FYXO INC

Global Privacy Policy

Effective Date: 06.22.2026 | Version 2.0

1. Introduction

FYXO INC ("FYXO," the "Company," "we," "us," or "our") has created this Privacy Policy (this "Privacy Policy") because we know that you care about how the information you provide to us is collected, used, and shared. This Privacy Policy relates to the information collection and use practices of FYXO in connection with the websites we own or control (collectively, the "Websites"), the products and services we make available (the "Products and Services"), and any other way in which you interact with us.

FYXO offers a range of products, including software, websites, apps, and services used by individuals and by organizations worldwide. References to FYXO Products and Services in this Privacy Policy include our services, websites, apps, software, and related offerings that display or link to this Privacy Policy.

We are committed to processing personal information in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR and the Data Protection Act 2018, the California Consumer Privacy Act as amended by the California Privacy Rights Act (the "CPRA"), and other applicable U.S. and international data protection laws (collectively, the "data protection laws"). We operate a 'Privacy by Design' approach, assessing the privacy impact of changes from the outset and designing our systems and processes to protect personal information.

2. Description of Users and Acceptance of Terms

This Privacy Policy applies to visitors to the Websites who view only publicly available content ("Visitors"); customers who have signed up to access and use the Products and Services ("Customers"); and a customer's employees or contractors authorized by the Customer to access and use the Products and Services ("Authorized Users").

By visiting our Websites, Visitors agree to the terms of this Privacy Policy and any accompanying Terms of Use.

By accessing and/or using the Products and Services, each Customer and Authorized User agrees to the terms of this Privacy Policy.

Capitalized terms not defined in this Privacy Policy have the meaning given to them in our Terms of Use or applicable services agreement, as the context requires.

3. The Information We Collect and/or Receive

While operating the Websites, providing the Products and Services, and interacting with you, we collect and/or receive the following types of information. We collect some of this information directly from you, some automatically through your use of our Products and Services, and some from third parties.

3.1 Contact Information

When you contact us through the Websites, by email, by mail, or by phone, or when you register for events, request resources, or sign up for communications, you may be asked to provide information such as your name, email address, phone number, company name, job title, and any other information relevant to your inquiry (collectively, "Contact Information"). We use Contact Information to provide the requested service or information and, where permitted, to contact you about our current and future Products and Services.

3.2 Account Information

To access and use certain Products and Services, you may need to create an account by providing information such as your email address and a password (collectively, "Account Information"). We use Account Information to create and manage your account and to verify your identity.

3.3 Billing Information

To pay fees for our Products and Services, you may be required to provide payment-related information such as a payment card number, expiration date, and billing address ("Billing Information"). Billing Information is collected and processed by our third-party payment processor in accordance with its own privacy policy and terms. We do not directly obtain, store, or process payment card or bank account numbers.

3.4 Information Obtained Automatically (Usage Data)

When you access or use the Websites and/or the Products and Services, we automatically collect certain technical information, which we refer to as "Usage Data." This may include your Internet Protocol (IP) address, browser type and version, operating system, the pages you visit and the time and duration of your visits, referring and exit pages, and, when you use a mobile device, the device type, unique device identifiers, mobile operating system, and similar diagnostic data. We may also evaluate your device to identify malicious software or activity that could affect the availability of our Products and Services.

3.5 Tracking Technologies and Cookies

We and our service providers use cookies, pixels, web beacons, local storage, and similar technologies (collectively, "Tracking Technologies") to operate, secure, analyze, and improve our Websites and Products and Services. The Tracking Technologies we use include, among others:

  • Cookies: Small data files stored on your device that help us authenticate users, remember preferences, analyze which features are used most, and measure performance. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted).
  • Local Storage Technologies: Technologies such as HTML5 that provide cookie-equivalent functionality but can store larger amounts of data outside of your browser.
  • Web Beacons: Also known as pixel tags or clear GIFs, used to confirm that a web page or email was accessed or opened, or that certain content was viewed or clicked.
  • Security Cookies: Used to support and strengthen the security of our Products and Services.

For information about how to manage Tracking Technologies, please see the "Cookie Management" portion of Section 7 below. If you disable cookies or other Tracking Technologies, some parts of the Websites and Products and Services may not function properly.

3.6 Information Obtained from Third-Party Analytics Services

We use one or more third-party analytics services to evaluate use of our Websites and Products and Services, compile activity reports, and analyze performance. These providers use cookies and similar technologies to help collect and analyze this data. By accessing the Websites and/or the Products and Services, you consent to the processing of data about you by these providers for the purposes set out in this Privacy Policy. For more information, including how to opt out where available, you can visit:

Google Analytics: https://www.google.com/analytics

To exercise these choices, please contact us at [email protected].

3.7 Information Obtained from Other Sources

We may obtain information about you from other sources, including social media platforms on which we maintain a presence (such as LinkedIn, X/Twitter, and Facebook) when you interact with our pages or access our Products and Services through those platforms, and from service providers that help us, for example, determine an approximate location from your IP address. We handle this information in accordance with this Privacy Policy and applicable law. This Privacy Policy does not cover information collected by third-party platforms under their own policies.

4. How We Use and Share Information

We may use and share your personal information for the following purposes:

  • To provide, maintain, secure, and troubleshoot the Websites and the Products and Services, and to provide support.
  • To improve, develop, and personalize the Products and Services and make recommendations.
  • To communicate with you about the Products and Services, including notifying you of changes.
  • To engage in marketing and advertising and to measure its effectiveness. Where required by applicable law, we will obtain your prior opt-in consent before sending electronic marketing communications.
  • To gather analytics and monitor usage so that we can understand and improve the Products and Services.
  • To detect, prevent, investigate, and address fraud, security incidents, technical issues, and other unauthorized, unethical, or illegal activity.
  • To share information with third-party contractors and service providers that perform services on our behalf, such as cloud hosting, payment processing, customer relationship management, email and marketing services, and analytics.
  • To create and disclose aggregated or de-identified information that does not identify you.
  • To share information with our parent company, subsidiaries, affiliates, or other entities under common control with us.
  • To comply with applicable law and respond to lawful requests, such as subpoenas or government requests, and to protect our rights, your safety, or the safety of others.
  • In connection with a corporate transaction such as a merger, acquisition, financing, reorganization, or sale of assets, where personal information may be among the transferred assets.
  • Otherwise, with your consent.

We take reasonable measures (for example, by contract) to require that any party receiving your personal information from us uses it only for the purposes set out in this Privacy Policy, does not disclose it except as permitted by this Privacy Policy or applicable law, and protects the privacy of your personal information.

5. Legal Basis for Processing under the GDPR

If you are in the European Economic Area (EEA) or the United Kingdom, our legal basis for collecting and using your personal information depends on the information concerned and the context in which we collect it. We process personal information on one or more of the following bases:

  • Performance of a contract with you, or to take steps at your request before entering into a contract.
  • Your consent, which you may withdraw at any time.
  • Our legitimate interests, where these are not overridden by your data protection rights.
  • Compliance with a legal obligation to which we are subject.

6. Accessing and Modifying Information and Communication Preferences

Update Information

If the personal information we hold about you changes, you may correct, update, or delete it by contacting us as set out in the "Contact Us" section, or, where available, directly within your account settings. We will use commercially reasonable efforts to process such requests promptly. Please note that we may need to retain certain information to comply with our legal obligations, resolve disputes, and enforce our agreements.

Marketing Communications

You may opt out of marketing and non-transactional communications by following the "unsubscribe" instructions in any of our marketing emails. Please note that you cannot opt out of transactional or service-related communications.

Cookie Management

Most browsers allow you to remove or reject cookies through their settings. If you disable cookies or other Tracking Technologies, parts of the Websites and Products and Services may not function properly. For more information about cookies, including how to see which cookies have been set and how to manage and delete them, visit www.allaboutcookies.org. You will need to apply your opt-out preferences on each device and browser you use.

7. How We Protect the Information

We take commercially reasonable technical and organizational measures to protect your information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, considering the risks involved in processing and the nature of the data. For example, we use encryption in transit (HTTPS/TLS) to help secure communications with our Websites and Products and Services. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee the absolute security of your information. You should take care in deciding what information you send to us by email or other electronic means.

8. External Sites and Links to Other Sites

The Websites and the Products and Services may contain links to third-party websites ("External Sites") that are not operated by us. These links are provided for your convenience and do not constitute endorsement. We do not control and are not responsible for the content or privacy practices of External Sites. We encourage you to review the privacy policy of every site you visit, and to take precautions when downloading files from any website. If you access linked External Sites, you do so at your own risk.

