Legal

Privacy Policy

Effective date: January 1, 2025

XaltraX Inc. (“FLUX”, “we”, “us”, or “our”) operates the FLUX platform available at xaltrax.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information we collect

We collect information you provide directly to us when you create an account, use our services, or contact us for support. This includes:

Account data: name, email address, password (hashed), company name, and billing address.

Content data: text, images, videos, brand assets, and other content you upload or generate through the platform.

Usage data: pages visited, features used, session duration, and click events, collected via server logs and client-side analytics.

Device data: IP address, browser type and version, operating system, and referring URLs.

Payment data: processed by our payment provider (Stripe). We store only the last four digits of your card, expiry date, and billing address. Full card numbers are never stored on our servers.

2. How we use your information

We use the information we collect to:

Provide, maintain, and improve the FLUX platform.

Process transactions and send related billing notices.

Respond to comments, questions, and support requests.

Send product updates, security alerts, and administrative messages.

Monitor and analyze usage trends to improve user experience.

Detect, prevent, and respond to fraud, abuse, and security incidents.

Comply with legal obligations.

We do not sell your personal information to third parties. We do not use your content to train AI models without your explicit consent.

3. Sharing of information

We may share your information with:

Service providers: third-party vendors who perform services on our behalf (e.g., cloud hosting, payment processing, email delivery, analytics). These providers are contractually obligated to use your data only to provide services to us and in accordance with this policy.

Business transfers: if FLUX is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction.

Legal requirements: we may disclose your information if required by law or in response to a valid legal process (e.g., court order, subpoena).

Protection of rights: we may disclose information to protect the rights, property, or safety of XaltraX Inc., our users, or the public.

4. Data retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by law or for legitimate business purposes (e.g., fraud prevention, resolving disputes).

Content you delete (videos, images, brand assets) is removed from our live systems within 24 hours and from backup storage within 90 days.

5. Security

We implement industry-standard security measures to protect your information:

All data transmitted between your browser and our servers is encrypted via TLS 1.2+.

Passwords are hashed using bcrypt with a high cost factor.

We perform regular security audits and penetration tests.

Access to production systems is restricted to authorized personnel via MFA-protected credentials.

No method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data.

6. Cookies and tracking

We use cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze usage. For more details, please see our Cookie Policy.

You can control cookies through your browser settings. Disabling certain cookies may affect your ability to use some features of the platform.

7. Your rights

Depending on your location, you may have the following rights regarding your personal information:

Access: request a copy of the personal data we hold about you.

Correction: request that we correct inaccurate or incomplete data.

Deletion: request that we delete your personal data ("right to be forgotten").

Portability: receive your data in a structured, machine-readable format.

Objection: object to certain processing activities (e.g., direct marketing).

Restriction: request that we restrict the processing of your data.

To exercise these rights, contact us at privacy@xaltrax.com. We will respond to your request within 30 days.

8. International transfers

XaltraX Inc. is headquartered in the United States. If you are located outside the US, your information may be transferred to and processed in the US or other countries. We use Standard Contractual Clauses and other approved mechanisms to ensure adequate protection for cross-border data transfers.

9. Children's privacy

The FLUX platform is not directed to children under 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the platform at least 14 days before the changes take effect. Your continued use of the platform after the effective date constitutes acceptance of the updated policy.

11. Contact us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

XaltraX Inc.

254 Chapman Rd, Ste 208 #24467

Newark, Delaware 19702 US

Email: privacy@xaltrax.com