Privacy Policy

Last updated: February 2026

1. Data Controller

The data controller responsible for this website and the XSYS PRO application is XSYS (see Imprint for contact details).

2. Data We Collect

When you use our services, we may collect the following data:

  • Account Data: Username, email address, encrypted password hash
  • License Data: Subscription tier, license status, start and expiry dates
  • Device Data: Hardware ID hash and machine name for license binding (max. 2 devices)
  • Usage Data: Feature usage logs, session timestamps, IP addresses

3. Purpose of Processing

We process your data for the following purposes:

  • Providing and maintaining the XSYS PRO service
  • License validation and feature access control
  • Preventing unauthorized use and enforcing device limits
  • Customer support and communication

4. Data Storage & Security

Your data is stored on secure servers located in Germany. Passwords are hashed using BCrypt. All communication between the application and our servers is encrypted via TLS/HTTPS. Hardware IDs are stored as one-way hashes and cannot be reversed to identify your physical hardware.

5. Data Sharing

We do not sell, trade, or otherwise transfer your personal data to third parties. Data may only be shared with payment processors (Stripe) for subscription billing, and only the minimum required information is transmitted.

6. Cookies

This website uses essential cookies only for authentication purposes (session management). We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

7. Your Rights (GDPR)

Under the EU General Data Protection Regulation, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion of your data
  • Restrict processing of your data
  • Data portability
  • Object to processing

To exercise these rights, contact us at info@xsys-pro.com.

8. Data Retention

Account and license data is retained for the duration of your subscription plus 30 days. Usage logs are retained for 90 days. You may request deletion of your account and all associated data at any time.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the service after changes constitutes acceptance of the updated policy.