Legal

Privacy

Draft · last updated

What we collect

  • Your account: your email address, the name you choose, and the passkeys or sign-in links you use.
  • Purchases: the app, price, discount, time and status of each order. Square handles your card; AppsXi never sees the card number. We keep a one-way hash of the card fingerprint Square gives us, to spot one card used on many accounts.
  • Licenses: your licenses, and for each computer that activates one, a one-way hash of a device id and the device name the app sends.
  • Downloads: which app and version you downloaded, your platform, and a one-way hash of your IP address that changes every day. We do not store your IP address itself. When you are signed in, your account also keeps which apps you downloaded and when, so you can review them.
  • Checkout safety: the same daily IP hash and your browser's user agent on each order, and, when it is turned on, a Cloudflare check that you are not a bot.
  • Messages you write: support conversations with developers, reviews, reports and maintainer requests.
  • AppsXi Desktop usage (whether you keep using the apps you installed) only if you turn on usage sharing; it is off by default.
  • What an app stores through AppsXi's Backend Kit for its developer, if the app uses it: for example its settings and crash reports.
  • No advertising trackers and no third-party analytics. We do not sell personal information.

Who sees what

  • The developer of an app you buy is the seller. They see your email address and the order and license, so they can support you and keep their records. If they connect their own license server, it gets the same.
  • In support conversations, the developer sees your name and whether you own or are trying their app, not your email address.
  • Apps you sign in to with Sign in with AppsXi get an id for you that is different for every app, not your email address.
  • Services that run AppsXi for us: Square (payments), Supabase (database and sign-in), Vercel (hosting), Brevo (email), Cloudflare (the bot check at checkout), OpenRouter (AI search: only the words of a long search are sent, nothing about you), and GitHub (open source downloads come straight from GitHub, under GitHub's own privacy statement).

Cookies and storage

  • Sign-in cookies that keep you signed in.
  • axi_age: that you confirmed you are 17 or 18 or older, for listings with a Mature rating. Kept one year; no birthday.
  • axa_…: which affiliate link brought you to an app, so the affiliate can be paid if you buy within 30 days.
  • axd: a random number set when you check out, so repeated payment attempts from one device can be limited. AppsXi stores only a scrambled form of it with your order. Kept one year.
  • Your light or dark theme choice, in your browser's local storage.

Why

To sell and deliver apps and licenses, send receipts and notices you need, stop fraud and abuse, count downloads and sales for the charts, and answer support requests and reports.

Questions

For questions or requests about your data, use Help.