LEGAL / PRIVACY PRIVACY POLICY
© 2026 xTAK PROJECT
xTAK / Privacy Policy

Privacy
Policy.

This Privacy Policy explains what personal information the xTAK Project (operated by Altay Corporation, "xTAK," "we") collects when you use xtak.ai and our software and services, why we collect it, and your choices. xTAK is built to be self-hosted and privacy-respecting: we collect the minimum needed to sell, license, deliver, and support the software.

1. Information we collect

CategoryExamplesWhy
Order & contactEmail address; purchase details, quantities, and receiptsTo process your order, issue your license, deliver downloads, and contact you about your purchase
PaymentHandled by Stripe; we receive confirmation and limited details (e.g., last4, country) but not your full card numberTo take payment and manage subscriptions
License & activationLicense certificate identifiers; a device hardware ID you submit to activate; download-access tokensTo issue and verify licenses and to gate downloads to entitled accounts
SupportMessages you send us and their contentsTo answer questions and provide support
Server logsIP address, request time, page/endpoint, user agent (standard web-server logs)Security, abuse prevention, and reliability

We do not use third-party advertising or cross-site tracking, and the public site does not run third-party analytics or advertising cookies. We do not knowingly collect information from children under 16.

2. How we use information

To provide, license, deliver, and support the software; to process payments and manage subscriptions; to send you transactional messages (order confirmations, license certificates, download codes, and service or security notices); to operate, secure, and improve the site and services; and to comply with legal obligations. We rely on the necessity of performing our contract with you, our legitimate interests in running and securing our business, your consent where required, and our legal obligations.

3. When we share information

We share personal information only with service providers who process it on our behalf, and only as needed:

We do not sell or rent your personal information, and we do not "share" it for cross-context behavioral advertising. We may disclose information if required by law or to protect our rights, users, or the public, and in connection with a merger, acquisition, or asset sale (with notice where required).

4. Data retention

We keep order, license, and subscription records for as long as needed to provide the service, honor entitlements, and meet legal, tax, and accounting requirements, then delete or anonymize them. Server logs are kept for a limited period for security and reliability. Support messages are kept as long as needed to assist you and for our records.

5. Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit (HTTPS), access controls, and least-privilege practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

6. Where we process information

We operate in the United States and process personal information there. Our services are directed to customers in the United States.

7. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any right, contact us through our contact form. We will not discriminate against you for exercising these rights.

California (CCPA/CPRA). California residents may request access to, deletion of, and correction of personal information, and may opt out of "sale" or "sharing" — we do not sell or share personal information as those terms are defined.

8. Cookies

The public site uses only what is necessary to function and does not set third-party advertising or analytics cookies. Any session or access-control mechanism used on a gated area is strictly necessary.

9. Changes to this policy

We may update this policy from time to time; we will update the "last updated" date and, for material changes, provide additional notice where appropriate.

10. Contact

Privacy questions or requests: use our contact form, or write to Altay Corporation, 1920 Hillhurst Ave, Suite 290, Los Angeles, CA 90027.

Effective / last updated: 2026-07-06