Privacy Policy
How XtraPath collects, protects, utilizes, and respects your personal data, creative work, and payment information.
1. Introduction & Overview
Welcome to XtraPath ("we," "our," "us," or the "Platform"). We provide an interactive creation, computing, publishing, learning, and monetization ecosystem for STEM educators, authors, students, and creators worldwide.
We are dedicated to safeguarding your privacy and ensuring you have complete transparency into how your personal data and computational creations are handled.
2. Information We Collect
We collect the minimum information required to deliver high-performance creation tools, secure logins, and global creator payments:
- Account Data: Email address, display name, username, bio, and profile avatar provided during registration or Google OAuth sign-in.
- Creative Content & Code: Mathematical scripts, LaTeX book chapters, KaTeX equations, Desmos graphs, physics simulations, 3D scenes, article bodies, and digital asset files you create or publish.
- Transaction & Commerce Information: Transaction IDs, purchase dates, order totals, and access tokens for courses, books, or protected source code. We never store raw credit card numbers or banking passwords on our servers.
- Technical & Session Data: Browser type, device characteristics, IP address, and local cache state stored in your browser's local storage for rapid offline-resilient rendering.
3. Payment Processing & Gateways
All financial transactions on XtraPath are processed by PCI-DSS compliant payment gateways:
- Stripe: For credit cards, debit cards, and Apple Pay.
- PayPal: For international wallet and PayPal account transactions.
- Razorpay: For UPI, Indian NetBanking, and local cards.
Payment information is transmitted directly from your client browser to the respective payment gateway using 256-bit TLS encryption. XtraPath only receives verification status and transaction tokens to unlock purchased content.
4. How We Use Your Information
We use your information strictly for legitimate platform operations:
- To authenticate you and keep your creative workspaces synchronized.
- To compile, render, and host your interactive creations, LaTeX books, and physics simulations.
- To facilitate creator store sales, automated payouts, and subscription unlocks.
- To protect our users from abuse, fraudulent chargebacks, and unauthorized access.
- To maintain our remix lineage graph so original creators are always credited for derivative works.
5. Data Sharing & Third-Party Services
We do not sell, rent, or monetize your personal data to advertisers. We share information only with essential infrastructure providers:
- Supabase: For cloud database hosting, authentication, and secure encrypted media storage.
- Payment Processors (Stripe, PayPal, Razorpay): To capture payments and disburse creator earnings.
- Legal Authorities: Only when required by law, valid court subpoenas, or to prevent imminent fraud.
6. Your Rights & Data Control
Regardless of your geographic location, you have complete control over your account:
- Access & Export: You can download all your published books, articles, code, and project files at any time.
- Correction & Update: Modify your profile details in your Settings page.
- Deletion: You may request complete account deletion and purge of your personal records by contacting support.