We collect information you provide directly, including your name, email address, company name, and any project data you enter into our estimation tools. We also collect usage data such as pages visited, tools used, session duration, and IP address.
Categories of personal information collected:
Your data is stored on secure servers. Project estimates and uploaded files are associated with your account and accessible only to you and authorized Ximator administrators. We do not sell your personal information to third parties.
Retention periods: Account data is retained for the duration of your account plus 90 days after deletion. Estimates and project files are deleted within 30 days of account deletion. Log files are retained for up to 12 months.
Blueprints and documents you upload are used solely to generate your estimates. Files are stored securely and are not shared with any third party. You may delete uploaded files at any time from your dashboard.
We use the following cookies and tracking technologies:
ximator_token): An HttpOnly session cookie used to keep you signed in. This cookie does not track you across other websites._ga and _ga_*) that collect anonymized usage data such as pages viewed, session duration, and general geographic region. IP addresses are anonymized. Google's privacy policy is available at policies.google.com/privacy. You may opt out of GA4 tracking by installing the Google Analytics Opt-out Browser Add-on.We do not use advertising cookies, retargeting pixels, or cookies that sell your data to advertisers.
We share data with the following third-party service providers solely to operate our platform:
We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.
You may request access to, correction of, or deletion of your personal data at any time by emailing support@ximator.com. Account deletion removes all associated estimates, files, and personal information within 30 days.
If you are a California resident, you have the following rights under the California Consumer Privacy Act (Cal. Civ. Code §1798.100 et seq.):
To exercise any of these rights, email support@ximator.com with "CCPA Request" in the subject line. We will respond within 45 days as required by law.
Nevada residents may opt out of the sale of personal information under Nevada Revised Statutes Chapter 603A. We do not sell personal information; however, you may submit a verified request to support@ximator.com.
We use industry-standard security practices including bcrypt password hashing, JWT authentication tokens stored in HttpOnly cookies, HTTPS/TLS encryption, rate limiting on authentication endpoints, and security headers (HSTS, X-Frame-Options, CSP).
Ximator is intended for business users aged 18 and older. We do not knowingly collect information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has provided us personal information, contact us immediately at support@ximator.com.
We may update this policy periodically. We will notify registered users of significant changes via email. Continued use of Ximator after changes constitutes acceptance of the updated policy. The date at the top of this page reflects the most recent update.
For privacy questions or to exercise your rights, contact us at: