Privacy Policy

Last Updated: November 11, 2025

At Xrossworld, Inc. (“Xrossworld,” “we,” “our,” or “us”), your privacy and trust are our top priority. We are committed to protecting your personal information and ensuring that all data shared with us remains secure, private, and used solely for its intended purpose.

This Privacy Policy explains how we collect, use, and safeguard your information when you use our website, platform, and related services (collectively, the “Services”).
‍

1. Information We Collect

We collect only the information necessary to operate our Services effectively, including:

• Usage Data: technical information such as browser type, device details, and activity logs to improve security and performance.
• Account Information: your name, email address, and contact details.
  
• Creator or Brand Data: social media account metrics, audience demographics, and campaign performance data accessed through a secure, read-only API.

2. How We Use Your Information

Your information is used exclusively to:

• Operate, maintain, and improve our Services.
  
• Match creators and brands for campaign opportunities.
  
• Provide analytics and performance insights.
  
• Communicate relevant updates, opportunities, and account notifications.
  

We do not sell, rent, or share your personal information for advertising or third-party marketing.
‍

3. Integration with Phyllo API

To streamline and secure the connection of your social accounts, Xrossworld uses a verified third-party API integration known as “magicsocials.”‍

This integration is powered by Phyllo, a trusted data-infrastructure provider used by leading creator-economy platforms.

When you connect your social account through Xrossworld, you may see “magicsocials” appear in the connection process. Here’s what this means for you:

• The connection is read-only. Xrossworld and its API partner cannot post, edit, delete, or take any actions on your social accounts.
  
• Only publicly available or authorized analytics data (such as follower count, engagement rate, and content performance) is accessed for campaign matching and reporting.
  
• All data transmitted through this integration is encrypted in transit and at rest using industry-standard security protocols (including 256-bit AES and TLS/SSL).
  
• The API provider is SOC 2 Type 2 certified, meeting recognized standards for data security, confidentiality, and availability.
  
• You may disconnect your social account at any time, and all associated data will be deleted or anonymized in accordance with our retention policy.
  

This partnership allows us to provide faster, safer, and more accurate creator data insights — without compromising your privacy or control.
‍

4. Data Access and Security

We maintain strict administrative, technical, and physical safeguards to protect your data from unauthorized access or misuse.

Only authorized personnel under confidentiality obligations can access limited portions of data necessary for operations.

We continuously monitor our systems and vendors to ensure compliance with modern security standards and best practices.
‍

5. Data Sharing and Third Parties

We only share information when absolutely necessary:

• With vetted service providers that help operate our platform (e.g., secure cloud hosting, analytics, or payment processing).
  
• When required by law or valid legal request.
  

All service providers are contractually bound to maintain confidentiality and are prohibited from using data for their own purposes.
‍

6. Your Rights and Choices

You retain full control over your data. You may:

• Request access, correction, or deletion of your information.
  
• Disconnect social accounts or revoke API permissions at any time.
  
• Contact us with privacy concerns at support@xrossworld.ai.
  

We will respond to verified requests promptly and in accordance with applicable laws.
‍

7. Data Retention

We retain data only as long as necessary to deliver our Services or as required by law. When no longer needed, data is securely deleted or anonymized.
‍

8. Policy Updates

We may occasionally update this Privacy Policy to reflect product changes, legal requirements, or best practices. The “Last Updated” date above will reflect any changes. Continued use of our Services indicates your acceptance of the updated policy.
‍

9. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact:

Xrossworld, Inc.

Email: support@xrossworld.ai.

‍