Privacy Policy

Who we are

Xsync is a timetable synchronization service operated by Intellix Labs. We connect your WebUntis university timetable to Google Calendar.

Data we collect

To provide the Xsync service, we collect and store:

• Google Account: your email address, name, and profile picture from Google OAuth.
• WebUntis Credentials: your WebUntis username and access key, encrypted at rest using AES-256-GCM.
• Timetable Data: your class schedule — including subjects, dates, times, rooms, and lecturers — fetched from WebUntis on your behalf.
• Google Calendar Tokens: OAuth refresh tokens used to create and manage calendar events in your Google Calendar.
• Sync Logs: records of sync activity, including event counts and any errors encountered.
• Payment Information: your Paystack subscription status and customer code. We do not store your card details — Paystack handles all payment processing.

How we use your data

All collected data is used solely to provide and maintain the Xsync service — we sync your timetable to Google Calendar, nothing else. We do not sell, rent, or share your data for marketing or advertising purposes.

Data storage and security

Your WebUntis credentials are encrypted at rest using AES-256-GCM encryption. All data in transit is protected by HTTPS. Data is stored in a PostgreSQL database hosted on our infrastructure.

Third-party services

Xsync relies on the following third-party services to function:

• Supabase — authentication infrastructure.
• Google Calendar API — calendar event creation and management.
• Paystack — payment processing.

Each of these services has its own privacy policy governing how they handle your data.

No analytics or tracking

We do not use any analytics, tracking pixels, or advertising services. We keep no logs of your browsing activity on Xsync beyond standard web server access logs.

Cookies

Xsync uses session cookies managed by Supabase Auth for authentication purposes only. No tracking or advertising cookies are used.

Data retention

We retain your data for as long as your account is active. If you delete your account, your data will be removed from our systems within 30 days.

Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. We will respond within 30 days.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or through the Xsync application.

Contact

Intellix Labs
Email: support@intellixlabs.co.za