9. Children

We do not knowingly collect personal information from children under the age of 18 through the Websites or the Products and Services. If you are under 18, please do not provide us with any personal information. We encourage parents and legal guardians to monitor their children's Internet use. If you believe that a child under 18 has provided us with personal information, please contact us, and we will take steps to delete that information from our systems.

10. Data Retention

We retain the information we collect for as long as necessary to fulfill the purposes for which it was collected as described in this Privacy Policy, and as necessary to comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. Usage Data is retained for a shorter period, except where it is used to strengthen security or improve functionality, or where we are legally required to retain it for longer.

11. International Transfers and Notice to Non-U.S. Residents

Our servers and service providers are in the United States and in other countries in which FYXO or its service providers operate. If you are located outside the United States, please be aware that information we collect, including personal information, may be transferred to and processed in the United States or other countries where data protection laws may differ from those in your jurisdiction. Except as otherwise required by applicable law, by providing information to us or allowing us to collect information through the Websites and Products and Services, you consent to the transfer and processing of your personal information in accordance with this Privacy Policy. We take steps to ensure that such transfers are subject to appropriate safety measures.

12. EU-U.S., Swiss-U.S., and UK-U.S. Data Privacy Framework

FYXO INC complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. FYXO INC has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF, and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. FYXO INC has certified that it adheres to the Swiss-U.S. Data Privacy Framework Principles regarding personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms of this Privacy Policy and the DPF Principles, the Principles govern. FYXO INC is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. For more information, please visit: Data Privacy Framework Statement | FYXO.

13. Do Not Track

Various browsers offer a "Do Not Track" ("DNT") setting that allows you to express a preference not to be tracked. There is currently no industry standard for how to respond to such signals. Currently, we do not monitor, recognize, or honor DNT signals or similar mechanisms.

14. Notice to California Residents

If you are a California resident, you may have additional rights regarding your personal information under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the "CPRA"). These may include the right to know what personal information we collect, use, and disclose; the right to request deletion or correction of your personal information; the right to opt out of the "sale" or "sharing" of personal information; and the right not to be discriminated against for exercising your rights. To exercise any of these rights, please contact us as set out in the "Contact Us" section. We will verify your request before responding, and you may use an authorized agent where permitted by law.

15. Notice to Nevada Residents

If you are a resident of Nevada, you have the right to opt out of the sale of certain personal information to third parties. You may exercise this right by contacting us at [email protected] with the subject line "Nevada Do Not Sell Request" and providing your name and the email address associated with your account. Please note that we do not currently sell personal information as "sale" is defined in Nevada Revised Statutes Chapter 603A.

16. Your Data Protection Rights under the GDPR

If you are in the EEA or the United Kingdom, you have certain data protection rights. We aim to take reasonable steps to allow you to exercise them. Subject to applicable law, these rights include:

  • The right to access: to be informed about you and request copies of the personal information we hold about you.
  • The right to rectification: to have inaccurate or incomplete information corrected.
  • The right to erasure: to request deletion of your personal information in certain circumstances.
  • The right to restrict processing: to request that we limit how we use your information in certain circumstances.
  • The right to object: to object to our processing of your personal information, including for direct marketing.
  • The right to data portability: to receive a copy of your information in a structured, commonly used, machine-readable format.
  • The right to withdraw consent: where we rely on your consent, to withdraw it at any time.
  • The right to lodge a complaint: to complain to your local supervisory or data protection authority about our collection and use of your personal information.

We may ask you to verify your identity before responding to such requests.

17. Conflicts and Supplemental Notices

Depending on the specific Product or Service you use or the interactions you have with us, we may provide different or supplemental privacy notices that describe how we handle your personal information in those contexts. Where we do so, those notices apply to the relevant Product, Service, or interaction. If there is any conflict between the English version of this Privacy Policy and a version translated into another language, the English version controls.

18. Changes to This Privacy Policy

This Privacy Policy is effective as of the date stated at the top of this document. We may update it from time to time. We will post any changes on this page and, where appropriate, provide additional notice (such as by email or a prominent notice on our Service) and update the effective date. To the extent permitted by applicable law, our use of your information is governed by the Privacy Policy in effect at the time we collect the information. We encourage you to review this Privacy Policy periodically.

19. Contact Us

If you have any questions about this Privacy Policy or wish to report a privacy concern, you may contact us in any of the following ways:

Privacy inquiries: [email protected]

Legal inquiries: [email protected]

Mailing address: FYXO, 104 West 40th Street, New York, NY 10018, US