Privacy Policy

Personal information you provide

We collect personal information you voluntarily provide when you register, make a purchase, request support, or otherwise interact with our Services. This may include:

• Names, email addresses, and usernames
• Phone numbers and contact preferences
• Billing and mailing addresses
• Payment instrument data (card number, security code)
• Passwords and authentication data

Sensitive information: We do not process sensitive personal information.

Social media login data: If you register using a social media account (e.g., Google, GitHub), we receive the profile information described in the Social Logins section.

Information collected automatically

When you visit our Services, we automatically collect device and usage data that does not reveal your specific identity:

• Log & usage data — IP address, browser type, timestamps, pages viewed, and system activity.
• Device data — hardware model, operating system, unique device identifiers.
• Location data — approximate location derived from IP address. You can disable precise location access in your device settings.

Information from other sources

We may receive limited data from public databases, marketing partners, social media platforms, and other third-party sources to enhance our marketing and keep our records current.

We process your information to provide, improve, and administer our Services, communicate with you, prevent fraud, and comply with law. Specifically:

• Account creation, authentication, and management
• Delivering and fulfilling our Services
• Responding to inquiries and providing support
• Sending administrative messages (updates, security alerts, policy changes)
• Processing payments, returns, and order management
• Marketing and promotional communications (opt-out available)
• Security monitoring, fraud prevention, and protecting vital interests

We only process personal information when we have a valid legal basis under applicable law:

• Consent — you can withdraw at any time.
• Contractual necessity — to perform a contract with you or take pre-contractual steps.
• Legitimate interests — such as fraud prevention, analytics, and improving our Services.
• Legal obligations — cooperating with authorities and defending legal claims.
• Vital interests — to protect someone's safety.

For users in Canada, we may process information with your express or implied consent, or without consent where permitted by law (e.g., fraud investigations, compliance with court orders).

We may share information in connection with business transfers — such as during mergers, acquisitions, financing, or sale of company assets. We do not sell your personal information.

We may use cookies, web beacons, and similar technologies to collect and store information. You can configure your browser to refuse cookies, though some features may not function as intended.

If you register or log in using a social media account, we may receive profile information from that provider (e.g., name, email, profile picture). The information we receive depends on the provider and your privacy settings. Please review your social provider's privacy notice for details.

We retain personal information only as long as necessary to fulfill the purposes described in this policy, unless a longer period is required by law (e.g., tax, accounting, or legal requirements). When we no longer need your data, we delete or anonymize it, or securely isolate it until deletion is possible.

We implement appropriate organizational and technical safeguards to protect your personal information. However, no electronic transmission or storage method is 100% secure. We cannot guarantee absolute security. Always access our Services within a secure environment.

Depending on your location (EEA, UK, Canada, California, or elsewhere), you may have rights including:

• Right to access your personal information
• Right to rectification or correction
• Right to erasure / deletion
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent

Withdrawing consent: You can withdraw consent at any time by contacting us. This does not affect the lawfulness of processing before withdrawal.

Marketing opt-out: Unsubscribe via the link in our emails or contact us. We may still send non-marketing messages (e.g., service or legal notices).

Account information: Log in to your account settings at xlork.com/dashboard to review, update, or request deletion of your data.

Because no uniform standard for recognizing Do‑Not‑Track (DNT) signals currently exists, we do not respond to DNT browser signals at this time. If a standard is adopted, we will update this notice accordingly.

California Civil Code §1798.83 (“Shine the Light”) permits California residents to request information about personal data disclosed to third parties for direct marketing.

Under the CCPA/CPRA, California residents have the right to:

• Request deletion of personal information
• Know what categories of data are collected and for what purposes
• Correct inaccurate personal information
• Opt out of sale or sharing of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

If you are under 18, reside in California, and have a registered account, you may request removal of publicly posted data by contacting us.

We may update this notice from time to time. The updated version will be indicated by a revised date at the top and will take effect as soon as it is accessible. For material changes, we will notify you by prominently posting a notice or sending a direct notification.

If you have questions about this privacy policy or wish to exercise your rights, you can reach us at:

To review, update, or delete data we have collected, visit xlork.com/app/dashboard.