Effective August 29, 2026
Scope
This notice applies to the x=mas2 website, GraphPilot order fulfillment, license administration, and support. It does not replace the privacy notices of Paddle, Microsoft, or other services a customer chooses to use.
GraphPilot product data
GraphPilot is a local-first Windows utility. GraphPilot does not operate an x=mas2 cloud service for customer endpoint datasets and does not automatically upload customer CSV files, hardware-hash data, or other endpoint records to x=mas2. Operators control local files and initiate any Microsoft sign-in or upload action from their own environment.
Website information
When someone visits this website, hosting and security systems may process standard technical information such as IP address, browser and device type, requested pages, timestamps, and referring pages. Where enabled, analytics or advertising services, including Google services, may use cookies or similar technology to help measure site use. Browser settings and any available consent controls can be used to limit optional cookies.
Orders and Paddle
Paddle is the authorized reseller and merchant of record for purchases made through Paddle. Paddle processes payment details, tax information, and checkout data under Paddle's Privacy Policy. x=mas2 may receive purchaser contact information, organization details, product and edition, transaction identifiers, subscription status, and other order information needed for fulfillment, licensing, fraud prevention, refunds, and support. x=mas2 does not receive or store complete payment-card details.
Licensing information
When a customer requests or uses license activation, x=mas2 or its licensing provider may process the purchaser or organization name, named-technician information, edition, license and activation identifiers, a hashed device fingerprint, active-device count, and license issue, expiration, or grace-period status. This metadata is used to enforce the purchased user and device limits, recover activations, and prevent misuse. Licensing records are not intended to include customer CSV files, tenant datasets, Microsoft credentials or tokens, or the content of Microsoft Graph activity.
Support information
We process correspondence and any logs, screenshots, or sample materials a customer chooses to send so we can investigate and respond. Customers should remove passwords, tokens, secrets, and unnecessary personal data before sending support materials.
How information is used
We use information to respond to inquiries, fulfill orders, issue and administer licenses, provide release materials and support, secure and improve the website and product, prevent misuse, process eligible refund requests through Paddle, and meet legal obligations.
Sharing and service providers
Information may be shared with service providers that support payment processing, licensing, website hosting, analytics, email delivery, security, and customer support, or when disclosure is legally required. We require providers to use information for the services they perform. x=mas2 does not sell customer files or endpoint datasets.
Retention and security
Information is retained only as reasonably needed for fulfillment, active licensing, support, security, accounting, tax, dispute resolution, and legal obligations. We use reasonable administrative and technical safeguards, but no storage or transmission method can be guaranteed completely secure.
Your choices and rights
You may ask to access, correct, or delete personal information held by x=mas2, subject to identity verification and legal retention requirements. Paddle account, payment, and transaction requests may need to be handled directly by Paddle. Additional rights may apply based on where you live.
Contact
Privacy questions or requests may be sent to hello@xequalsmassquared.com.