Privacy Policy
We collect the minimum we need, never sell your data, and let you see, correct or delete it.
1. The short version
We collect the minimum we need to run xigzag, we never sell your personal data, and you can ask to see, correct or delete it. This policy explains the detail. It covers account holders (people who build sites with xigzag) and visitors to xigzag.com. The sites you build have their own privacy policies, which you control.
2. What we collect
- Account information — your name, email and login credentials when you sign up.
- Billing information — handled by our payment processor; we store a customer reference and invoice records, not full card numbers.
- Sites and content — the sites, text, images and settings you create on the platform.
- Usage and device data — basic technical information your browser sends (such as IP address and pages viewed) and aggregate counts that help us run and improve the service.
On xigzag.com we use privacy-friendly analytics: no advertising cookies, no third-party trackers, and a daily-rotating, anonymous hash to count unique visits — it can't be linked across days or back to you.
3. How we use it
- To provide, secure and improve the service and host your sites.
- To process payments and send you essential account, billing and security messages.
- To prevent abuse, fraud and security threats, and to comply with the law.
- To respond when you contact us.
We do not sell your personal data, and we don't use the content of your sites to advertise to you.
5. Your rights
You can ask for a copy of your personal data, ask us to correct it, or ask us to delete it. Your sites are exportable at any time. Depending on where you live, you may have additional rights (for example under the GDPR or CCPA), including the right to object to or restrict certain processing. To exercise any right, email privacy@xigzag.com.
6. Keeping and protecting your data
We keep personal data only as long as we need it to provide the service and meet legal obligations, then delete or anonymise it. We protect it with strong, industry-standard safeguards — keeping each site's data separate, protecting anything sensitive you store, and handling outside connections carefully. See our Security & Trust page for what that means for you.
7. International transfers and children
We may process data in countries other than your own; where we do, we use appropriate safeguards. xigzag isn't directed to children, and we don't knowingly collect personal data from children.
8. Changes and contact
We may update this policy; we'll change the date above and, for material changes, take reasonable steps to let you know. Questions or requests: privacy@xigzag.com.