Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information — email address, full name, and password (stored hashed) when you register.
• Billing information — plan, order history, and transaction status. Card and wallet details are handled entirely by our payment processors (Midtrans, Cryptomus); we never see or store your full payment credentials.
• Usage data — API requests, tool usage, request volume against your plan limits, and basic activity logs (e.g. login times, client ID changes) used for abuse prevention and support.
• Technical data — IP address, browser/user-agent, and similar metadata collected automatically for security, fraud prevention, and diagnostics.

2. How We Use Your Information

• To provide, operate, and maintain the Service, including authenticating your account and enforcing plan limits.
• To process payments and deliver redeem codes / API keys after a successful order.
• To communicate with you about your account, orders, or support requests.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To improve the Service based on aggregate, non-identifying usage patterns.

We do not sell your personal information to third parties.

3. Data Sharing

We share data only where necessary to operate the Service:

• Payment processors (Midtrans, Cryptomus) to process transactions.
• Infrastructure providers hosting our servers and databases.
• Legal compliance — if required to do so by law, or to protect the rights, property, or safety of xReverseLabs, our users, or the public.

4. Nature of Our Service & Third-Party Data

Our tools are designed to look up and process publicly available information (such as domain, DNS, and WHOIS records). We do not control what public data exists about a given target, and we are not responsible for the accuracy of third-party public records returned by our tools. You are solely responsible for using this information lawfully — see our Terms of Service for acceptable use.

5. Data Retention

We retain account and billing data for as long as your account is active, and for a reasonable period afterward to comply with legal, tax, and fraud-prevention obligations. Usage/activity logs are retained for a limited period for security and abuse-prevention purposes.

6. Cookies & Sessions

We use a session cookie to keep you signed in to the client area. We do not use third-party advertising or tracking cookies. Some pages embed reCAPTCHA to prevent automated abuse, which is subject to Google's own privacy policy.

7. Security

We apply reasonable technical and organizational measures to protect your data, including encrypted transport (HTTPS), hashed passwords, and access controls on administrative functions. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated personal data.
• Object to or restrict certain processing of your data.

To exercise any of these rights, contact us via the channels listed below.

9. Children's Privacy

The Service is not directed at individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.

11. Contact Us

Questions about this Privacy Policy or your data can be sent via Telegram or through our client area.