Xportpark Privacy Policy (Global)
This Privacy Policy explains how Xportpark Inc. ("Xportpark," "we," "us") collects, uses, shares, and protects personal data when you use our Services.
1) Who We Are
Controller: Xportpark Inc.
Contact: privacy@xportpark.com
Mailing address:
Xportpark Inc.
166 Geary Street, 15th Floor Suite 68, San Francisco, California, 94108, USA
2) Scope
This policy applies to our websites, apps, subdomains, and related services, including Community features. The Services are intended for business and professional use and are not directed to children. Users must be 18+.
3) Personal Data We Collect
Depending on how you use the Services, we may collect:
3.1 Account and profile data
- Name, email, phone number
- Country, language, timezone (where relevant)
- Company/organization name, role/title, business profile information
- Professional Individual profile information (skills, portfolio links, service categories)
3.2 Community and communications data
- Posts, comments, messages, and other Content you submit
- Files you upload (e.g., documents, images) where enabled
3.3 Usage and device data
- IP address, device identifiers, browser type, user agent
- Log data (timestamps, pages viewed, actions taken)
- Security events (sign-in history, risk signals)
3.4 Payments data
- Billing status, transaction references, invoices/receipts
- We generally do not store full payment card details; payment processing is handled by payment providers.
3.5 Verification/compliance data (where required)
- Identity or business verification information (KYB/KYC), which may include government IDs or business documents depending on the feature and jurisdiction.
- We aim to minimize storage of sensitive documents and prefer storing verification results and references.
3.6 Support data
- Customer support requests and correspondence
4) Sources of Data
- Directly from you
- Automatically when you use the Services (cookies/logs)
- From service providers (payments, analytics, verification) where applicable
5) How We Use Personal Data
We use personal data to:
- Provide and operate the Services (accounts, profiles, Community)
- Process payments and manage subscriptions
- Provide OpenAccount onboarding and verification workflows
- Improve, maintain, and secure the Services
- Prevent fraud, abuse, and unauthorized access
- Communicate service updates, security alerts, and support responses
- Comply with legal obligations and enforce our Terms/Policies
6) Legal Bases (where applicable)
Depending on jurisdiction, we may process data based on:
- Contract necessity (providing Services)
- Legitimate interests (security, fraud prevention, improving Services)
- Consent (certain cookies and optional marketing communications)
- Legal obligation (compliance requests, lawful disclosures)
7) Cookies and Tracking
We use cookies and similar technologies for:
- Essential functionality (login/session)
- Performance and analytics (if enabled)
- Preference settings
Where required, we provide a cookie banner and preferences tool to manage consent. See our Cookie Policy for details.
8) How We Share Personal Data
We may share data with:
- Service providers/processors (hosting, analytics, email delivery, customer support tooling, payment processors, verification providers)
- Other users (profile and Community content as configured by the Services and your settings)
- Legal and safety disclosures (to comply with law, enforce policies, protect rights/safety)
- Business transfers (merger, acquisition, financing, or sale of assets)
We do not sell personal data in the ordinary sense. If our practices change, we will update this policy and provide required choices.
9) International Transfers
We operate globally and may process data in the United States and other countries where we or our providers operate. We use appropriate safeguards where required by law.
10) Data Retention
We retain personal data as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Typical retention may include:
- Account data: while active; deletion/anonymization after closure (subject to legal/compliance needs)
- Security logs: limited retention (e.g., 90–180 days) unless needed for fraud investigations
- Legal acceptance records: retained longer for contract evidence
- Verification records: minimized; retained as required for compliance and risk management
11) Security
We use reasonable administrative, technical, and organizational safeguards to protect personal data. No system is 100% secure; you are responsible for keeping your credentials safe.
12) Your Rights and Choices
Depending on your location, you may have rights to:
- Access, correct, or delete your personal data
- Object to or restrict certain processing
- Data portability (where applicable)
- Withdraw consent (where processing is based on consent)
- Manage cookie preferences
To submit a request, contact privacy@xportpark.com with your account email and request details. We may verify your identity before fulfilling requests.
13) US State Privacy Disclosures (California and others)
If you are a resident of certain US states, you may have additional rights regarding access, deletion, correction, and opting out of certain data uses. To exercise rights, contact us at privacy@xportpark.com.
14) Third-Party Links
The Services may include links to third-party websites or services. Their privacy practices are governed by their policies, not ours.
15) Changes to This Policy
We may update this policy by posting a new version and effective date. For material changes, we may provide additional notice.
16) Contact
Privacy: privacy@xportpark.com
Legal: legal@xportpark.com
Support: support@xportpark.com
Compliance: compliance@xportpark.com
Mailing address:
Xportpark Inc.
166 Geary Street, 15th Floor Suite 68, San Francisco, California, 94108, USA