Privacy Policy
What personal data Xzerro collects, why we collect it, who else processes it, and what you can ask us to do with it.
Last updated 2 September 2026
1. Who we are
Xzerro provides a ballistic calculator and zeroing-target generator at xzerro.com and through the Xzerro mobile and watch apps. We are the controller of the personal data described here. Contact: support@xzerro.com.
2. What we collect
Data you give us
- Account: email address, name, password (stored only as a hash), and an optional avatar image. If you sign in with Google we receive your email, name, and profile picture from Google.
- Firearm and ballistic data: firearm names, cartridge and load details, sight height, turret click value, zero range, atmospheric values, and the calculations and zero confirmations you save.
- Sight-height photographs: if you use the measure-from-photo feature, the images you upload of your rifle.
- Organizations: organization names, member lists, roles, and invitations you create or accept.
- Enterprise enquiries: if you submit the Contact Sales form, your name, email, phone number, organization name, and your estimated firearm and user counts.
- Support correspondence: whatever you send us.
Data we generate or receive automatically
- Subscription state:plan, status, current period end, and which firearms you activated in a period. Card details go to Stripe, not to us; we store only Stripe’s customer and subscription identifiers.
- Session data: authentication session records and the cookies needed to keep you signed in.
- Server logs: request metadata such as IP address, timestamp, and user agent, kept for security and debugging.
- Crash reports (mobile): if crash reporting is enabled in a build, diagnostic data about a crash. This is off unless a reporting key is configured for that build.
We do not use advertising trackers, and we do not sell your personal data.
3. Why we use it
| Purpose | Lawful basis |
|---|---|
| Create and secure your account; keep you signed in | Performance of a contract |
| Run ballistic calculations and store your firearms and results | Performance of a contract |
| Measure sight height from a photograph you upload | Performance of a contract (at your request) |
| Take payment and manage subscriptions and slot limits | Performance of a contract |
| Send service email — verification, password reset, receipts, period rollover | Performance of a contract |
| Respond to an Enterprise pricing enquiry | Legitimate interests / steps prior to a contract |
| Keep the service secure, prevent abuse, fix faults | Legitimate interests |
| Meet accounting, tax, and other legal obligations | Legal obligation |
4. Sight-height photographs and AI processing
The measure-from-photo feature works in two stages: computer-vision code we run ourselves detects reference markers and measures distances, and an image-understanding model provided by Anthropiclocates the scope in the frame. Your photograph is therefore sent to Anthropic’s API for that step.
Anthropic processes the image to return a result to us and, per its API terms, does not use it to train its models. We keep the image only as long as needed to produce and let you review the measurement. If you would rather not have a photograph processed this way, do not use the measure-from-photo feature — sight height can always be entered by hand.
5. Who else processes your data
We use the following processors. Each receives only what it needs for its function.
| Processor | Function | Data involved |
|---|---|---|
| Vercel | Application hosting | Request data, server logs |
| MongoDB Atlas | Database | Account, firearm, organization, subscription records |
| Stripe | Payments and billing | Name, email, payment details, subscription state |
| SendGrid | Transactional email | Email address, message content |
| Anthropic | Scope detection in uploaded photos | The photograph you upload |
| Optional sign-in | Email, name, profile picture | |
| Sentry | Mobile crash reporting, when enabled for a build | Crash diagnostics |
Some of these operate outside your country, including in the United States. Where personal data is transferred out of the UK/EEA we rely on the transfer mechanisms offered by the provider, such as standard contractual clauses.
6. Sharing within an organization
If you join an organization, firearms owned by that organization are visible to its members according to their role, and the owner and admins can see the member list. Your personal firearms stay private to your personal account. Leaving an organization does not remove firearms that the organization owns.
7. How long we keep it
- Account and firearm data: for as long as your account exists.
- Uploaded photographs: only as long as needed for the measurement and your review of it.
- Billing records: as long as tax and accounting law requires, typically several years, even after account deletion.
- Server logs: a short rolling window for security and debugging.
- Enterprise enquiries: as long as needed to deal with the enquiry and for a reasonable period afterwards.
8. Your rights
Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to its processing, withdraw consent, and receive it in a portable form. You may also have the right to complain to your data-protection authority.
You can change your account details and delete your account from Settings. For anything else, write to support@xzerro.com and we will respond within the period the applicable law allows. Deleting your account removes your account record, firearms, calculations, and sessions; billing records are retained where the law requires.
9. Cookies
We use only the cookies needed to run the service — principally your authentication session and security tokens. We do not use advertising or cross-site tracking cookies. Because these cookies are strictly necessary, they do not require consent; if we later add analytics, we will ask first and update this policy.
10. Security
Passwords are stored only as hashes, traffic is encrypted in transit, and access to production data is restricted. Every request for a firearm or organization is checked against the account that owns it. No system is perfectly secure, so please use a strong, unique password and tell us at support@xzerro.com if you suspect a problem.
11. Children
Xzerro is not intended for children. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.
12. Changes to this policy
We may update this policy. Material changes will be reflected in the “last updated” date above and, where appropriate, notified in the app or by email.
13. Contact
Privacy questions or requests: support@xzerro.com. See also our Terms of Service.