Your data at Exaratio
What we store and why, who we share it with, and how you can ask to see it or delete it. No fine print.
Effective as of October 21, 2026.
Who is responsible
Adaptive Brain SpA, the Chilean company that develops and sells Exaratio, is responsible for the personal data processed on exaratio.com. For any question about your data, write to us at info@exaratio.com.
What we store and why
- Your account: your email, your name if you give it to us, and your preferred language. They are used to identify you, send you the necessary emails for your account, and show you the site in your language.
- Your acceptance of the terms: the version you accepted, the date, and the internet address (IP) from which you did so. This is the record of your consent.
- If you sign in with Google, Microsoft, GitHub, or Apple: the identifier that service gives us and the associated email. We never receive your password for those services.
- Your password, if you create one: we store it irreversibly; not even we can read it. If you turn on two-step verification, its key is stored encrypted.
- Your licenses: the type, the validity period, the number of computers, and the last characters of the serial number. The full serial number is not stored.
- Your purchases: when you buy a license, Paddle informs us of the order number, what you bought, how much you paid before taxes, in which currency and when, and whether it was later refunded. We store this together with your license. Your card or other payment method details do not pass through exaratio.com: only Paddle receives them.
- Your computers, when you activate Exaratio on them: a fingerprint of the computer that does not allow it to be recognized outside Exaratio, the name you give it, the operating system, and the version of the application. It is used to respect the number of computers allowed by your license and so that you can free up a seat.
- Your communication preferences: whether you want notices of new versions, whether you subscribed to the newsletter, and whether you asked us to let you know when the license store opens (and when you asked).
- Record of the emails we send you: for each email, we store its reference, the date, the subject, and your mostly hidden address (for example, r•••@your-domain.com). We never store the content of the email. It is used so that anyone who has the reference, which appears only in the email, can check at exaratio.com/Autenticidad that the email really is from us.
- Downloads: we count how many times each version is downloaded, without associating it with your account.
- Help: if a search in the help finds nothing, we record the search text, the language and the day, so we can write the topics that are missing. If you answer “Was this topic helpful?”, we record the topic, the language, the day and your answer. We don’t record your account or your IP address, and neither searches nor answers appear in the server logs.
- Security logs: the server records visits (IP address, page, and time) to detect abuse and fix problems. They are deleted automatically within a few weeks.
Reading ratings
If you finish reading a book in Exaratio and its author allows it, you can rate it. It is built so that no one, not even us, can tell who sent each rating:
- To rate, you connect Exaratio to your account once. We store that your account has that reader connected (only a fingerprint of its credential), the name of each of your computers and a public key for each one. With that connection, your Exaratio requests anonymous tokens: we sign them without seeing them (blind signature), and the only thing we record is how many your account requested each month, to limit them.
- A rating does not carry your account, your name or your computer. It carries the token, the book, a pseudonym your Exaratio computes for that book (different for every book) and your answers to the questions the author chose; your age, gender and country only if you answer them. The comment you write never leaves your computer.
- Your computers share the key to your pseudonyms, so that your ratings count as one. We store it encrypted for each computer, so we cannot open it; a new computer receives it only when you approve it from another of yours.
- We do not store the IP address of anyone who requests tokens or sends a rating: those requests are not kept in the server logs.
- For 30 days each rating is kept separately, so you can change it; after that it is added to the book’s totals and deleted. Only a short fingerprint of your pseudonym remains, so that no one rates the same book twice.
- The author only sees totals, never individual ratings, and no group of fewer than five readers.
- If you register a work of yours to receive ratings, we store its identifier, your account, the license you registered it with and the public key you sign it with. The work itself is not sent.
What we don't do
- We do not sell or rent your data, nor do we use it for targeted advertising.
- We do not use third-party cookies, analytics tools, or ad tracking. The site does not contact other services while you browse: fonts, icons, and images are served from exaratio.com. The only exception is Licenses while you are signed in to your account, which loads Paddle's payment form so you can make a purchase.
- We do not send your data to artificial intelligence services or use it to train them.
- What you write in Exaratio stays on your computer: the application does not send your texts or your projects to our servers.
- We play no part in any AI assistant you connect. Exaratio includes an agent server (MCP). If you connect an AI assistant of your choice to it, that assistant can read your work and save its reports in it. The assistant and the service it uses are provided by third parties and are governed by their own terms; if that service runs in the cloud, what the assistant reads from your work may be sent to it. You alone decide whether to connect it and what to ask of it. Neither exaratio.com nor Adaptive Brain SpA receives that data or takes any part in its processing.
Cookies
We only use the ones necessary for the site to work: your session cookie, the one for the second step of signing in (lasts 5 minutes), the one for signing in with Google or another service (lasts 10 minutes), the one that protects forms against forged submissions, and the one that remembers your language (lasts one year). In the help, one more remembers the style you choose for the screenshots (lasts one year). When you open the checkout, the form is Paddle's and may use its own necessary cookies, according to its policy. The light or dark theme, and whether you already answered “Was this topic helpful?” on a help topic, are stored only in your browser.
Who we share it with
- Google (Google Workspace) sends our emails: your address and the message pass through its servers.
- Google, Microsoft, GitHub, or Apple, only if you choose to sign in with them, and according to their own privacy policies.
- OVHcloud hosts our server, in its data center in Quebec, Canada.
- Paddle.com (Paddle.com Market Ltd., United Kingdom), our reseller, processes payments. When you buy, you give Paddle your payment and billing details (such as your name, email, country, and payment method), which it processes according to its privacy policy. We tell Paddle which Exaratio account the purchase belongs to, and Paddle notifies us whether it was paid or refunded.
- Authorities, only when the law requires us to.
Because the server is in Canada, email passes through Google, and payments pass through Paddle, in the United Kingdom, your data is processed outside Chile. We choose providers that protect data with standards equivalent to or higher than those of Chilean law.
How long
For as long as your account exists, except for the record of the emails we send you, which is deleted after 13 months. If you ask us to delete your account, we will erase your data within a maximum of 30 days, except for what the law requires us to keep (for example, purchase records for tax purposes).
Your rights
Under the Chilean law on the protection of personal data, you can ask us at any time to:
- see the data we hold about you;
- correct it if it is wrong;
- delete it, or stop using it for a particular purpose;
- receive a copy in a format you can take to another service.
Write to us at info@exaratio.com from your account's email address and we will respond within the legal deadlines. You can turn off new version notices, the store opening notice, and the newsletter in My Library or with the link included in each of those emails. If you are not satisfied with our response, you can file a complaint with the Chilean personal data protection authority.
Security
All traffic is encrypted. Passwords are stored irreversibly, two-step verification is optional for you and mandatory for our team, and Exaratio's internal management is not exposed to the internet. Even so, no system is infallible: if an incident ever affects your data, we will notify you.
Minors
Exaratio is not directed at children under 14 years of age. If you are under that age, you need the authorization of your mother, father, or guardian to create an account.
Changes to this policy
If we change how we process your data, we will publish the new version here with its date. Until the license store opens, Exaratio is in development and each change takes effect as soon as we publish it here. Once the store opens, if the change is significant, we will notify you by email before it takes effect.