Privacy Policy

01. Who We Are & Scope of Policy

This Privacy Policy applies to the website located at https://xinflux.com and all related digital services, discovery audits, consulting engagements, and client portals owned and operated by XINFLUX LLC (“XINFLUX”, “we”, “us”, or “our”), a limited liability company organized under the laws of the State of Texas, United States.

This document explains how we collect, store, process, transfer, and protect information when you visit our website, communicate with our team, book discovery consultations, or engage our agency for eCommerce advertising and marketplace growth management (including Amazon, Walmart, and TikTok Shop).

02. Information We Collect

We collect information in three ways: directly from you, automatically through technical website usage, and via authorized marketplace integrations.

A. Information You Voluntarily Provide

• Contact & Identification Data: Full name, business email address, telephone number, job title, and company name when you fill out contact forms, book a discovery call via our scheduling tools, or subscribe to our resources.
• eCommerce Store & Brand Details: Marketplace storefront URLs, current monthly GMV, advertising budgets, product categories, and specific marketplace challenges submitted during audit requests.
• Communications: The contents of emails, chat messages, consultation notes, and feedback provided to our team.

B. Information Collected Automatically (Google Best Practices)

• Device & Browser Information: IP address, operating system, browser type and version, language preferences, device identifiers, and screen resolution.
• Usage & Interaction Data: Pages visited, time spent per page, click paths, referring URLs, date/time timestamps, and navigation behavior collected via cookies and server logs.

C. Information from Authorized Marketplace Integrations

When a client engages our management services, we may access authorized marketplace analytics and advertising reports through official platform APIs (such as Amazon Selling Partner API, Amazon Advertising API, Walmart Marketplace APIs, and TikTok Shop Partner Center). We only access data strictly necessary to fulfill our contractual services.

03. How We Use Your Information

We process your personal and business information only for legitimate, transparent business purposes, including:

• Delivering Agency Services: Conducting account audits, architecting PPC ad campaigns, optimizing marketplace listings, managing inventory forecasts, and generating performance reports.
• Communications & Support: Responding to inquiries, scheduling strategy sessions, providing onboarding materials, and sending operational notifications.
• Marketing & Content (With Consent): Sharing case studies, industry benchmarks, and educational newsletters. You may opt out of marketing emails at any time using the unsubscribe link in any message.
• Website Performance & Security: Monitoring website health, preventing fraud, detecting malicious attacks, and ensuring seamless user experiences.
• Legal & Regulatory Compliance: Satisfying tax obligations, verifying contractual agreements, and protecting against legal claims.

04. Cookies, Analytics & Google Advertising Technologies

Our website utilizes cookies, web beacons, and similar tracking technologies to analyze trends, administer the site, and improve user navigation.

A. Google Analytics & Tag Manager

We use Google Analytics 4 (GA4) and Google Tag Manager to understand visitor interactions. Google Analytics collects information anonymously and reports website trends without identifying individual visitors by name. Google may use the data collected to contextualize and personalize ads within its advertising network.

B. Managing Cookies & Opting Out

You can choose to disable cookies through your individual browser settings. You may also opt out of Google Analytics tracking across all websites by installing the official Google Analytics Opt-out Browser Add-on.

For more information regarding interest-based advertising and how to opt out of targeted ad networks, visit the Digital Advertising Alliance (DAA) or the Network Advertising Initiative (NAI).

05. Marketplace Integrations & API Security

All client account access is managed through official secondary user permissions (e.g., Amazon Seller Central User Permissions, Walmart Seller Center Delegated Access, TikTok Shop Partner Center roles) or verified OAuth API tokens. Client permissions can be modified or revoked by the client at any time directly through their seller dashboard.

06. Information Sharing & Third-Party Disclosure

We do not sell, rent, monetize, or trade personal data or client brand metrics. We only share information with third parties under the following strict circumstances:

• Vetted Infrastructure Providers: Secure cloud hosting, CRM platforms, calendar booking systems, and encrypted email providers who process information solely on our behalf under written confidentiality agreements.
• Legal Necessity: When required by subpoena, court order, applicable law, or government authority, or when necessary to protect the legal rights, safety, or property of XINFLUX LLC, our clients, or the public.
• Business Transfers: In the event of a merger, acquisition, corporate reorganization, or sale of company assets, client information may be transferred as an acquired business asset under the same confidentiality standards.

07. Data Security & Encryption

We implement commercial-grade administrative, technical, and physical safeguards designed to prevent unauthorized access, disclosure, alteration, or destruction of personal data:

• Encryption in Transit: All website traffic is protected by modern Transport Layer Security (HTTPS / TLS 1.3 encryption).
• Access Governance: Only authorized agency personnel with signed non-disclosure agreements have access to client operational records on a need-to-know basis.
• Security Audits: Regular review of user permissions, authentication policies, and digital endpoint hygiene.

08. Data Retention Guidelines

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including providing agency services, complying with accounting and tax regulations, and resolving disputes. When data is no longer required, it is securely deleted or anonymized.

09. Your Privacy Rights (GDPR & U.S. State Laws)

Depending on your geographic location, you may have specific statutory privacy rights:

A. European Union & UK Residents (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to request access to your personal data, rectification of inaccurate data, erasure (“Right to be Forgotten”), restriction of processing, data portability, and the right to object to processing. Where processing is based on consent, you may withdraw consent at any time.

B. California Residents (CCPA / CPRA)

The California Consumer Privacy Act (as amended by the CPRA) provides California residents with specific rights:

• Right to Know & Access: You may request the categories and specific pieces of personal information we have collected.
• Right to Delete: You may request deletion of personal information we collected from you, subject to legal exceptions.
• Right to Correct: You may request correction of inaccurate personal data.
• No Sale or Sharing: We do not sell or share your personal information as defined by the CCPA/CPRA.
• Non-Discrimination: We will never discriminate against you for exercising your privacy rights.

C. Texas & Other U.S. State Laws

Residents of Texas (under the Texas Data Privacy and Security Act – TDPSA), Virginia, Colorado, and other states with enacted privacy frameworks enjoy similar rights to access, correct, delete, and opt out of profiling or targeted advertising.

To exercise any of these rights, email us at hassan.burhan@xinflux.com. We will verify and respond to your request within 45 days.

10. Children’s Privacy (COPPA Compliance)

Our website and services are strictly B2B (business-to-business) and are intended exclusively for commercial entities and individuals aged 18 or older. We do not knowingly collect or solicit personal information from children under the age of 13 (or under 16 in certain jurisdictions). If we become aware that we have inadvertently collected data from a child, we will promptly delete it.

11. International Data Transfers

XINFLUX LLC is headquartered in the United States. If you access our website or engage our services from outside the United States, your information may be transferred to, stored, and processed in the United States where data protection laws may differ from those in your jurisdiction. We utilize appropriate contractual safeguards (including Standard Contractual Clauses where applicable) to protect your information.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our operational practices, new technology, or legal requirements. When updates occur, we will update the “Last Updated” date at the top of this page. We encourage you to review this page periodically to remain informed about our privacy commitments.

13. Contact Information & Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our designated privacy team: