Privacy Policy

Effective date: April 19, 2026

XPSLab ("we", "our", "us") operates the web application at app.xpslab.com. This Privacy Policy describes how we collect, use, and protect your information when you use our service.

1. Information We Collect

Account information. When you create an account we collect your email address and, if you sign in with Google, your name and profile picture as provided by Google.

Profile information. You may optionally set a display name and choose an avatar within the application.

Project data. XPS spectra, fitting parameters, quantification results, and other scientific data you upload or create are stored on our servers so you can access them across devices.

Usage data. We use Google Analytics to collect anonymous usage statistics such as page views, feature usage, and session duration. No personally identifiable information is sent to Google Analytics.

2. How We Use Your Information

• To provide, maintain, and improve the XPSLab service
• To authenticate your identity and secure your account
• To synchronize your project data across devices
• To send service-related communications (e.g., password resets)
• To understand how the application is used and improve the user experience

3. Data Storage and Security

Your data is stored on servers provided by DigitalOcean and Supabase. We use industry-standard encryption (TLS/SSL) for data in transit. Passwords are hashed and never stored in plain text. We take reasonable measures to protect your data, but no method of transmission or storage is 100% secure.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only in the following circumstances:

• With service providers who assist in operating our platform (Supabase for authentication and database, DigitalOcean for hosting, Google for analytics and authentication)
• If required by law or to protect our legal rights

5. Your Rights

You may at any time:

• Access and update your profile information within the application
• Export your project data
• Delete your account and all associated data from the Account settings page

6. Cookies

We use essential cookies and local storage to maintain your authentication session and application preferences. We do not use advertising or tracking cookies.

7. Children's Privacy

XPSLab is not directed at children under 13. We do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date.

9. Contact

If you have questions about this Privacy Policy, please contact us at team@contact.xpslab.com.