Xpirius Back to Xpirius

Privacy Policy

Effective October 20, 2026. Last updated October 20, 2026.

Who we are

Xpirius is a service of Xpirius LLC, 818 S Padre Island Dr, Corpus Christi, TX 78416. Contact email: billing@xpirius.com.

We do not sell your information. We do not use ads or tracking tools on xpirius.com.

Xpirius is general information. It is not legal advice and is not a substitute for the advice of an attorney.

If you do not sign in

Your business name, dates and Storm Mode checks are saved only in your browser on your device. We do not receive them. If you clear your browser data, they are gone.

What we keep if you sign in

  • Your email address, to sign you in and to send reminder emails if they are on.
  • Your business name and list: for each item, the kind of item, your label for it, and its date. Up to 60 items. Some extras (repeat schedule, issue date) and Storm Mode checks stay only on your device.
  • Your consent record: the date and time you ticked the box agreeing to reminder emails, and the date and time you stopped them, if you did.
  • Sign-in link records: your email, when the link was made, when it runs out, and when it was used. We store only a scrambled (hashed) copy of the link itself.
  • Your network address, scrambled: when you ask for a sign-in link, we keep a one-way hashed version of your IP address, only to limit how many links one place can ask for. We do not store the IP address itself.
  • Sign-in sessions: a hashed copy of your sign-in cookie and when it runs out.
  • Plan status (free or paid) and, if you ever pay, the customer and subscription numbers Stripe gives us.
  • A reminder log: the dates we sent you a reminder and how many items it listed, and which rule-change alerts we emailed you, so nobody gets the same one twice.
  • Ask Xpirius questions: the box on Home first searches our own rule cards inside your browser, and that sends nothing. If AI answers are switched on, your question (only the question: not your email, business name, list or address) is also sent to our server and to Anthropic to write a short answer from our rule cards. We do not store the question. We keep a count of questions per day, tied to your account if you are signed in, or otherwise to a scrambled (hashed) version of your IP address, to enforce a daily limit. Counts are deleted after 2 days. For how Anthropic handles these requests, see "Companies that help run Xpirius" below.
  • Your county, if you type it (for storm alerts) stays in your browser on this device. It is not sent to us.
  • The microphone button in "Set up my business" uses your browser's own speech service to turn your words into text. Depending on your browser, that service may send the audio to the browser maker (for example Google, for Chrome). Xpirius does not receive or store audio. You can type instead.
  • Permit photos, if you add them (paid plan): the photo or PDF file you choose, which item on your list it belongs to, its file type and size, and when you added it. A photo can show whatever is in it, such as permit numbers, names and addresses, so only photograph what you need. Files are stored privately with Cloudflare R2. They are never public: only you, signed in, can open them through Xpirius. Each file is up to 8 MB. We keep a stored photo until you delete it or delete your account.
  • Plan details: whether your plan is monthly or yearly, and if you paused or canceled it, the date the pause or plan ends.
  • People you add: if you add a business manager or another person to get reminders, we keep their email address and when they were added or stopped. Please add only people who agreed.
  • Names you type: your labels can hold anything you type, for example an employee's name on a food handler card. Type only what you need.
  • Payment history: for each charge, the amount, number of businesses, monthly or yearly, the date, and the date of any refund. We keep these as tax and accounting records for at least four years.
  • Trial and plan dates: when your free trial started and when it ends.
  • Text messages (if you turn them on): see "Mobile numbers and texting" below.
  • Where you heard about us: if you arrive through a link or code, we may save it with your account. We do not share it.

We do not collect passwords or your location. We never see or store your full card number; Stripe handles card details. If you turn on text reminders, we collect your mobile number (see "Mobile numbers and texting" below).

Cookies and browser storage

We set one cookie, only after you sign in: rw_session. It keeps you signed in for up to 30 days. Scripts on the page cannot read it, and it is only sent over a secure connection to xpirius.com. Signing out or deleting your account removes it.

The page also uses your browser's local storage to keep your list on your device. We do not use advertising or analytics cookies.

Companies that help run Xpirius

  • Cloudflare hosts the website, our database and (in Cloudflare R2) permit photos you choose to store. Cloudflare keeps its own technical logs (such as IP address and pages requested) for security and to run its network, under its own policies. We do not use them for advertising.
  • Resend sends our emails (sign-in links, reminders, rule-change alerts, trial and billing notices), so it receives your email address and the contents of each email. Resend keeps email records under its own policy.
  • Twilio delivers our text messages, so it receives your mobile number and each text. Twilio keeps its own records under its own policy.
  • Stripe takes payments, handles pauses and cancellations, and calculates sales tax from your business's address. It receives your email, billing address, card details and what you bought, and uses them under its own privacy policy.
  • Anthropic, an AI company, (1) reads permit photos you send to the photo reader, and (2) writes the optional AI answers in Ask Xpirius, only if we switch them on. For photos it receives the photo. For Ask it receives the question you typed and our public rule cards. It does not receive your email, business name, list or address. According to Anthropic's current terms, it deletes this data within 30 days (longer only if it is flagged for safety or the law requires it) and does not use it to train its models without permission.
  • Google Fonts: your browser loads the page's fonts from Google, so Google receives your IP address and browser details when you open a page.

