xCaptcha logo
Contact sales Sign In Sign Up

xCaptcha Privacy Policy

  • 1. Privacy Policy

    The entities of the xCaptcha group (“xCaptcha,” “we/us/our”) are committed to protecting the privacy of our customers and users (“you/your”) who visit our websites (including
    https://xCaptcha.com, https://app.xCaptcha.com, and any other sites we operate) and use services available through our online platform (the “Websites”).
    This Privacy Policy describes how we collect, use, and share personal information when you visit or interact with our Websites.
    Further notices highlighting specific uses of your information, along with opt-in or opt-out options, may be provided when we collect your data.
    Our Websites may contain links to third-party websites. These have their own privacy policies, and we are not responsible for their practices. Please review their policies before submitting any personal information.

    This Privacy Policy explains:

    • What personal information we collect;
    • How we use your personal information;
    • How we protect it;
    • Your rights and how to contact us;
    • Our Cookies Policy;
    • How we make updates to this Privacy Policy.

  • 2. Information We Collect (as Data Controller)

    We collect and process some or all of the following personal information:

    • Information you provide — such as your name, email, phone number, country, and company details when you fill out forms on our Websites.
    • Correspondence — we may retain records of communications with you.
    • Survey responses — information you provide when participating in research surveys.
    • Website and communication usage — including IP address, browser type, operating system, access times, referring URLs, and behavior on the Websites, as well as email open and click data.

    xCaptcha Protect and Google Ads: Customers can connect xCaptcha Protect with their Google Ads account via the Google API. xCaptcha does not share or transfer Google data to third parties.
    Processing follows the Google API Services User Data Policy, including Limited Use requirements.

  • 3. How We Use Your Personal Data

    We use your personal information for the following purposes:

    • To communicate and operate our business — responding to demo requests, contact forms, event registrations, partnership inquiries, or job applications. Legal basis: Contract performance; legitimate interests.
    • To provide access to restricted areas — enabling account creation and Dashboard access. Legal basis: Contract performance; legitimate interests.
    • For marketing — sending updates, offers, or event invitations related to xCaptcha or its partners, always with an option to unsubscribe. Legal basis: Consent; legitimate interests.
    • For research and development — improving our products and understanding customer needs. Legal basis: Legitimate interests.
    • To personalize user experience — analyzing usage data to tailor interactions and improve UX. Legal basis: Consent; legitimate interests.
    • To monitor quality and prevent fraud — ensuring compliance and protecting our platform. Legal basis: Legal obligations; legitimate interests.
    • To notify about changes — informing you of updates to products or policies. Legal basis: Legitimate interests.
    • In case of business restructuring — sharing data during mergers, sales, or reorganizations. Legal basis: Legitimate interests.
    • To comply with legal or regulatory duties — sharing data with authorities when required by law. Legal basis: Legal obligations.

  • 4. Transmission, Storage, and Security

    Recipients

    Your personal information may be shared:

    • Within the xCaptcha group, including Sales, IT, or Accounting teams.
    • With authorized service providers (hosting, infrastructure, analytics, CRM, email delivery, support). These providers are contractually bound to maintain confidentiality and data protection.

    Security

    While no online system is entirely immune to intrusion, xCaptcha maintains commercially reasonable safeguards—technical, organizational, and physical—to protect your personal data.

    Data transfers outside the EEA

    If your data is transferred outside the EEA, we use appropriate legal safeguards (e.g., EU-approved contractual clauses).

    Retention

    We keep your personal data only as long as necessary for the purposes described or as required by law. When no longer needed, data is anonymized or securely deleted.

  • 5. Your Rights & Contacting Us

    Marketing

    You can opt out of marketing communications at any time by following the unsubscribe link in our emails or contacting us directly.

    Updating your data

    If your information changes, notify us at [email protected] to update your record. Your rights under GDPR include:

    • Accessing your personal data;
    • Correcting inaccuracies;
    • Requesting deletion;
    • Withdrawing consent (where applicable);
    • Objecting to processing;
    • Restricting processing during a dispute.

    To exercise any of these rights or for legal/contractual questions, contact: [email protected].

    If you’re not satisfied with our response, you may lodge a complaint with your local Data Protection Authority. List of EU Supervisory Authorities

  • 6. Cookies Policy

    We use cookies to improve your experience and analyze traffic. Learn more in our Cookies Policy.

  • 7. Information Processed as Data Processor

    If you visit a third-party website protected by xCaptcha anti-bot technology, xCaptcha may process your data on behalf of that website owner (the controller).
    In such cases:

    • The website owner, not xCaptcha, determines the purposes of processing.
    • xCaptcha processes data solely to deliver anti-fraud and bot-detection services.
    • xCaptcha never builds user profiles, and retains data only as long as needed to perform security functions (maximum 30 days).

  • 8. Policy Updates

    We may update this Privacy and Cookies Policy to reflect new features or legal requirements. The latest version will always be available at https://xCaptcha.com/privacy-policy.
    If changes are significant, we will notify users clearly on our Websites.