Privacy Policy

Last updated: 3 October 2026

We value your privacy very highly. Please read this Privacy Policy ("Policy") carefully before using our websites, applications, and other online products and services operated by X Enterprises, LLC, a Limited Liability Company formed in Washington, United States ("us," "we," "our"). This Policy describes how we collect, use, and disclose information that we obtain about visitors to our websites (each, a "Site") and users of our SaaS products, applications, and other services (the "Services"). By visiting a Site or using our Services, you agree that your information will be handled as described in this Policy. Your use of our Sites and Services is conditional upon your acceptance of and compliance with this Policy, and any dispute over privacy is subject to this Policy and the applicable Terms of Use or Terms of Service, including their limitations on damages and dispute-resolution provisions, which are incorporated by reference into this Policy. If you disagree with any part of this Policy, then you do not have our permission to access or use our Sites and/or Services.

Our role: controller and processor

For personal information we collect from Site visitors and from our own customers — such as account, billing, support, and usage information — we act as the business or "controller," and this Policy applies.

Where our SaaS products store or process data that our customers upload about their own users, customers, or contacts ("Customer Data"), we act as a "processor" or "service provider" on the customer's behalf. That processing is governed by our agreement with the customer, including our Data Processing Agreement, rather than by this Policy. If your information is in another organization's Customer Data, please direct privacy requests to that organization.

What information we collect

We collect information directly from you, from non-affiliated entities, and by automated means as set out below. The type of information that we collect from you depends on your particular interaction with our Services, which includes the below information. Our Sites and Services are intended for adults. You must be at least 18 years of age (or the age of majority in your jurisdiction, if higher) to create an account or use the Services, as described in our Terms of Service and Terms of Use. We do not knowingly collect personal information from anyone under 18. We do not sell the personal information of consumers we actually know are under 16 years of age, and we do not have actual knowledge that we sell or share the personal information of consumers under 16.

Identifying information - Name

Specific piece of information: Name

Identifying information - Billing address

Specific piece of information: Billing address

Identifying information - Phone number

Specific piece of information: Phone number

Identifying information - IP address

Specific piece of information: IP address

Identifying information - Email address

Specific piece of information: Email address

Identifying information - Device identifier

Specific piece of information: Device identifier

Characteristics of protected classifications - Age

Specific piece of information: Age

Characteristics of protected classifications - Gender

Specific piece of information: Gender

Account and commercial information

Specific pieces of information: Account credentials (username and password), subscription plan, purchase and transaction history, support communications

Payment card details are collected and processed directly by our third-party payment processors; we do not store full payment card numbers.

Usage information

Specific pieces of information: Log data, pages viewed, features used, browser and device type, and similar product-usage information collected by automated means

Notice at Collection (California)

This Notice at Collection applies to California residents and supplements the rest of this Privacy Policy.

Personal information we collect. We may collect the categories of personal information described above under "What information we collect," including: identifiers (such as name, email address, phone number, IP address, device identifier, and billing address); account and commercial information (such as credentials, subscription plan, and purchase history); characteristics of protected classifications (such as age and gender, only if you provide them); and internet or other electronic network activity / usage information (such as log data, pages viewed, features used, and browser/device type). Payment card details are collected by our payment processors; we do not store full payment card numbers.

Purposes of use. We use this information for the purposes described in "How we use your personal information," including performing services, verifying customer information, billing, safety and security, analytics, and marketing and advertising (where permitted and subject to your choices).

Whether we sell or share. We do not sell personal information. We do not share personal information for cross-context behavioral advertising except to the extent advertising or analytics cookies on a Site are considered "sharing" under the CCPA/CPRA. You can opt out of that sharing through our cookie consent tool and by using a Global Privacy Control (GPC) signal where required. See "Sale of your information," "Cookies," and "United States state privacy rights."

Retention. We retain personal information for the periods described in "Information retention."

Sensitive personal information. To the extent age, gender, account credentials, or precise information you submit is treated as sensitive personal information under California law, we use and disclose it only for purposes permitted by the CCPA/CPRA (such as providing the Services you request, security, and compliance). See "Limit use and disclosure of sensitive personal information" below.

More information / rights. For a fuller description of our practices and your California rights (know, delete, correct, opt-out of sale/share, limit sensitive PI, non-discrimination), see "Your rights," "Exercising your rights," and the sections referenced above. Contact: legal@x.enterprises; X Enterprises, LLC, 18122 3rd Dr SE, Bothell, WA 98012, USA.

How we use your personal information

We may use the information that you provide us for the following:

Performing services;
Verifying customer information;
Marketing and advertising;
Billing;
Safety and security;
Analytics.

