Privacy Policy
Last updated: 12 November 2026
This Privacy Policy describes how Xaldro ("we", "us", "our") collects, uses, and protects personal data when you use Xaldro, an app that posts Webflow Ecommerce orders and refunds to Xero and QuickBooks Online ("Service"), and when you visit https://xaldro.com.
Xaldro is independent. It is not affiliated with, endorsed or sponsored by Webflow, Xero or Intuit.
1. Who is responsible
Xaldro, a registered trade name of a Dutch sole proprietorship (eenmanszaak), Beeklaan 38, 4702JL Roosendaal, Netherlands. KvK 97282812, VAT NL005260736B22.
Email: hello@xaldro.com Data requests: dpa@xaldro.com
For your own account data (your email, your team, your billing) we are the controller. For the order data of your store's customers, you are the controller and we process it on your behalf under our Data Processing Agreement (https://xaldro.com/legal/dpa).
2. What we collect and store
| Category | What exactly | Lawful basis (GDPR) |
|---|---|---|
| Account data | Your email address, your Webflow user ID, your plan and subscription status and dates | Contract performance |
| Team data | Email addresses of teammates you invite, their role and invite status | Contract performance |
| Site data | Webflow site IDs and names, the shop's default currency and country, your sync rules | Contract performance |
| Order data | Per order: order ID, status, totals (subtotal, tax, shipping, discount, total), currency, the customer's name and email, the country and region of the order address, the order date, and line items (product name, SKU, quantity, unit price, tax). We also keep a reduced copy of the Webflow order record: order ID, status, accepted and refunded dates, amount paid, totals and purchased items. We do NOT store shipping or billing addresses. | Contract performance |
| Sync data | Which orders and refunds were posted, the ID of the document created in your ledger, status and error messages | Contract performance |
| Accounting connection data | Encrypted Xero and QuickBooks access tokens, the organisation or company ID and name, your account mappings | Contract performance |
| Activity log | Actions taken in your account (for example connecting a site or changing a plan), when, by which teammate, with the IP address and browser string of the request | Legitimate interest (security, answering "who did what when") |
| Billing data | Stripe customer and subscription IDs. Payment details are entered on Stripe's page and handled by Stripe; we never see your card. | Contract performance |
| Support data | What you send us by email or through the form at https://xaldro.com/support: your name, email, message and anything you choose to add. The form does not send us your IP address or browser string. | Contract performance or legitimate interest (answering you) |
We do not use analytics, advertising or tracking tools on the website or in the app.
3. How we use it
- To provide the Service: read your Webflow orders, post invoices, payments, credit notes and refunds to the Xero or QuickBooks account you connect, and show you what happened
- To bill you (through Stripe)
- To send service emails: welcome, subscription confirmation, trial ending, a daily summary of sync activity (it names the customers of the orders it lists), reconnect notices, team invites, sign-in links, and the notice that your data will be deleted after an uninstall
- To respond to support requests
- To comply with legal obligations
We do NOT sell your data. We do NOT use your data for advertising. We do NOT use your data to train AI models.
4. Sub-processors and recipients
| Party | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Server hosting (application and database) | EU (Nuremberg, Germany) |
| Cloudflare, Inc. | DNS, and forwarding of email sent to xaldro.com addresses. Website and app traffic does not pass through Cloudflare. | Global |
| Resend, Inc. | Sending service emails, including the daily summary that contains customer names | EU region selected |
| Stripe Payments Europe Ltd. | Subscription billing and payments | EU (Ireland) |
| Storage of encrypted database backups. Google holds only encrypted files and cannot read them. | Global | |
| Functional Software, Inc. (Sentry) | Error reports from our servers: the error message and where in our code it happened. Before sending we remove email addresses, sign-in codes and tokens, cookies, request headers and bodies, and user identifiers, so visitors' IP addresses are never sent. Kept 30 days. | EU (Germany) |
| Webflow, Inc. | Source of the order data we process on your behalf | US (with EU adequacy mechanism) |
| Xero Limited | The accounting system you choose to post to (recipient of your order data) | EU / global |
| Intuit Inc. (QuickBooks) | The accounting system you choose to post to (recipient of your order data) | US (with EU adequacy mechanism) |
Fonts on the website and in the app are served by Xaldro itself; your browser does not request them from a third party.
Emails you send us
When you email a xaldro.com address or use a form on xaldro.com, your message passes through Cloudflare, Inc., which forwards mail for our domain, and is delivered to our mailbox at Google (Gmail). To answer faster, we use Claude, an AI assistant made by Anthropic, PBC (United States), to read your message and draft our reply. Anthropic receives your message and the earlier emails in the same conversation, nothing else from your account. A person reads every reply and decides whether to send it; no reply is sent automatically. We use your message only to answer you, and keep it for 2 years (see section 5).
