase (database and authentication) and Vercel (hosting). Access to your sources and documents is isolated per account and enforced with database row-level security. Traffic is encrypted in transit over HTTPS.

Service providers

We share limited data with providers that help us run the service — currently Supabase, Vercel, and, subject to your consent, Google Analytics. These providers process data on our behalf.

Your rights

You can request access to, correction of, or deletion of your personal data. To exercise any of these rights, email us at admin@xmldir.com.

Retention

We retain account data and ingested content for as long as a workspace is active. Guest workspaces may be removed after inactivity. We keep operational events only as long as needed for security, support, and product administration, and delete personal data on request or after account closure, subject to legal obligations.

Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected by the "last updated" date above.

Contact

Questions about privacy? Email admin@xmldir.com.