Last updated: 11 Sept 2026 · Applies to the DriveXos application and this website, operated by CoderXpoint (“we”, “us”).
The DriveXos application contains no telemetry and no analytics.
It does not transmit your file names, folder structure, scan results or usage anywhere. The only network request it can make is activating a Premium licence, which happens once, when you click Activate.
This website is a separate thing: it uses Google Analytics, described below. The application does not.
1. What stays on your machine
Everything the application produces is stored locally and never leaves your device:
- Scan results, folder sizes and the files it lists
- Storage history snapshots and cleanup history
- Your settings, theme and exclusion list
- Exported reports, saved wherever you choose to save them
- Your licence state, stored in a local
license.json
We have no server that receives this data, and no way to retrieve it.
2. What we collect
If you only download and use the free app
Nothing. No account, no sign-up, no identifier.
If you buy Premium
Checkout is operated by our payment processors: Razorpay for payments in Indian rupees and PayPal for payments in US dollars. You enter your payment details inside their own window, and they share with us only what we need to fulfil the order:
- Your name and email address
- Your country, and any company name or tax number you supplied for the invoice
- Your purchase status and the licence key issued to you
We never receive, see or store your card number. Card data is handled entirely by the processor under their PCI-DSS compliance.
If you activate Premium
A licence covers one computer, so activating it is the one moment the application talks to
us. It sends your licence key, a name for the computer (for example
SACHIN-PC (Windows)) so you can recognise it in support, and an
anonymous device identifier: a salted SHA-256 hash, computed on your machine, of an
identifier your operating system already holds. We receive the hash only — never a serial
number, MAC address or hardware id, and it cannot be turned back into one.
We store that hash against your purchase so a second computer can be refused and so you can move the licence later. Clicking Deactivate this device removes it. Nothing about your files, folders or scans is ever sent, and after activation the application makes no further requests — the licence is checked offline on your own machine.
If you contact us
The contact form on this site opens your own email client — it does not submit anything to a server. We then hold whatever you chose to send us, for as long as it takes to resolve your question.
If you visit this website
This site runs Google Analytics to count visits and see which pages people actually use. It sets Google's own cookies and reports the page you are on, roughly where you are, and what kind of device you used. We see totals and trends, never individuals, and we do not run advertising scripts or sell anything to anyone.
Two limits we put on it deliberately:
- Only the page path is reported — never the query string or the part of a
link after the
#. That matters because your licence key travels in the fragment of the link in your purchase e-mail, and your payment reference in a query string. Neither reaches Google. - The licence page is not measured at all. Analytics does not load on
key.html, so opening your key contacts nobody but us.
If your browser sends a Do Not Track signal, the tag does not load and nothing is counted. To block it regardless, any content blocker or your browser's cookie settings will do so; the site works exactly the same without it.
The site also loads a web font from Google Fonts; your browser's request to that service is subject to Google's own privacy terms. Your hosting provider may keep standard server access logs.
When you click a download button, the site adds one to an anonymous counter for that platform (Windows, Apple silicon or Intel Mac) so we can show how many times DriveXos has been downloaded. We store only the totals. To avoid counting the same download twice, a salted, one-way hash of your IP address and browser is kept for six hours and then deleted; your IP address itself is never stored.
3. Licence validation
A Premium installation periodically confirms that its licence is still valid. That request contains the licence key and a machine identifier so a seat can be activated and released — it contains nothing about your files, your drives or what you cleaned.
Validation is deliberately lenient: if the network fails, you stay Premium. Only an explicit “invalid” response — a revoked, refunded or expired licence — moves you back to the free plan.
4. Why we hold what we hold
- To perform our contract with you — issuing and validating your licence, sending your key and receipt.
- To meet legal obligations — retaining invoices and tax records for the period the law requires.
- For our legitimate interests — answering your support requests and preventing licence abuse.
5. Who we share it with
Only the processors we need to run the business:
- Razorpay — payments and receipts in Indian rupees and US dollars
- Our email provider — to deliver your licence key and support replies
- Our web host — to serve this website and the installers
We do not sell your data, rent it, or share it for advertising. Ever.
6. How long we keep it
Customer and licence records are kept for as long as your licence is valid, and afterwards only as long as tax and accounting law requires. Support correspondence is kept until the matter is closed and a reasonable period after, in case you come back to it.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or erase the personal data we hold about you, to object to or restrict how we process it, and to complain to your data protection authority.
To exercise any of these, email info@coderxpoint.com. We will respond within 30 days. Note that we cannot erase records we are legally required to retain, such as issued invoices.
8. Children
DriveXos is not directed at children under 16, and we do not knowingly collect their personal data.
9. Security
We keep the personal data we hold to a minimum — largely a name, an email address and a licence record — and protect it with access controls and encryption in transit. Payment data never enters our systems at all. No system is perfectly secure, but the smaller the target, the smaller the risk.
10. Changes to this policy
If we change this policy materially, we will update the date at the top and, for changes that affect existing customers, email you.
11. Contact
Questions about privacy, or a request about your data: info@coderxpoint.com.
Before you publish: add your registered legal entity name, business address and jurisdiction, and have this reviewed by a lawyer familiar with the markets you sell into. This document is a starting point, not legal advice.