X4 Digital ("we," "us," "our") operates the X4 Digital web design platform (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. We've written this to be readable — not a wall of legalese.
1. Information We Collect
1.1 Information You Provide
- Account information: email address, password (hashed), billing name
- Payment information: processed by our payment processor (Stripe or similar) — we do not store full card numbers
- Business information: descriptions, details, and content you provide in chat sessions to build your website
- Uploaded files: images or documents you upload during the build process
- Support communications: emails sent to matt@ubfam.com
1.2 Information Collected Automatically
- Log data: IP address, browser type, pages visited, timestamps, referring URL
- Usage data: features used, sites built, revisions made, session duration
- Cookies: session cookies for authentication, preference cookies for UI state
- Analytics: aggregated, anonymized usage statistics to improve the Service
1.3 Information About Your Website Visitors
If your X4-built site includes contact forms, we store form submissions on your behalf. You are the data controller for your visitors' data. We process it only to provide the Service to you.
2. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Service
- Process payments and manage subscriptions
- Deliver AI-generated website designs based on your descriptions
- Send transactional emails (receipts, build notifications, account alerts)
- Provide customer support
- Detect and prevent fraud, abuse, and Terms violations
- Analyze usage patterns to improve AI model quality (anonymized data only)
- Track affiliate referrals and pay commissions
We do not sell your personal data to third parties. We do not use your business descriptions or website content to train AI models without your explicit consent.
3. Cookies and Tracking
We use the following types of cookies:
- Essential cookies: required for authentication and core functionality — cannot be disabled
- Preference cookies: remember your UI settings (theme, language) — can be cleared via browser settings
- Analytics cookies: anonymized usage tracking to improve the Service — you may opt out
You can control cookie settings in your browser. Disabling essential cookies will prevent you from logging in. Third-party analytics providers (if used) process data under their own privacy policies.
4. Data Sharing
We share data only as necessary to provide the Service:
- Hosting providers: Cloudflare (site hosting, CDN, DDoS protection)
- Payment processors: Stripe or similar (billing only — we don't store card data)
- Infrastructure: cloud computing providers for AI model serving and data storage
- Legal compliance: we may disclose data when required by law, court order, or to protect our legal rights
All third-party providers are contractually required to process your data only as instructed and to maintain appropriate security standards.
5. Data Retention
- Account data is retained while your account is active
- After account closure: account data is deleted within 90 days
- Payment records are retained as required by applicable financial regulations (typically 7 years)
- Chat session logs (build conversations) are retained for 12 months after the session, then deleted
- You may request earlier deletion by emailing matt@ubfam.com
6. Your Rights
6.1 All Users
- Access and download your data from your dashboard (site files, account information)
- Correct inaccurate information in your account settings
- Delete your account (and associated data, within our retention policy)
- Opt out of marketing emails via the unsubscribe link in any email
6.2 GDPR (EU/EEA Residents)
If you are located in the EU or EEA, you have additional rights under the General Data Protection Regulation:
- Right to access: request a copy of your personal data
- Right to rectification: correct inaccurate data
- Right to erasure: request deletion of your personal data
- Right to data portability: receive your data in a machine-readable format
- Right to object: object to processing based on legitimate interests
- Right to restrict processing: limit how we use your data in certain circumstances
Our legal basis for processing: performance of contract (providing the Service), legitimate interests (improving the Service, fraud prevention), and consent (where explicitly obtained). To exercise GDPR rights, email matt@ubfam.com with the subject "GDPR Request."
6.3 CCPA (California Residents)
California residents have rights under the California Consumer Privacy Act:
- Know what personal information we collect and how it's used
- Delete personal information we've collected (with exceptions)
- Opt out of the sale of personal information — we do not sell personal information
- Non-discrimination for exercising CCPA rights
To exercise CCPA rights, email matt@ubfam.com with the subject "CCPA Request."
7. Security
We implement industry-standard security measures including:
- Encrypted data transmission (HTTPS/TLS)
- Password hashing (we never store plaintext passwords)
- Access controls limiting employee access to personal data
- Regular security reviews
No system is 100% secure. If we become aware of a data breach affecting your personal data, we will notify you as required by applicable law.
8. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact matt@ubfam.com and we will delete it.
9. International Data Transfers
X4 Digital operates globally. Your data may be processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for international transfers as required by applicable law (e.g., Standard Contractual Clauses for EU data).
10. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or an in-platform notice at least 14 days before they take effect. Continued use of the Service after changes indicates acceptance.
11. Contact
For privacy questions, requests, or complaints:
X4 Digital
Email: matt@ubfam.com
Subject line: "Privacy Request"
We aim to respond to all privacy requests within 30 days (or as required by applicable law).