We share the personal information below with the following third parties for the following reason(s):

Identifying information - Name

Specific piece of personal information shared: Name
Categories of third parties with whom personal information is/was shared:
- Customer management & support systems;
- Data storage providers;
- Financial transactions processors;
- Authentication service providers;
- Application monitoring & error tracking providers.

Identifying information - Phone number

Specific piece of personal information shared: Phone number
Categories of third parties with whom personal information is/was shared:
- Notification service providers.

Identifying information - IP address

Specific piece of personal information shared: IP address
Categories of third parties with whom personal information is/was shared:
- Data analytics providers;
- Financial transactions processors;
- Application monitoring & error tracking services;
- Data storage providers.

Identifying information - Email address

Specific piece of personal information shared: Email address
Categories of third parties with whom personal information is/was shared:
- Customer management & support systems;
- Data storage providers;
- Financial transactions processors;
- Authentication service providers;
- Application monitoring & error tracking providers;
- Notification service providers.

Identifying information - Billing address

Specific piece of personal information shared: Billing address
Categories of third parties with whom personal information is/was shared:
- Financial transactions processors;
- Customer management & support systems;
- Data storage providers.

Identifying information - Device identifier

Specific piece of personal information shared: Device identifier
Categories of third parties with whom personal information is/was shared:
- Data analytics providers;
- Application monitoring & error tracking providers;
- Advertising networks (on free, ad-supported Sites, subject to your cookie choices).

Characteristics of protected classifications - Age

Specific piece of personal information shared: Age (only if you provide it)
Categories of third parties with whom personal information is/was shared:
- Customer management & support systems;
- Data storage providers.
We do not share age with advertising networks for cross-context behavioral advertising.

Characteristics of protected classifications - Gender

Specific piece of personal information shared: Gender (only if you provide it)
Categories of third parties with whom personal information is/was shared:
- Customer management & support systems;
- Data storage providers.
We do not share gender with advertising networks for cross-context behavioral advertising.

Account and commercial information

Specific pieces of personal information shared: Account credentials (username; passwords are stored hashed/encrypted and are not shared in usable form), subscription plan, purchase and transaction history, support communications
Categories of third parties with whom personal information is/was shared:
- Customer management & support systems;
- Data storage providers;
- Financial transactions processors;
- Authentication service providers;
- Application monitoring & error tracking providers;
- Notification service providers.

Usage information

Specific pieces of personal information shared: Log data, pages viewed, features used, browser and device type, and similar product-usage information
Categories of third parties with whom personal information is/was shared:
- Data analytics providers;
- Application monitoring & error tracking providers;
- Data storage providers;
- Advertising networks (on free, ad-supported Sites, subject to your cookie choices);
- Consent management providers (for consent records and related technical data).

How we protect your personal information

We have implemented the following measures to protect and safeguard your personal information:

Screening (e.g. performing background checks) all employees with access to personal information
Training our employees on best security practices
Requiring our employees to sign confidentiality agreements
Maintaining up-to-date software and safeguards
Performing regular due diligence of vendors who have access to personal information
Implementing physical security measures

Sale of your information

We do not sell your personal information.

Please see the "Your Rights" section below for more information about exercising your privacy rights regarding sales of your personal information.

Cookies

A cookie is a small piece of data sent from a website and stored on your device by your browser. This Website sets cookies. Please visit our Cookie Policy to learn more about what cookies we set, why we set them, and how to change your cookie settings.

Children's privacy

Our Sites and Services are directed to a general adult audience and are not directed to children. Consistent with our Terms of Service and Terms of Use, users must be at least 18 years of age (or the age of majority in their jurisdiction, if higher) to use the Services or register an account.

We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete that information promptly, except that we may use contact information solely to respond and explain that they may not use the Site or Services. If you believe a child under 18 has provided us personal information, contact us at legal@x.enterprises.

Separately, we do not sell personal information, and we do not sell or share the personal information of consumers we actually know are under 16 years of age.

Analytics programs

This Website uses Google Analytics or a similar service to collect information about you and your behaviors. If you would like to opt out of Google Analytics, please visit https://tools.google.com/dlpage/gaoptout/.

You can also opt out of cookies by using our cookie consent banner.

Information retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Sites and Services, comply with legal obligations, resolve disputes, and enforce our agreements.

The following are category-level retention periods we apply as a small Washington LLC operating SaaS products and a content and affiliate network. Operational backups may retain residual copies for a limited period after deletion in the ordinary course of backup rotation.

Category	Typical retention	Notes
Account profile & credentials	Life of account + up to 30 days after closure or deletion request, then delete or de-identify	Aligns with ToS/DPA export window for product accounts
Billing, invoices, transaction records	Up to 7 years after the transaction or account closure	Tax, accounting, and fraud-prevention needs
Support communications	Up to 3 years after the ticket or conversation closes	Quality, dispute, and security follow-up
Marketing email lists & preferences	Until you unsubscribe or withdraw consent, then suppress as required; list hygiene reviews at least annually	Keep suppression records as needed to honor opt-outs
Server / security / access logs	Up to 12 months (longer if needed for an active security or legal investigation)	Security and abuse prevention
Analytics (e.g., Google Analytics identifiers and reports)	Per provider settings, typically up to 14 months for identifiable analytics data unless a shorter period is configured	Also subject to Cookie Policy / CMP choices
Cookie / consent records (first-party layer CMP)	Per CMP configuration, typically up to 12 months for consent-state cookies; underlying records as needed to demonstrate compliance	See Cookie Policy and on-site consent tool. Period and wording accepted from the prior draft table. The Usercentrics name on this row is retired because consent storage is first-party.
Customer Data in SaaS products (processor role)	Per the customer agreement, Terms of Service, and Data Processing Agreement (including the 30-day post-termination export window, then deletion)	Governed by DPA, not this controller schedule

We may retain information longer when required by law, to establish or defend legal claims, or when the data has been de-identified so it is no longer personal information.

Direct marketing

We use the information that we collect about you for direct marketing purposes. Direct marketing is the act of selling products or services directly to consumers rather than through retailers. Residents of the European Union and/or the European Economic Area and the United Kingdom - You may, at any time, request that we cease to use your information for direct marketing purposes by emailing us at legal@x.enterprises.

Your rights

Depending upon where you reside‚ you may have the following rights with regard to your personal information:

The right to access the personal information that we hold about you.

Applies To: Residents of Canada, Quebec, the European Union and/or the European Economic Area and the United Kingdom

The right to receive the personal information that we hold about you in a portable and, to the extent feasible, a readily usable format that allows you to transmit this information to another entity.

Applies To: Residents of the European Union and/or the European Economic Area and the United Kingdom

The right to ask us to transmit your personal information that we have collected on you to another provider, where technically feasible.

Applies To: Residents of the European Union and/or the European Economic Area and the United Kingdom

The right to request that we amend any of the information that we have collected about you.

Applies To: Residents of Canada, Quebec, the European Union and/or the European Economic Area and the United Kingdom

Applies To: Residents of Canada, Quebec, the European Union and/or the European Economic Area and the United Kingdom

The right to request that we restrict the processing of your personal information.

Applies To: Residents of the European Union and/or the European Economic Area and the United Kingdom

The right to request that we delete some or all of the personal information that we have collected about you.

Applies To: Residents of the European Union and/or the European Economic Area and the United Kingdom

Applies To: Residents of Canada, Quebec, the European Union and/or the European Economic Area and the United Kingdom

The right to opt out of the use of your personal information for purposes of direct marketing.

Applies To: Residents of the European Union and/or the European Economic Area and the United Kingdom

The right to opt out of sales of your personal information.

Applies To: Residents of Nevada and of U.S. states with comprehensive privacy laws (see below)

United States state privacy rights

If you reside in a U.S. state with a comprehensive consumer privacy law — including California, Colorado, Connecticut, Texas, Oregon, Virginia, Utah, Washington (with respect to consumer health data — see our separate Consumer Health Data Privacy Policy), and others — you may have some or all of the following rights, subject to the thresholds and exceptions in your state's law:

The right to know/access the personal information we have collected about you;
The right to correct inaccurate personal information;
The right to delete personal information we have collected from you;
The right to receive your personal information in a portable format;
The right to opt out of the sale of personal information, the sharing of personal information for cross-context behavioral advertising, targeted advertising, and certain profiling; and
The right not to receive discriminatory treatment for exercising your rights.

We do not sell personal information. To the extent our use of advertising or analytics cookies is considered "sharing" or "targeted advertising" under applicable law, you can opt out through our cookie consent tool, and we honor opt-out preference signals such as Global Privacy Control where required. You may also exercise these rights as described in "Exercising your rights" below, and you may designate an authorized agent to submit requests on your behalf where your state's law provides for it. If we deny your request, you may appeal by replying to our response, and we will inform you of the outcome and any further recourse available under your state's law.