The headlines on the "Rules & News" page are fetched by our server from official sources. Your browser does not contact those sources unless you click a link.

We may share information if the law or a court requires it.

How we use it

  • To sign you in and keep your list on your other devices.
  • To send reminder emails, only if the paid plan is on, you agreed, and you have not stopped them.
  • To send rule-change alerts: when we add a rule change for a kind of item on your list, we email you once. Same conditions as reminders: paid plan on (not paused), you agreed, and you have not stopped emails. The "Rules & News" page shows these changes to everyone; your browser picks the ones that match your list.
  • To keep the permit photos you add and show them only to you.
  • To stop abuse of the sign-in form.

We use your email to run your account. If you save a list but have not started the free trial, we may send up to three emails about the free trial; each has an unsubscribe link. We do not sell your email or give it to anyone for marketing.

Reading permits from a photo

If you use "Take pictures of your permits," each photo is made smaller on your phone and sent to our server, which passes it to Anthropic, an AI company. Anthropic reads the permit name and expiration date and sends that text back to us. We do not keep the photo; our server throws it away after it is read. According to Anthropic's current terms, Anthropic deletes this data within 30 days (longer only if it is flagged for safety or the law requires it) and does not use it to train its models without permission. The photo can show whatever is in it, such as permit numbers, names and addresses, so only photograph what you need. An AI can misread a date or a name, so check every result against your permit. To limit use, we keep a count of photos read per day, tied to your account if you are signed in or otherwise to a scrambled (hashed) version of your IP address; counts are deleted after 2 days.

Separately, if you have the paid plan and attach a photo to an item, we store that photo privately with Cloudflare R2 until you delete it or delete your account.

Mobile numbers and texting

If you turn on text reminders (a paid-plan feature), we collect your mobile number and a record of your agreement: the date and time, the exact words you saw, the page version, your IP address and browser, and every text we send, receive or block (such as STOP, START and HELP). We use these records to send the reminders you asked for, to honor STOP, to prove you agreed, and to defend legal claims, and for nothing else. Texts are about the due dates you enter. We send at most one text a day, between 10 a.m. and 6 p.m. Central time, Monday through Saturday. Standard message and data rates may apply. Reply STOP at any time to stop, or HELP for help, or email billing@xpirius.com. We do not sell or share mobile numbers or text-messaging consent with third parties or affiliates for their marketing or promotional purposes. We share your number only with our messaging provider, Twilio, to deliver your texts. We keep consent and opt-out records for 5 years after your last text or opt-out, then delete them, and we keep the text of reminders we sent for 18 months. We keep them even if you close your account, because they are our proof that you agreed.

Stopping emails

Every reminder and rule-change email has a "Stop these emails" link. You can also sign in and use "Stop reminder emails". Either one takes effect right away. Signing in again with the consent box ticked turns reminders back on.

Sign-in link emails are sent only when you ask for one.

Deleting your information

Sign in, open the menu, choose Email reminders and account, and use "Delete my account". After you confirm, we delete your account, your business and dates, your permit photos (the files and their records), your sign-in sessions, your sign-in link records, your reminder log, your rule-change alert log and your Ask question counts right away, and sign you out. You can also delete any single photo yourself at any time. Your list stays in your browser on your device until you clear it.

If you asked for a sign-in link but never used it, there is no account to delete; email us at billing@xpirius.com and we will remove the record.

What we keep after you delete your account. (1) Text-message consent, opt-out and delivery records, as described above. (2) Payment records (amount, date, number of businesses), which tax and accounting rules require us to keep, for at least four years. (3) Records held by Stripe, Twilio and Resend under their own policies. (4) Backup copies of our database for up to 30 days. Everything else on the list above is deleted right away.

We delete sign-in link records 30 days after they are created.

Security

The site uses a secure (HTTPS) connection. Sign-in links and sign-in cookies are stored only as one-way hashes. No system is perfect, and we cannot promise information will never be exposed. If a breach of our systems exposes your information, we will tell you and the authorities as Texas law requires.

Who Xpirius is for

Xpirius is for adults (18 or older) who run or work at a business. It is not meant for children, and we do not knowingly collect information from anyone under 18. If you think a child gave us information, email billing@xpirius.com and we will delete it.

Your rights under the law

Texas's main consumer privacy law does not apply to a business of our size, and most people use Xpirius for their business. Even so, you can email billing@xpirius.com to ask what we have about you, to correct it, or to delete it. We will answer within 45 days. We cannot delete the records we must keep (described under "Deleting your information").

Changes

We will email account holders at least 14 days before an important change takes effect, and post the new version here with a new date.

Contact

Xpirius LLC, 818 S Padre Island Dr, Corpus Christi, TX 78416. Email: billing@xpirius.com.