This page explains exactly what data xCalibre collects, what it doesn't, how long it keeps things, and what you can do about it. No legal fog. If something isn't clear, email us.
The minimum required to run the platform. Nothing more.
These are hard constraints — not aspirational. Enforced by architecture, not just policy.
Data that isn't needed gets deleted, not archived.
| Data type | Retention | Purge trigger |
|---|---|---|
| DM messages | 90 days from last activity in thread | Automatic — thread idle timer |
| Published posts | Until creator deletes | Hard purge within 30 days of deletion request |
| Supporter tier records | Duration of active subscription + 90 days | Purged 90 days after subscription lapses |
| Stripe payment token | 12 months from transaction | Purged on account deletion or 12-month expiry |
| Hashed email | Active account lifetime | Purged on account deletion request |
| Rate-limit IP log | 15-minute rolling window | Automatic — in-memory only, not written to disk |
| Support tickets | 24 months from resolution | Batch-purged quarterly after expiry |
| Anonymous page-view counts | Indefinite (aggregate only) | No user-level data attached; no purge trigger needed |
Two separate systems. Two separate jobs. They do not share identity data with each other.
In plain terms: Stripe knows who paid but not what they read. xCalibre knows what access was granted but not who paid. Neither side can reconstruct the full picture.
You have the right to know what we hold, correct it, export it, and delete it.
Email privacy@xcalibre.io with the subject line "Data export request" and your handle. We'll send a JSON export of everything tied to your account within 14 days.
Most data you can update directly in settings (handle, email hash). For anything you can't self-serve, email us and we'll fix it within 7 days.
"Delete my account" triggers two things: (1) immediate anonymisation — your handle is replaced with a random token so no content traces back to you; (2) hard purge within 30 days — all rows associated with your account ID are deleted from the database. After the purge window, nothing remains. Stripe's records of payment transactions are governed by their retention policy (typically 7 years for tax purposes) — we cannot delete those on your behalf, but they hold no xCalibre handle or username.
You can request we stop processing your data for specific purposes (e.g. aggregate analytics) without deleting your account. Email us and we'll apply a processing flag within 48 hours.
Supporting a creator on xCalibre is designed to leave as small a data footprint as possible.
What Stripe collects: your card number, billing address, and email for the payment receipt. Stripe is required by law to collect this for fraud prevention. Stripe's privacy policy governs this data — xCalibre never receives it.
What xCalibre sees: a Stripe payment token (a random string like tok_1Nabcd…), a tier level (e.g. "Standard"), and a timestamp. That's it. No name, no email, no card data.
What the creator sees: a new supporter count increment and tier revenue. No handle if you chose to fund anonymously. No email. No location. Your existence is known; your identity isn't.
DMs from anonymous supporters: if you message a creator, you're assigned an ephemeral handle (e.g. @anon-7f2a) for that thread. It persists for 90 days then is purged along with the thread. The creator cannot link it to your payment.
Questions, requests, or concerns about this policy: privacy@xcalibre.io. We respond within 5 business days. If you believe we've made an error, say so directly — we'd rather fix it than defend it.