Privacy Policy
XEO Agent is a desktop app built by Limestone Labs LLC. There are two separate classes of data involved in using the app, and they are handled differently.
Audit data stays on your device
When you run an audit, XEO Agent fetches the HTML of the pages you ask it to check and stores the results — scores, findings, page content, and run history — in a local SQLite database on your computer. Audit data never leaves your device. We do not receive, transmit, or store your audit results, the URLs you audit, or the page content the app reads.
Account and billing data is processed in the cloud
Creating an account and subscribing to Pro involves a second class of data that does leave your device:
- Account email is collected and processed by Amazon Web Services (AWS Cognito) so we can identify your account and issue an entitlement. AWS acts as our identity provider.
- Payment information is processed by Stripe. We never see or store your full card number. Stripe stores your billing details and provides us with customer, subscription, and payment status information. Your Cognito account identifier and email are associated with your Stripe customer record so we can link your subscription to your account.
- Subscription records are stored in AWS and include your Cognito account identifier, Stripe customer and subscription identifiers, subscription status, plan, and renewal date. We use these records only to provide and manage Pro access.
The statement “your data stays on your computer” refers to audit data only. It does not apply to account or billing data processed in the cloud by AWS and Stripe.
What we do not collect
- We do not collect analytics or tracking data about your use of the website.
- We do not use advertising or tracking pixels on this site.
- The desktop app does not send your audit results to us.
Data retention
Audit data persists in your local database until you delete it from within the app or delete the app's local data from your computer. Account data is retained by AWS Cognito for as long as your account exists; you can request deletion by contacting us. Subscription and billing records are retained as needed to provide the service and meet legal, accounting, and fraud-prevention obligations.
Children
XEO Agent is not directed to children under 13 and we do not knowingly collect their data.
Contact
Questions about this policy can be sent to hello@limestonelabs.io.