Privacy Policy

1. Introduction

XertyFi ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cybersecurity subscription service.

2. Information We Collect

2.1 Business Information

• Business name and address
• Industry classification
• Number of employees
• Website URL
• Contact information (email, phone)

2.2 Account Information

• Email address and password
• User role and permissions
• Profile information

2.3 Technical Data

• Security scan results
• Vulnerability assessments
• Compliance audit data
• Training completion records
• Badge certification status

2.4 Usage Information

• Log data (IP address, browser type, device information)
• Feature usage and interaction data
• Performance and analytics data

2.5 Payment Information

Payment data is processed securely through Stripe. We do not store your complete credit card information. We retain only the last 4 digits and card type for reference.

3. How We Use Your Information

We use collected information to:

• Provide and maintain our cybersecurity services
• Process your subscription and payments
• Conduct security scans and assessments
• Generate compliance reports
• Award and verify security badges
• Send service notifications and alerts
• Provide customer support
• Improve our services and develop new features
• Detect and prevent fraud
• Comply with legal obligations

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Service Providers

We share data with trusted service providers who help us operate our platform:

• Stripe: Payment processing
• Base44: Platform infrastructure and data storage
• Email Service: Transactional emails and notifications

4.3 Legal Requirements

We may disclose information if required by law or to:

• Comply with legal processes
• Protect our rights and property
• Prevent fraud or security threats
• Protect user safety

4.4 Business Transfers

If XertyFi is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Regular security audits and updates
• Access controls and authentication
• Secure backup systems

However, no system is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your information for as long as your account is active and as needed to provide services. After account closure, we may retain certain data for:

• Legal compliance (7 years for financial records)
• Fraud prevention
• Dispute resolution

7. Your Privacy Rights

You have the right to:

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a portable format
• Opt-out: Unsubscribe from marketing emails

To exercise these rights, contact us at privacy@xertyfi.com

8. Cookie Policy

We use cookies and similar technologies for:

• Authentication and session management
• Preferences and settings
• Analytics and performance monitoring

You can control cookies through your browser settings.

9. Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies.

10. Children's Privacy

XertyFi is designed for businesses and not intended for children under 18. We do not knowingly collect information from minors.

11. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Privacy Policy

We may update this policy periodically. We will notify you of significant changes via email. Continued use after changes constitutes acceptance.

13. Contact Us

For privacy-related questions or concerns:

• Email: privacy@xertyfi.com
• Support: Use our in-app support ticket system