Privacy Policy
Short version. The BigXL desktop application makes no network calls and sends us nothing. Not your files, not your file names, not a count of how often you open it. This website uses cookieless analytics, sets no cookies, and stores only what is needed to deliver a licence key you have paid for and to answer a message you have sent us.
1. Who we are
This site and the BigXL application are operated by BigXL Software (“we”, “us”), Pune, Maharashtra, India. For anything in this policy, write to privacy@bigxl.app.
2. The desktop application
BigXL runs entirely on your computer.
- It makes no network requests. There is no telemetry, no crash reporting, no update ping, no analytics, and no account.
- Your CSV files, their contents, their names and their locations are never transmitted anywhere. They are read from your disk by the application and nothing else.
- The plain English assistant runs a language model that ships inside the application and executes on your own hardware. Your questions and your data are not sent to us or to any third party model provider.
- Your licence key, your trial dates and your saved sessions are stored in files on your own machine.
We therefore hold no personal data from your use of the application, because none reaches us.
If a future version ever needs to make a network request, it will ask you first and it will be off by default.
3. This website
Analytics. We use Cloudflare Web Analytics. It sets no cookies, does not fingerprint your browser, does not store your IP address, and cannot follow you to other sites. We see aggregate counts: pages viewed, referring sites, countries, and browser families. We cannot identify you from it.
Cookies. This site sets no cookies and uses no local storage for tracking. There is no consent banner because there is nothing to consent to. The only cookie the system can issue is a session cookie on our own private administration pages, which only we can log into.
Server logs. Our host, Cloudflare, processes request data including IP addresses in order to serve and protect the site. We do not retain those logs ourselves and we do not use them for analytics.
4. What we store, and why
| Data | Why we hold it | Legal basis | Kept for |
|---|---|---|---|
| Your email address, when you buy | To send your licence key and to resend it when you ask | Performance of a contract | Life of the licence, plus 8 years where tax law requires the record |
| Your machine identifier, when you activate | A paid key is issued against one machine. Without it we cannot issue or reissue your key | Performance of a contract | Life of the licence |
| Your licence key | So we can send it again when the email is lost, without minting a new one | Performance of a contract | Life of the licence |
| A support message or feature request you send | To reply to you and to decide what to build | Legitimate interest in supporting our own product | 24 months |
| Order and payment records | Tax, accounting and refunds | Legal obligation | As tax law requires |
We do not hold your card details at any point. See section 5.
We do not sell, rent or share personal data for advertising. We do not build profiles and we run no automated decision making.
5. Who processes data for us
| Processor | What they do | Where |
|---|---|---|
| Lemon Squeezy | Takes the payment as Merchant of Record. They are the seller of record, they collect and remit sales tax and VAT, and they hold the payment details. We never see your card. | United States |
| Cloudflare | Hosts this site, stores licence and support records, provides cookieless analytics | Global edge network |
| Resend | Delivers transactional email such as your licence key | United States |
| GitHub | Hosts the installer downloads | United States |
Transfers outside your country are covered by those providers’ standard contractual clauses and equivalent safeguards.
6. Your rights
Wherever you live, you may ask us to:
- tell you what we hold about you and give you a copy
- correct anything wrong
- delete what we hold, subject to records we are legally required to keep
- export your data in a portable form
- object to or restrict a particular use
- withdraw consent where consent was the basis
Write to privacy@bigxl.app. We will reply within 30 days and we will not charge you. If you are in the UK or EU and you are not satisfied, you may complain to your national data protection authority.
Deleting your licence record means we can no longer reissue your key if your machine dies, so we will say so before we do it.
7. Children
BigXL is a tool for work and is not directed at children. We do not knowingly collect data from anyone under 16.
8. Security
Licence and support records are held in an encrypted database, reachable only by us and only over HTTPS. The key that signs licences is held offline in a password manager and is not in our source code. If a breach ever affects your data, we will tell you and the relevant authority within 72 hours.
9. Changes
We will post any change here and move the date at the top. If a change is material, buyers will get an email.
Last updated 17 September 2026.