LEGAL

Privacy Policy

Effective: January 1, 2025

1. Information We Collect

We collect information you provide when submitting a request form (company name, contact information, business operational data), when completing a payment via Stripe (processed directly by Stripe — we do not store payment card data), and when engaging our services (project data, financial data, system access credentials provided for operational purposes).

2. How We Use Information

We use collected information to evaluate service fit, deliver contracted operator services, communicate about your engagement, and improve our operational processes. We do not sell your information to third parties.

3. Data Sharing

We share your information only with operators assigned to your engagement, payment processors (Stripe) for billing, and email delivery providers (Resend) for transactional communications. All third parties are contractually bound to confidentiality.

4. Data Retention

We retain client engagement data for the duration of the service agreement plus 12 months. Request form data from prospects who do not become clients is retained for 90 days. You may request deletion of your data at any time.

5. Security

We limit data access to operators with a defined need. Credentials provided for system access are stored securely and revoked upon engagement end. We maintain reasonable technical and organizational safeguards against unauthorized access.

6. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us at xoponops@gmail.com. We will respond within 30 days.

7. Contact

Privacy questions: xoponops@gmail.com