This policy explains how XINGTU TECH PTE. LTD., operating the Xingways brand, handles information in connection with its software products and data services.
1. Information We Collect
We may collect basic business and contact information provided by customers by email, together with limited technical data necessary to operate and support our services.
When you create an API account on this website, we collect the display name you enter and the tenant identifier we issue for that account. Creating an account makes server-side requests to our own onboarding service, as described in section 4. Enquiries still reach us only when you choose to send an email.
We also process technical request records — such as IP address and user agent — through our hosting and network providers, as every website operator does, for security and fault diagnosis. This website does not ask for payment card details.
This website does not use third-party analytics, advertising, or tracking services, and does not set cookies for those purposes. The only cookies it sets are first-party and strictly necessary: your language preference, and the identifier of the account you created.
2. Use of Information
Information is used solely to provide, maintain, and improve our software services and datasets, to communicate with customers, and to comply with legal obligations. We do not sell customer information.
3. Data Protection
We implement reasonable technical and organizational measures to protect information against unauthorized access or disclosure. Access credentials and delivery links are issued individually and are time-limited where technically applicable.
4. Third-Party Services
Payments are processed by third-party payment providers. XINGTU TECH PTE. LTD. does not store or process customer payment information directly.
Account creation involves server-side requests to the processors below. Each receives only what its function requires:
- **Vercel Inc.** — hosting and serving this website. Receives request metadata. - **Cloudflare, Inc.** — network protection in front of our onboarding endpoint. Receives request metadata. - **Stripe** — payment processing on Stripe-hosted pages. Receives the payment details you enter there. - **Our own onboarding service** — issuing the tenant and the API key. Receives the display name you enter.
5. International Data Transfers
As a remote-first company serving international customers, information may be processed in different jurisdictions in accordance with applicable data protection laws.
6. Compliance
We aim to comply with applicable data protection regulations, including the Singapore Personal Data Protection Act (PDPA) and the EU General Data Protection Regulation (GDPR) where relevant.
7. Retention
Business correspondence is retained only as long as necessary for the purposes described above or as required by law.
8. Contact
For privacy-related enquiries, including access and deletion requests, contact privacy@xingways.com.