Last updated October 17, 2026

Privacy notice

This notice explains how Xettl, Inc., a Delaware corporation, handles information on getxettl.com and its private waitlist. Xettl, Inc. is the controller of this information. It does not cover future bank accounts or financial services, which would have separate notices. Joining the waitlist is not an account application.

Who we are and how to contact us

For privacy questions or requests, email privacy@getxettl.com or write to the address below.

Information we collect

The waitlist asks for your name, email address and a written answer about the banking feature you want. Your country or region of origin is optional. We also collect your confirmation that you are at least 18, your optional email-updates choice, agreement to the Website Terms and acknowledgment of this notice. Signup records include a request identifier, the wording versions shown and the time recorded by the signup service.

If you contact us, we receive the contact details and message you send. Website and signup infrastructure may process technical request information, such as IP address, browser information, requested page and time, to deliver the site and protect it against abuse. This is different from advertising or behavioral tracking.

Please do not submit passports, visas, Social Security numbers, bank or card numbers, passwords, or other sensitive details. We do not need them for this waitlist. We do not obtain credit reports or make account or credit decisions through this form.

Why we use information

We use your details to administer the waitlist, confirm a signup, respond to requests, prevent abuse and understand what to build. We do not use waitlist answers for automated decisions with legal or similarly significant effects.

The optional email-updates choice covers the Xettl newsletter, launch announcements, product news and offers. It starts unchecked and is not required to join. We do not treat joining, accepting terms or acknowledging this notice as permission for promotional email.

Where a lawful basis is required, we rely on our legitimate interests in administering a requested waitlist, learning from voluntarily supplied feedback, answering inquiries and protecting the site, balanced against your rights. Optional analytics and promotional subscriptions rely on your consent. We rely on a legal obligation where processing is required by applicable law. You can withdraw consent or object to legitimate-interest processing by contacting us.

Who can receive it

Your answers are private, not a public feed. Xettl’s owner administers the records. We use Netlify for hosting and server functions and Supabase for private signup storage. When email delivery is enabled, Resend receives your email address and the message to send a thank-you email acknowledging your signup. We do not include your country, written answers or legal affirmations in that email. Our sending domain uses Resend’s North Virginia region; provider administration and subprocessors may involve processing elsewhere. We record limited delivery, bounce, complaint and subscription-choice information. Email opens and link clicks are not tracked.

Your email-updates choice takes effect when you submit the form. Checking it subscribes to both the newsletter and launch/product updates; leaving it unchecked subscribes to neither. No email verification step is required. We record this as a form opt-in, not proof that you control the address. Existing separate choices and unsubscribes remain in effect; a duplicate signup cannot reactivate an unsubscribed choice. The thank-you email includes an email-preferences link; you can stop either category or all optional emails without leaving the waitlist or logging in. Opening a preferences link alone does not change a subscription.

We may disclose information where required by law or reasonably necessary to address fraud, security threats or protect legal rights, subject to applicable requirements. We do not sell waitlist information, share it for cross-context behavioral advertising, upload it to advertising audiences or use it to buy advertising.

We may summarize anonymous, combined feedback themes. We will ask separately before publishing an identifiable quotation or attributing an answer to you.

Browser storage and tracking

When configured, we use PostHog and Google Analytics 4 together to understand page visits, referring website domains, product-step clicks and waitlist signup steps. The analytics choice names the configured providers. Neither provider loads until you choose “Allow analytics.” “Reject analytics” leaves the website and waitlist available. You can withdraw collection using “Analytics preferences” in the footer; opening those preferences stops collection while you choose again. We disable analytics when your browser sends Global Privacy Control or Do Not Track. If the provider list changes, we ask again. If analytics is not configured, no analytics choice or collection is enabled.

