Privacy Policy

Eric Paré Studio inc. (“we”, “us”, or “Xangle”) develops commercial photo and video production software distributed under the Xangle brand. Our principal place of business is in Montreal, Quebec, Canada.

Account and licence data

• Email address — collected at licence purchase, free-tier activation, or trial start. Used to deliver the licence, authenticate sessions, and send transactional emails.
• Licence and plan details — app, tier, billing mode, camera/fixture count, pricing, status, and dates. Stored to enforce entitlements.
• Machine identifier — a hardware fingerprint (hostname + partial ID) sent by the desktop app to bind a licence seat to a device.

Session and login activity

• Login timestamps — date/time of last portal login and last desktop licence authentication, stored per account.
• Session tokens — opaque tokens with expiry dates, stored in an encrypted cookie and in our session store. No IP address or browser fingerprint is stored in sessions.
• Active-user counter — each time an app or plugin checks its licence, we record a one-way hashed version of your account email in a daily/monthly counter, solely to report an aggregate number of active users per product. The hash cannot be reversed back into your email address and is not used to track what you do inside the app.

Payment

• Payment information — processed entirely by Stripe. We do not store credit card numbers, billing addresses, or Stripe customer objects locally. We store only the Stripe subscription ID linked to your email.

Support and diagnostics

• Diagnostics report — collected only when you explicitly submit one from the app. Contains OS summary, GPU summary, connected devices, app version, and compressed logs. Uploaded to Cloudflare R2 under a hashed identifier (not your email in plaintext).
• Free-text details — optional description you add when submitting a diagnostics report (up to 4000 characters).

AI Assistant (optional)

When you submit an Assistant request after accepting the applicable software terms, prompts, limited conversation history, selected document or preset source, relevant editor settings, camera capabilities and geometry, and product documentation may be sent through Xangle Portal to AI providers, currently including Google Gemini. Assistant uses text and structured context rather than uploading underlying images or videos unless a separately disclosed feature requires them. Do not include credentials, secrets, or information you are not authorized to share. Merely opening Assistant does not submit an AI request. We retain request outcome and usage records to generate and validate replies, recover interrupted requests, administer charges, prevent duplicates, provide support, and secure the service.

Marketing (optional)

• Newsletter subscription — if you opt in at checkout, your email and language preference are forwarded to our mailing-list provider. You can unsubscribe at any time.

Platform logs

• HTTP request metadata — IP address, path, status code, user-agent, and timestamp are logged automatically by our hosting platform (Vercel). These logs are transient and retained for a maximum of 1 hour in standard configuration.
• Cloud processing and credits — when you explicitly request cloud processing from a desktop app, selected images and related data are transferred to temporary processing storage and may be processed to create your requested output, including a scene-specific Gaussian Splat. We do not use them to train general-purpose or cross-customer models. We also retain job and credit records such as the license and operation identifiers, file names and dataset identifier, image count, selected training steps and resolution, credits quoted or charged, job status, and processing duration. These records support credit calculation, wallet administration, duplicate prevention, support, and dispute resolution.

• No behavioral analytics or in-app activity profiling. Aggregate active-user counts and the service-specific processing and Assistant usage records described above are retained for their stated operational purposes.
• No images, videos, or media are collected through portal login, account, or license checks alone. If you explicitly start a cloud processing job in a desktop product, the selected content is transferred for that job as described in Section 2.
• No IP address stored in user sessions or login records (only in transient platform logs).
• No browser fingerprinting or device tracking beyond the machine identifier used for licence seat binding.
• No tracking cookies or advertising identifiers.

• Deliver and enforce software licences.
• Process payments and prevent fraud.
• Provide technical support when requested.
• Comply with legal obligations.
• Provide requested AI replies, validate proposed changes, recover interrupted requests, administer usage, and secure Assistant.

• Stripe (payment processing) — subject to Stripe’s privacy policy.
• Postmark (transactional email delivery) — receives the recipient email address to deliver OTP codes, licence confirmations, and trial lifecycle emails.
• Cloudflare (hosting and R2 storage) — diagnostics uploads and temporary cloud processing files use Cloudflare storage. The xanglecs.com website is served via Cloudflare.
• Cloud processing infrastructure — Xangle and its processing and storage providers handle files only as needed to run the cloud operation, deliver results, secure the service, and perform deletion and maintenance.
• Vercel (application hosting) — the portal runs on Vercel, which processes HTTP requests and generates transient platform logs.

We do not sell, rent, or trade personal information.

AI providers: Assistant currently uses Google Gemini. Stable instructions and camera context may be temporarily cached by the provider. Processing may occur outside your country. Provider processing, security logging, retention, and any permitted service-improvement use are subject to its applicable terms and privacy practices. We do not promise immediate deletion from provider systems or that all processing remains in your jurisdiction.

• Account email and licence records: retained as long as the licence is active, plus 12 months after expiry for renewal eligibility.
• Session tokens: expire automatically (1 day for desktop sessions, 90 days for portal family sessions).
• OTP codes: deleted after 5 minutes.
• Diagnostics uploads: deleted within 30 days of support resolution.
• Cloud processing images and outputs: held in temporary processing storage while a job is running and results are being delivered. We request deletion after the desktop app confirms download, or when a job fails or is cancelled. Cleanup may be delayed by technical failures or provider backup and retention systems.
• Cloud credit and job records: retained separately from images for as long as reasonably needed to maintain balances, calculate and audit charges, prevent duplicate operations, provide support, resolve disputes, secure the service, and comply with legal obligations.
• Assistant history: stored locally until reset, expiry when reopened, or settings deletion. Starting a new chat clears active local history, not separate service, billing, or provider records. Portal result records normally expire after seven days and AI usage records after 90 days. Billing and security records may remain as reasonably needed for their purposes or legal obligations; providers apply their own retention practices.
• Platform logs (IP addresses): retained by Vercel for up to 1 hour.
• Purchase records (for tax/legal compliance): retained for 7 years.
• Coupon usage counters: retained indefinitely to prevent re-use.

Under Quebec Law 25 and applicable privacy legislation, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information (subject to legal retention requirements).
• Withdraw consent for optional processing (e.g., newsletter).

We use industry-standard encryption for data in transit (TLS) and at rest. Access to personal data is restricted to authorized personnel on a need-to-know basis.

Our software is intended for professional use. We do not knowingly collect personal information from anyone under 16.

We may update this policy from time to time. Material changes will be communicated via the email address associated with your licence. The effective date at the top of this page indicates the latest revision.

For privacy inquiries, data access requests, or complaints:

Eric Paré Studio inc.
Montreal, Quebec, Canada
Email: privacy@xangle.net