For this correspondence Xaldro is the controller. It is not part of the data we process on your behalf under the Data Processing Agreement, so please do not paste your own customers' personal data into an email to us.
5. Data retention
- Account, site, order, sync and mapping data: kept while your account exists.
- Removing a site in Settings deletes that site and the orders and sync records stored for it. If Webflow does not confirm that Xaldro's webhooks on that site were deleted, we keep that site's Webflow access token for up to 7 days to retry, then delete it.
- Deleting your account (Account dialog, owner only): your account, sites, orders, sync records, refunds, mappings, team, activity log and sign-in links are deleted at once. Your Stripe customer is deleted, which ends the subscription, and our access to Xero and QuickBooks is revoked.
- After an uninstall: when Xaldro loses all access to your Webflow (the app is uninstalled or its access revoked), we email you once and delete your account and its data 30 days later, exactly as above, unless you connect Webflow again before then.
- Invoices, credit notes, contacts, items and payments already posted to your Xero or QuickBooks are your records in your ledger. We do not change or delete them.
- Activity log: kept until the account owner deletes entries or clears the log in the panel, or until the account is deleted. It is not deleted on a timer.
- Webhook dedupe records (the ID of each Webflow event, kept so an event is not processed twice): deleted after 90 days.
- Sign-in and invite links: single use, valid for 30 minutes (sign-in) or 7 days (team invite); links that were used or have expired are deleted 30 days after they were created.
- Webflow access tokens: forgotten at once when Webflow tells us a token no longer works. We check every stored Webflow token once a day.
- Without an active plan: when your account has had no active plan (trial over and not subscribed, or subscription ended) for 14 days, we remove our order webhooks from your sites and stop receiving order data from Webflow until you subscribe again. Data already stored stays as described above.
- Xero and QuickBooks tokens that the ledger rejects: kept encrypted and marked "needs reconnecting"; we email the owner once. They are replaced when you reconnect and deleted when you remove the connection in Settings or delete the account.
- Backups: the database is copied nightly. Copies are kept 14 days on our server and 30 days as an encrypted copy in Google storage. Deleted data therefore leaves the backups within 30 days.
- Billing records: invoices issued through Stripe stay in our Stripe account for 7 years, as Dutch tax law requires, also after your Xaldro account is deleted.
- Error reports in Sentry: deleted after 30 days.
- Support data: kept 2 years for quality and audit purposes.
6. Your rights (GDPR)
- Access and portability: the account owner can download all data we hold for the account as JSON from the Account dialog (Export your data). The export contains your account, team, mappings, sites, connections (never tokens), orders, line items, sync records, refunds and the activity log, including IP addresses and browser strings.
- Rectification: correct inaccurate data
- Erasure: the account owner can delete the account and its data at once from the Account dialog (Delete account)
- Objection: object to processing based on legitimate interest
- Restriction: limit how we process your data
- Complaint: file a complaint with your local data protection authority (for example the Autoriteit Persoonsgegevens in the Netherlands)
To exercise any right, email dpa@xaldro.com or support@xaldro.com. We respond within 30 days.
If you are a customer of a store that uses Xaldro, the store is the controller of your order data. Please contact the store; we will help it answer your request.
7. International transfers
Where data is transferred outside the EU/EEA, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions. See the DPA for specifics.
8. Security
Stored Webflow, Xero and QuickBooks tokens are encrypted with AES-256-GCM, are used only on our server, and never appear in the app, in API responses or in the export. All connections use HTTPS. Server access is by SSH key only; password login is disabled. Backup copies stored outside our server are encrypted before they leave it.
Vulnerability reports: security@xaldro.com (RFC 9116 security.txt at https://xaldro.com/.well-known/security.txt)
9. Cookies and browser storage
We set two cookies, both strictly necessary, and no analytics, advertising or tracking cookies.
| Cookie | Purpose | Lifetime |
|---|---|---|
xaldro_session |
Keeps you signed in to the app (httpOnly, signed) | 30 days, or until you sign out |
xaldro_wf_oauth |
Protects the "Connect Webflow" sign-in against forgery (httpOnly, single use) | 10 minutes |
The website and the app also remember your light or dark theme choice in your browser's local storage. It never leaves your browser.
Stripe sets its own cookies on its checkout and billing pages; see Stripe's privacy policy.
10. Children
The Service is not directed at children under 16. We do not knowingly collect data from children.
11. Changes
Material changes to this policy will be communicated via email at least 30 days in advance.
12. Contact
General privacy questions: hello@xaldro.com GDPR data requests and the DPA: dpa@xaldro.com Support: support@xaldro.com