Privacy Policy

1. Who We Are

Xeoz Digital ("we," "us," or "our") operates xeoz.digital. We provide organic revenue infrastructure services for eCommerce brands. For privacy matters, contact: jo@xeoz.digital.

2. Data We Collect

Information you provide directly:

• Name and email address (contact forms, onboarding)
• Business information (domain, revenue goals, competitor names)
• Read-only access credentials to Google Search Console and Google Analytics 4
• Payment information (processed by Whop — we do not store card data)

Information collected automatically:

• IP address and browser type (via Cloudflare infrastructure logs)
• Pages visited and time spent (no third-party tracking scripts installed)

3. How We Use Your Data

• To deliver the Gap Report, Sprint, or Retainer service you purchased
• To generate and deliver monthly ROI reports
• To communicate project updates via email (async, no WhatsApp)
• To process payments via Whop
• We do NOT sell, rent, or share your data with third parties for advertising

4. Data Access — Client Tools

When you grant us access to your analytics and SEO tools, we operate under strict access controls:

• Google Search Console: View-only access. We cannot modify your GSC settings.
• Google Analytics 4: Read-only viewer access. We cannot modify GA4 settings or data.
• Shopify: Read-only access limited to analytics reports. We do not access order management, customer PII, or financial settings.

You may revoke access at any time by removing our email from your tool's user list. Revoking access during an active engagement does not trigger a refund.

5. Data Retention

• Onboarding form data is retained in our database for the duration of the engagement plus 12 months after termination
• Email communications are retained for 3 years
• Upon written request, we will delete your personal data within 30 days (where not prohibited by law)

6. Cookies

xeoz.digital does not use advertising or tracking cookies. We use only essential session cookies required for secure authentication on client-facing portal pages (/portal, /admin). No cookie consent banner is required for our current implementation.

7. Third-Party Services

• Whop: Payment processor. Governed by Whop's Privacy Policy.
• Cloudflare: Hosting, CDN, and DNS. Data is processed per Cloudflare's Privacy Policy.
• SEMrush / Ahrefs: Used internally for analysis. Your domain data is subject to their policies.

8. Your Rights

Depending on your jurisdiction, you may have the right to: access your personal data, correct inaccurate data, request deletion, or object to processing. To exercise these rights, email jo@xeoz.digital. We will respond within 30 days.

9. Governing Law

This Privacy Policy is governed by the laws of the State of Delaware, United States, without regard to conflict of law principles.

10. Changes to This Policy

We may update this policy periodically. Continued use of our services after changes constitutes acceptance. Material changes will be communicated via email to active clients.

11. Contact

Xeoz Digital
Email: jo@xeoz.digital