Our tracking sends no names, emails, countries of origin, written answers, legal or email choices, signup identifiers, query strings or URL fragments. PostHog session recording, automatic interaction capture and person profiles are disabled. Google advertising storage, advertising user-data permission, personalization and Google signals are disabled. We use explicit page and signup events, with automatic enhanced measurement disabled in the Google property. PostHog uses the project's selected US or EU region; Google processes analytics through its infrastructure and subprocessors, which may involve international transfers. Providers process necessary network information to receive and protect requests. Contact us for actual project regions, retention and transfer safeguards.

Your analytics choice, provider scope and date can be stored in local storage under xettl-analytics-consent for up to 180 days. After permission, PostHog uses session storage for pseudonymous identifiers across pages in the same tab. Google Analytics uses first-party _ga cookies for pseudonymous visitor and session measurement; our settings limit them to 30 days without extending expiry on each visit. The two providers use separate identifiers; we do not join them to waitlist records. Withdrawing blocks future collection and clears the identifiers/cookies our integration creates. It does not automatically erase events already received. You can clear browser storage or contact us about your rights. Analytics permission is independent of joining the waitlist and either email subscription.

A manual color-theme choice can be saved in browser local storage under xettl-theme. Switching back to the device’s current appearance clears the override; browser settings can also clear it. The site otherwise follows your device’s appearance. This functional preference is not used for advertising.

Form answers and email choices are not saved in browser storage. Unsent answers stay in the current page during a retry or when you close and reopen the dialog. Reloading or leaving can discard them. A confirmed save clears the form. If the form says signup is disconnected, it does not send your answers to a signup service.

How long we keep it

Our policy is to review inactive waitlist records after 12 months and delete information no longer needed. Inactive means no signup, preference update or direct interaction with Xettl during that period; simply sending you an email does not reset it. We review at least quarterly and remove records identified for deletion within 30 days of review. You can ask to leave or delete your record sooner.

We retain only the minimum consent and unsubscribe information needed to respect your choices, handle a genuine dispute or meet an applicable legal obligation. An unsubscribe record may remain while necessary to prevent future unwanted email; it is not used for promotion. Technical logs are kept only as needed for delivery, security and troubleshooting. Deleted information may remain temporarily in provider-managed backups until those backups expire; it is not used for ordinary operations, and any restored records must remain subject to the deletion request.

Your choices and rights

You may request access, correction or deletion, ask to leave the waitlist, or change your email choices using the contact details above. Commercial emails must offer an unsubscribe route, including a way to stop all marketing. Withdrawing an optional email preference does not require leaving the waitlist. It does not affect processing that was lawful before withdrawal.

Depending on applicable law, you may also have rights to portability, restriction, objection and an appeal of a refused request. We may need proportionate information to verify a request, but do not send identity documents unless we have agreed a justified, secure process. We respond within the time required by the law that applies and explain any permitted limits or extensions. To appeal a response, contact us again with “Privacy appeal” in the subject or letter.

You may complain to the privacy regulator where you live, work or believe an infringement occurred. In the UK, this is the Information Commissioner’s Office; in the EEA, your national data protection authority. We will not penalize you for exercising an applicable privacy right.

International handling and security

Xettl is based in the United States. If you join from another country, your information is sent to Xettl and may be processed in the United States and other countries where our providers operate. Their privacy laws may differ from those where you live. Where applicable law requires transfer safeguards, those safeguards must be in place before the relevant processing. We do not rely on agreement to the Website Terms as a blanket waiver of those requirements. Contact us for information about safeguards relevant to your data.

Access is limited to people and providers who need it for the purposes described here. No website, email service or storage system can guarantee absolute security.

Adults only

The waitlist is intended for people aged 18 or older. We do not knowingly invite children to submit personal information. If you believe a child has submitted information, contact us so we can investigate and delete it as appropriate.

Changes to this notice

We will update the date above when this notice changes. For material changes, we will provide appropriate notice through the website or an available contact channel, and seek new permission where required. New services or tracking will be assessed before activation.