Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

2. How We Use Your Information

We use your personal information for the following purposes:

• •Providing and improving our SaaS platform and services
• •Processing subscriptions and payments
• •Sending transactional emails (receipts, password resets, account notifications)
• •Providing customer support and responding to inquiries
• •Analyzing platform usage to improve features and user experience
• •Detecting, preventing, and investigating fraud or security issues
• •Complying with legal and regulatory obligations
• •Sending product updates and marketing communications (with your consent)

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Legal Basis for Processing (GDPR)

If you are located in the EEA or UK, we process your personal data under the following legal bases:

• •Contract Performance: Processing necessary to provide our services.
• •Legitimate Interests: Improving our platform, fraud prevention, and security.
• •Legal Obligation: Compliance with applicable laws (e.g., tax, anti-money laundering).
• •Consent: Where you have given explicit consent (e.g., marketing emails).

4. Data You Store on Our Platform

Our SaaS platform allows you to store customer data, contacts, email lists, form submissions, and other content. You are the data controller for this content, and we are the data processor.

You are responsible for obtaining appropriate consent and ensuring your use of our platform complies with applicable data protection laws (GDPR, CCPA, CAN-SPAM, etc.). We provide tools to help you manage consent, export data, and delete records.

5. Payment Processing by Stripe

All payment processing is performed by Stripe, Inc. (stripe.com), a PCI-DSS Level 1 certified payment processor.

X6EE never receives, stores, or has access to your full card number, CVV, or PIN. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

6. Data Sharing & Third Parties

We may share your information with the following categories of third parties:

• •Stripe (payment processing)
• •Cloud infrastructure providers (AWS, Vercel) for hosting
• •Email delivery services (for transactional emails)
• •Analytics providers (anonymized/aggregated data)
• •Legal counsel or government authorities where required by law

7. Data Retention

We retain your personal data for the following periods:

• •Account data: For the duration of your account, plus 30 days after deletion.
• •Billing records: Minimum 7 years for tax and legal compliance.
• •Support communications: Up to 3 years from last contact.
• •Analytics data: Aggregated and retained indefinitely; identifiable data deleted after 26 months.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

• •Right of Access: Request a copy of the personal data we hold about you.
• •Right to Rectification: Request correction of inaccurate or incomplete data.
• •Right to Erasure: Request deletion of your personal data.
• •Right to Data Portability: Export your data in a machine-readable format.
• •Right to Restrict Processing: Limit how we use your data.
• •Right to Object: Object to processing based on legitimate interests.
• •Right to Withdraw Consent: Withdraw consent for marketing at any time.

To exercise any of these rights, contact us at privacy@x6ee.com. We will respond within 30 days.

9. Data Security

We implement industry-standard security measures including SSL/TLS encryption for all data in transit, AES-256 encryption for data at rest, role-based access controls, regular security audits, and SOC 2 Type II compliance. However, no method of transmission is 100% secure.

10. International Data Transfers

X6EE is based in the United States. If you are located outside the U.S., your personal data may be transferred to and processed in the United States. We implement Standard Contractual Clauses and other safeguards for cross-border transfers where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform. The “Last updated” date at the top reflects the most recent revision.

12. Contact

For privacy-related inquiries: