Privacy
XchangeIQ is a RasayanXchange product. We collect only what each feature needs to work, and we do not sell or rent your information.
Last updated 11 November 2026.
- No advertising, no third-party trackers, and no cookies until you sign in.
- Visits are counted without identifying you.
- If you sign in or use alerts, API keys or the Pro waitlist, we keep the details that feature needs, and you can ask us to delete them.
If you use XchangeIQ without signing in
- Visit counts. We count page views, the type of device (phone, tablet or computer) and the website that sent you (its domain only, such as google.com). To count visitors once a day we keep a code made from your IP address and browser that changes every day and cannot be turned back into either; we delete it after two days. We also count how long checks take to answer, in rough bands (such as “under 3 s”) with only the type of device, so we can keep the site fast.
- The free daily limit. To allow 5 free checks a day, we keep a similar daily code made from your IP address with a count, and delete it the next day.
- What you search. The chemical names and CAS numbers you type are used to answer you. When we cannot answer a search, we count the search text (not who typed it) so we can add that chemical.
- Public databases. To identify a chemical we may send its name or CAS number, and nothing about you, to public chemistry databases such as PubChem.
If you sign in with RasayanXchange
- RasayanXchange sends us your name, email address, company, account type and whether your account is active, which decides your free year. We never receive your RasayanXchange password.
- We set one cookie, xiq_session, to keep you signed in for up to 30 days. It cannot be read by scripts on the page, and signing out ends it.
Features you choose to use
| Feature | What we keep | How long |
|---|---|---|
| Change alerts | Your email address, the name of your list and the chemicals on it, and what we last found for each | The chemicals are deleted when you stop the alerts with the link in any alert email; your email address stays, marked as stopped, until you ask us to delete it |
| API keys | Your email address, company, what you said you will use it for, and how many calls each key makes a day. We keep only a scrambled copy of the key itself. | Until you revoke the key or ask us to delete it |
| Pro waitlist | Your email address, company and the answers you give | Until Pro launches, or until you ask us to delete them |
| Bulk Check and Mixture Check | The list or formulation you enter, to produce your results | Bulk results for 24 hours; mixtures are not stored |
In your browser
Some pages remember small things in your own browser, not on our servers: the date our data was last checked (for the open tab only) and, in the R&D tools, whether you prefer plain or chemist wording. Admin pages keep an admin's token for the open tab only.
Who else handles your information
- Railway runs our servers and stores our data (Southeast Asia region).
- Resend sends our emails: alert confirmations and changes, API key links and admin notices.
- RasayanXchange runs the sign-in that XchangeIQ uses.
They handle your information only to provide these services to us. We share information with others only if the law requires it.
Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it, including under India's Digital Personal Data Protection Act, 2023. Write to us through the RasayanXchange contact page and say it is about XchangeIQ. Your RasayanXchange account itself is covered by the RasayanXchange privacy policy.
Changes
When a feature starts collecting something new, we update this page and the date at the top.