Privacy Policy

1. Introduction

CrossGage ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

Personal Information

• Name, email address, and phone number when you sign up or use our services
• Payment information (processed securely through Stripe)
• Campaign data and analytics
• Lead information from campaign interactions

Automatically Collected Information

• Device information (IP address, browser type, operating system)
• Usage data and interaction patterns
• Cookies and similar tracking technologies

3. How We Use Your Information

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send administrative information, such as updates and security alerts
• Respond to your comments, questions, and provide customer service
• Comply with legal obligations and enforce our terms

4. Information Sharing

We may share your information with:

• Service Providers: Companies that help us operate our business. Specifically:

• Stripe, Inc. — payment processing
• Twilio, Inc. — SMS and communications delivery (including Twilio Verify for phone verification)
• Supabase, Inc. — database, authentication, and edge computing infrastructure

• Business Partners: Campaign sponsors you choose to engage with, subject to the terms of our Lead Data Use Agreement with those sponsors
• Legal Requirements: When required by law or to protect our rights

We do not sell your personal information to third parties for monetary consideration. California residents have the right to opt out of the sale of their personal information — see Section 6 below.

5. Data Security

We use appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure.

6. Your Rights (GDPR & CCPA)

GDPR Rights (EEA/UK Residents)

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Data Portability: Request your data in a machine-readable format
• Objection: Object to processing of your data

CCPA Rights (California Residents)

• Right to know what personal information we collect about you
• Right to delete your personal information
• Right to opt out of the sale of your personal information — to exercise this right, submit a request via our Data Portal
• Right to non-discrimination for exercising your rights

To exercise any of these rights, use our Data Portal or contact us at privacy@crossgage.com.

7. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy. When data is no longer needed, we securely delete or anonymize it.

8. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email:privacy@crossgage.com
• Physical Mail:CrossGage, Inc.
  Attn: Privacy Compliance
  [PHYSICAL ADDRESS — contact privacy@crossgage.com for current mailing address]

Note: We will update this mailing address as soon as our physical office is established. Please email us to confirm the current address before sending physical correspondence.