Privacy Policy

1. Introduction

XCornerstone ("we," "our," or "us"), operated by XCorners Contractor, Kigali, Rwanda, is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit xcornerstone.com or purchase architecture plans through our marketplace.

2. Information We Collect

We collect the following categories of personal information:

• Account information: full name, email address, and password when you register.
• Transaction data: payment method, mobile money number, amount, and order history.
• Usage data: pages visited, plans viewed, search queries, and time on site.
• Device information: IP address, browser type, and device identifiers.
• Communications: messages sent via our contact form or customer support.

3. How We Use Your Information

We use the information we collect to:

• Process your purchases and deliver plan files after payment.
• Send order confirmations and download links to your email.
• Respond to customer support enquiries.
• Improve our platform, fix bugs, and develop new features.
• Send marketing communications if you have opted in (you may opt out at any time).
• Prevent fraud and ensure platform security.
• Comply with Rwandan law and legal obligations.

4. Payment Processing

Payments are processed through Paypack, a licensed payment service provider in Rwanda, and via MTN Mobile Money and Airtel Money. We do not store full mobile money credentials on our servers. Your payment data is encrypted and handled according to the payment processors' own security standards.

5. Sharing Your Information

We do not sell your personal information. We may share your data with:

• Plan architects/sellers, to fulfil your order (name and contact details only).
• Supabase, our database and authentication provider, hosted on secure servers.
• Resend, our email delivery service for order confirmations.
• Law enforcement, if required by Rwandan law or to protect our rights.

6. Data Retention

We retain your account and transaction data for as long as your account is active, and for a minimum of 5 years after your last transaction to meet legal and accounting obligations. You may request deletion of your account by contacting us at admin@xcornerstone.com.

7. Your Rights

Under applicable Rwandan data protection law, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your account and personal data.
• Objection: object to certain processing activities.
• Portability: request your data in a portable format.

To exercise these rights, email us at admin@xcornerstone.com.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. You can control cookies through your browser settings, but disabling essential cookies may affect your ability to log in.

9. Security

We use industry-standard security measures including HTTPS encryption, bcrypt password hashing, Row Level Security (RLS) in our database, and Supabase's secure authentication infrastructure. However, no method of transmission over the internet is 100% secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email. The "Last updated" date at the top of this page will always reflect the most recent version.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us: