Privacy Policy

Effective date: June 23, 2026

1. Who we are

Eric Paré Studio inc. (“we”, “us”, or “Xangle”) develops commercial photo and video production software distributed under the Xangle brand. Our principal place of business is in Montreal, Quebec, Canada.

2. What personal information we collect

Account and licence data

  • Email address — collected at licence purchase, free-tier activation, or trial start. Used to deliver the licence, authenticate sessions, and send transactional emails.
  • Licence and plan details — app, tier, billing mode, camera/fixture count, pricing, status, and dates. Stored to enforce entitlements.
  • Machine identifier — a hardware fingerprint (hostname + partial ID) sent by the desktop app to bind a licence seat to a device.

Session and login activity

  • Login timestamps — date/time of last portal login and last desktop licence authentication, stored per account.
  • Session tokens — opaque tokens with expiry dates, stored in an encrypted cookie and in our session store. No IP address or browser fingerprint is stored in sessions.

Payment

  • Payment information — processed entirely by Stripe. We do not store credit card numbers, billing addresses, or Stripe customer objects locally. We store only the Stripe subscription ID linked to your email.

Support and diagnostics

  • Diagnostics report — collected only when you explicitly submit one from the app. Contains OS summary, GPU summary, connected devices, app version, and compressed logs. Uploaded to Cloudflare R2 under a hashed identifier (not your email in plaintext).
  • Free-text details — optional description you add when submitting a diagnostics report (up to 4000 characters).

Marketing (optional)

  • Newsletter subscription — if you opt in at checkout, your email and language preference are forwarded to our mailing-list provider. You can unsubscribe at any time.

Platform logs

  • HTTP request metadata — IP address, path, status code, user-agent, and timestamp are logged automatically by our hosting platform (Vercel). These logs are transient and retained for a maximum of 1 hour in standard configuration.

3. What we do NOT collect

  • No passive telemetry, analytics, or usage tracking from the desktop apps.
  • No camera images, videos, or media content.
  • No IP address stored in user sessions or login records (only in transient platform logs).
  • No browser fingerprinting or device tracking beyond the machine identifier used for licence seat binding.
  • No tracking cookies or advertising identifiers.

4. Why we collect it

  • Deliver and enforce software licences.
  • Process payments and prevent fraud.
  • Provide technical support when requested.
  • Comply with legal obligations.

5. Who we share it with

  • Stripe (payment processing) — subject to Stripe’s privacy policy.
  • Postmark (transactional email delivery) — receives the recipient email address to deliver OTP codes, licence confirmations, and trial lifecycle emails.
  • Cloudflare (hosting, R2 storage) — diagnostics uploads are stored in Cloudflare R2 under a hashed path. The xanglecs.com website is served via Cloudflare.
  • Vercel (application hosting) — the portal runs on Vercel, which processes HTTP requests and generates transient platform logs.

We do not sell, rent, or trade personal information.

6. Retention

  • Account email and licence records: retained as long as the licence is active, plus 12 months after expiry for renewal eligibility.
  • Session tokens: expire automatically (1 day for desktop sessions, 90 days for portal family sessions).
  • OTP codes: deleted after 5 minutes.
  • Diagnostics uploads: deleted within 30 days of support resolution.
  • Platform logs (IP addresses): retained by Vercel for up to 1 hour.
  • Purchase records (for tax/legal compliance): retained for 7 years.
  • Coupon usage counters: retained indefinitely to prevent re-use.

7. Your rights

Under Quebec Law 25 and applicable privacy legislation, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your information (subject to legal retention requirements).
  • Withdraw consent for optional processing (e.g., newsletter).

8. Security

We use industry-standard encryption for data in transit (TLS) and at rest. Access to personal data is restricted to authorized personnel on a need-to-know basis.

9. Children

Our software is intended for professional use. We do not knowingly collect personal information from anyone under 16.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the email address associated with your licence. The effective date at the top of this page indicates the latest revision.

11. Contact

For privacy inquiries, data access requests, or complaints:

Eric Paré Studio inc.
Montreal, Quebec, Canada
Email: privacy@xangle.net

© 2026 Eric Paré Studio inc.