Privacy
Privacy notice.
How this website handles personal data. Last updated on .
Who is responsible
Contact.
XSheet, 36000 Kraljevo, Serbia.
Privacy contact: contact@xsheet.io.
This website
No cookies, no tracking, nothing loaded from other sites.
This website uses no cookies, no analytics or tracking and no scripts, and it loads no content from other sites: its fonts and images are delivered by the website itself. Apart from the technical data described next, the only personal data it receives is what you send with the contact form, described below.
Like every website, it receives the technical data your browser sends with each request, such as your IP address, the page requested and your browser’s name and version. This data is used only to deliver the website and to protect it against abuse.
Access requests
When you write to us.
The contact form on the Request a demo page takes your name, work email, company and, if you add one, a message. When you send it, they are delivered by email to our mailbox through our email provider; the website keeps no copy. Your IP address is used only to limit how often the form can be sent: it is held in memory for about an hour at most, and it is not logged or stored.
If you write to us, with the form or by email, we use your message and contact details only to answer you and to manage your access.
The XSheet application, for invited users, processes personal data of its own. It is not part of this website.
Legal details
Legal bases, recipients and retention.
XSheet is responsible for the personal data described in this notice: it is the controller under the EU and UK General Data Protection Regulation and under Serbia’s Law on Personal Data Protection. You can contact it at the address above.
We use the technical request data to deliver this website and to protect it against abuse, and the content of your messages to answer you and to manage the access you request. The legal basis is our legitimate interest in running a secure website and in answering you (Article 6(1)(f) of the EU and UK GDPR; Article 12 of Serbia’s Law on Personal Data Protection) and, when you ask for access, steps taken at your request before an agreement (Article 6(1)(b)).
Service providers that deliver this website and its email on our behalf receive this data as processors, bound by contract to use it only on our instructions. Some of them may process it outside Serbia, the European Economic Area or the United Kingdom, including in the United States. Such transfers rely on an adequacy decision where one exists, or on the European Commission’s standard contractual clauses and their UK and Serbian equivalents.
We keep no logs of visits to this website; our service providers keep request data only for the short period they need for security and operation. We keep your messages as long as we need them to answer you and to manage your access, and delete them at the latest 24 months after our last exchange, unless the law requires us to keep them longer.
We do not sell or share personal data for advertising, and we do not use it for automated decisions or profiling. If you live in a US state with a consumer privacy law, such as California, you have the right to know what personal information we collect, to correct it, to delete it and to opt out of its sale or sharing, and we will not treat you differently for using these rights. We honour these requests from everyone, wherever they live.
You may lodge a complaint with the data protection authority of the country where you live or work, or with Serbia’s Commissioner for Information of Public Importance and Personal Data Protection, which supervises us. This website is not directed at children under 16, and we do not knowingly collect their personal data.
Your rights
Access, correction and deletion.
Depending on the law that applies to you, you may have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability and to lodge a complaint with a supervisory authority. Privacy contact: contact@xsheet.io.
We update this notice when our practices change; the date at the top shows the latest version.