Privacy Policy

1. Information we collect

Account information

When you create an account we collect your name, email address, and authentication credentials. We use third-party authentication providers and do not store passwords directly.

Case and document information

To guide you through renunciation, we collect the information you enter into the platform: nationality, residency, embassy appointment details, key dates, uploaded supporting documents, and notes. You decide what to share with connected professionals.

Usage data

We automatically collect technical information when you access the platform — IP address, browser type, operating system, referring URLs, pages visited, and timestamps — to operate the service and diagnose issues.

2. How we use your information

• Provide, operate, and maintain the Renounce Right platform
• Track your renunciation progress and surface relevant checklists, alerts, and next steps
• Process your subscription and manage your account
• Facilitate secure collaboration with professionals you authorize
• Send service-related communications, including updates and security alerts
• Improve the platform based on aggregated usage patterns
• Comply with legal obligations and enforce our terms of service

3. Information sharing

We do not sell your personal information. We share information only in these limited circumstances:

• Authorized professionals: When you explicitly grant access to an immigration attorney, tax professional, or other advisor, they can view what you have shared with them.
• Service providers: We use third-party services for hosting, authentication, payment processing, and analytics. They are contractually obligated to protect your data.
• Legal requirements: We may disclose information when required by law, regulation, legal process, or governmental request.
• Business transfers: Your information may transfer as part of a merger, acquisition, or sale of assets.

4. Data security

We use industry-standard safeguards: TLS in transit, encryption at rest, sensitive identifiers encrypted at the column level, role-based access through Better Auth with optional 2FA, and regular security review. See our Security page for more detail.

No method of electronic transmission or storage is completely secure, so we cannot guarantee absolute security.

5. Cookies and tracking

We use essential cookies to maintain your session and authentication state. We may also use analytics cookies to understand how the platform is used. You can control cookie preferences in your browser, though disabling essential cookies may prevent Renounce Right from functioning.

6. Your rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your account and associated data.
• Export — request a machine-readable export of your data.
• Objection — object to certain processing activities.

To exercise these rights, email support@xcapesuite.com. We respond within 30 days.

7. Data retention

We retain your account and case data as long as your account is active or as needed to provide the service. If you delete your account, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as resolving disputes.

8. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy and updating the "Last updated" date. Continued use after changes constitutes acceptance of the revised policy.

9. Contact

Questions about this Privacy Policy? Email support@xcapesuite.com.