California Shine the Light (Cal. Civ. Code § 1798.83)

California residents may request certain information about our disclosure of personal information to third parties for those third parties' direct marketing purposes during the preceding calendar year. We do not disclose personal information to third parties for their own direct marketing purposes. To make a Shine the Light request, email legal@x.enterprises with the subject line "Shine the Light Request" and enough information for us to verify you are the person about whom we collected information. You may make one such request per calendar year.

Limit use and disclosure of sensitive personal information (California)

If we collect sensitive personal information as defined by the CCPA/CPRA, which may include account credentials (username and password), and age or gender if you choose to provide them, we use and disclose that information only as necessary to provide the Sites and Services you request, to prevent security incidents and fraud, to ensure the physical safety of natural persons, for short-term transient use, to perform services on your behalf, or as otherwise permitted by California law without a right to limit.

Where California law gives you a right to limit use and disclosure of sensitive personal information beyond those permitted purposes, you may submit a request by emailing legal@x.enterprises with the subject line "Limit Sensitive Personal Information," or by using any "Limit the Use of My Sensitive Personal Information" link we make available on our Sites. We will not use sensitive personal information for additional purposes that require a right to limit without offering that choice.

The right to opt out of tracking of your location.

Applies To: Residents of Quebec

The right to opt out of the use of your personal information for the purposes of profiling in furtherance of decisions that could produce legal or similarly significant effects concerning you.

Applies To: Residents of Quebec, the European Union and/or the European Economic Area and the United Kingdom

The right to opt out of the use of your personal information for automated decision making purposes.

Applies To: Residents of Quebec, the European Union and/or the European Economic Area and the United Kingdom

Exercising your rights

You may exercise the rights specified above by submitting a consumer request to:

X Enterprises, LLC
18122 3rd Dr SE
Bothell, WA 98012
USA
legal@x.enterprises

We will need to verify your identity prior to effectuating your request. To verify your identity, you will need to provide us with the following information with your request:

Name;
Phone number;
Email address.

Please note that we may be unable to process your request if you do not provide us with the above information.

We will respond to most consumer requests within 30 to 45 days of receipt, depending upon where you reside. However, some requests may take longer. We will notify you in writing if we need more time to respond. We have the ability to deny your request(s) if certain exceptions in the law apply. If we do deny your request, we will provide you with the reasons for such denial.

Accountability

The following person is accountable and responsible for our privacy practices and procedures:

Tim Mushen
CEO
X Enterprises, LLC
425-324-3243
legal@x.enterprises

You may lodge a complaint with us by contacting the person accountable and responsible for our privacy practices and procedures at the contact information above. Residents of Canada may also lodge a complaint with the Office of the Privacy Commissioner of Canada by visiting this File a Privacy Complaint (Canada) page or calling 1-800-282-1376. Residents of Quebec may also lodge a complaint with the Office of the Privacy Commissioner of Quebec by filling out this Quebec Privacy Commission page or calling 1-888-528-7741.

Location of data processing

All data processing activities undertaken by us take place in United States.

Third-party websites

This Website may contain hyperlinks to websites operated by parties other than us. We provide such hyperlinks for your reference only. We do not control such websites and are not responsible for their contents or the privacy or other practices of such websites. It is up to you to read and fully understand their Privacy Policies. Our inclusion of hyperlinks to such websites does not imply any endorsement of the material on such websites or any association with their operators.

Do Not Track and Global Privacy Control

Some browsers offer a Do Not Track ("DNT") setting that sends a signal requesting that websites not track the user. There is no consistent industry standard for how to respond to DNT signals, and we do not respond to DNT browser signals at this time.

Separately, where required by applicable law (including California and certain other U.S. states), we honor legally recognized opt-out preference signals such as the Global Privacy Control ("GPC") as a valid request to opt out of "sale" and/or "sharing" / targeted advertising, as those terms are defined under applicable law. GPC is different from DNT: GPC is an opt-out preference signal we process for privacy-rights compliance; DNT is an older, non-standardized browser signal we do not treat as an opt-out request.

You can also manage analytics and advertising cookies through our cookie consent tool, as described in our Cookie Policy.

Transferring data

We may transfer your personal information for processing to the United States. This means that your information may be processed outside of your country of residence and it may be accessible to law enforcement and national security authorities of that country and jurisdiction. Please note that we use standard contractual clauses, additional safeguards, and adequacy decisions to transfer data.

Questions

If you have any questions about this Privacy Policy, please contact us at legal@x.enterprises.

Changes to Privacy Policy

We reserve the right to amend this Privacy Policy at any time. We will notify you of any changes to this Privacy Policy by posting the updated Privacy Policy to this website.