Privacy Policy

This Privacy Policy explains how Pracxam Ltd, a company registered in New Zealand ("we", "us", "our"), which operates xametric.com and the Xametric service (the "Service"), collects, uses, stores and shares personal information.

We are committed to handling personal information in accordance with the New Zealand Privacy Act 2020. For our users in Australia, we also have regard to the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

If you have any questions about this policy or your personal information, contact us at service@xametric.com.

1. Information we collect

We collect only the information we need to run the Service:

• Account information — the email address and password you provide when you create an account. Passwords are stored in hashed form by our authentication provider; we never see or store your password in plain text.
• Payment information — when you subscribe, your payment is processed by Stripe. Card details are entered directly with Stripe and are not stored on, or accessible to, Xametric. We retain only limited billing records (such as your subscription status, plan, and a Stripe customer reference) needed to manage your access.
• Service usage — basic records needed to operate your account, such as which question banks you have access to and your subscription history.
• Technical and access data — standard server and access logs generated by our hosting and database providers (for example, IP address, browser type, and timestamps) used for security, troubleshooting and reliability.

We do not use analytics tools, advertising trackers, or third-party marketing services, and we do not send marketing email.

2. How we use your information

We use personal information to:

• create and manage your account and provide access to the Service;
• process subscription payments and prevent duplicate or fraudulent charges (via Stripe);
• send transactional communications only — for example sign-up confirmation, password resets, payment receipts and essential service notices;
• keep the Service secure, diagnose problems, and maintain reliability;
• comply with our legal obligations.

We do not sell your personal information, and we do not use it for advertising or marketing.

3. Cookies

The Service uses only essential cookies required for it to function — for example, to keep you signed in and to remember your region for currency display. We do not use analytics or advertising cookies.

4. Who we share information with

We share personal information only with the service providers that operate the Service on our behalf ("processors"), and only as needed:

• Stripe — payment processing and subscription billing.
• Supabase — authentication and database hosting. Our database is hosted in the Singapore region, which means your account information is stored outside New Zealand and Australia.
• Vercel — application hosting and content delivery.

These providers process information under their own terms and security practices. We may also disclose information where required by law, or to protect our legal rights or the safety of users.

Because some of our providers store or process data outside New Zealand and Australia, your information may be transferred to and held in other countries. We take reasonable steps to use reputable providers with appropriate security standards.

5. Children and young people

The Service is designed for students roughly aged 10 to 17, and minors are able to create their own accounts.

We collect as little information from young people as possible (an email address to create an account, plus subscription records if a paid plan is purchased). We do not knowingly collect more personal information from a child than is necessary to provide the Service, and we do not use children's information for marketing or profiling.

We strongly encourage a parent or guardian to be involved in a young person's use of Xametric, including setting up and overseeing the account and managing any subscription and payment.

A parent or guardian may contact us at service@xametric.com at any time to access, correct, or request deletion of their child's account and personal information, and we will act on reasonable requests.

6. How we store and protect information

We rely on the security measures of our providers (Stripe, Supabase, Vercel), including encrypted connections and hashed password storage. While no system is perfectly secure, we take reasonable steps to protect personal information against loss, misuse and unauthorised access.

7. How long we keep information

We keep account and billing information for as long as your account is active, and for a reasonable period afterwards to meet legal, tax and record-keeping obligations. You may ask us to delete your account and associated personal information (subject to records we are required to retain).

8. Your rights

You have the right to:

• access the personal information we hold about you;
• request correction of information that is inaccurate;
• request deletion of your account and personal information, subject to legal retention requirements.

To exercise any of these, email service@xametric.com. We will respond within a reasonable time and, where required, in line with the Privacy Act 2020 (NZ) or the Australian Privacy Principles.

9. Complaints

If you are concerned about how we have handled your personal information, please contact us first at service@xametric.com so we can try to resolve it. You also have the right to complain to:

• New Zealand — the Office of the Privacy Commissioner (privacy.org.nz); or
• Australia — the Office of the Australian Information Commissioner (oaic.gov.au).

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be communicated through the Service where practicable.

11. Contact

Pracxam Ltd
Registered in New Zealand
Email: service@xametric.com