Privacy Policy

Information We Collect

When you create an account with XELnk, we may collect information such as your name, username, email address, phone number, profile photo, and any other details you choose to include in your profile, including work experience, education history, skills, company information, and professional background.

If you use messaging, social, networking, or job-related features, we may also collect content you upload, create, send, or share through the platform, including messages, posts, comments, images, videos, voice recordings, documents, and other interactions.

We may also automatically collect certain technical and usage information, including device type, operating system, application version, browser type, IP address, language settings, crash logs, diagnostics information, analytics data, push notification tokens, device identifiers, and interaction behavior. This information helps us improve platform performance, functionality, reliability, security, and user experience.

How We Use Information

We use collected information to provide, operate, maintain, and improve the platform and its features. This includes enabling messaging, networking, social interactions, job-related functionality, personalized content, recommendations, notifications, fraud prevention, account verification, security monitoring, customer support, analytics, and compliance with legal obligations.

Push notification tokens may be collected and used solely for delivering important alerts, messages, updates, and service-related notifications.

Website Analytics and Advertising

Our website uses Vercel Web Analytics for basic traffic statistics, including page views, referral sources, and device categories. This measurement runs independently of the optional Google Analytics and TikTok consent choice and does not use analytics cookies. Vercel uses a short-lived identifier derived from request information to estimate visitors. We remove query parameters and fragments from the page URLs sent through this integration. We do not send account details or form contents to it.

We also operate a first-party, cookie-free download-click counter independently of optional analytics consent. It records the selected app store, button placement, broad referral or campaign-source category, and time of the click in private storage. Each click receives a random event identifier for duplicate handling; it is not a persistent visitor identifier. These records do not contain names, email addresses, full referral URLs, or IP addresses. Our hosting provider may separately process request information in its operational logs. Download-click reports are password-protected.

With your permission, our website uses Google Analytics and TikTok Pixel to understand website visits, engagement, traffic sources, advertising performance, scroll activity, and interactions such as clicks on App Store and Google Play download links.

Our first-party website statistics also measure public button and link interactions, page paths, coarse referral-source and device categories, and active time in visible content sections. These measurements run separately from optional Google Analytics and TikTok analytics. Basic statistics do not read form values, record your screen, or create a persistent visitor identity. Random event identifiers prevent duplicate reports; a temporary in-memory page identifier distinguishes activity within one page load, and resets on reload or navigation. It is not a cross-page session or a unique person. Query strings, full referral URLs, names, emails and IP addresses are not stored in these event records. Records are batched into private storage for aggregate reporting.

You can disable first-party website statistics separately in Privacy Choices → Site statistics settings. Global Privacy Control and Do Not Track also disable collection. Basic statistics store only the preference on your device, not a tracking identifier. Active time pauses when the page is hidden or after 30 seconds without interaction. Marked internal tests are excluded from normal reports. Reports are password-protected; blocking, network loss, storage limits and repeat activity can affect completeness.

Separately, you may choose “Allow browser-linked statistics for 30 days”. Only after this explicit choice do we save a random browser identifier and its creation and expiry dates in local storage, and attach it to future first-party event batches. This lets us associate public page visits, button clicks, active section time and returns within the same browser. We do not use an IP address, device fingerprint, name or account identity for this association, and we do not send this identifier to Google Analytics or TikTok. An earlier Google/TikTok consent does not enable it. The identifier expires 30 days after the choice, is not renewed automatically, and a fresh choice creates a new identifier.

Stop linking visits in the settings below to clear the local identifier and stop future association. Turning off site statistics, Do Not Track or Global Privacy Control also disables association. Changes apply when detected by an open page; already-sent requests cannot be recalled. Previously received records are not automatically deleted by withdrawal or identifier expiry; contact arthur@xelnk.com for deletion requests. Records remain in access-controlled private storage under our data-retention policy. The dashboard's 31-day viewing window is not an automatic deletion schedule. We do not retroactively associate earlier unlinked events. A browser identifier is not a unique person: different devices, storage clearing and shared browsers affect counts.

These providers may process technical and usage information such as device and browser information, approximate location, page activity, referral or campaign information, and identifiers used for analytics or advertising measurement. You may accept or decline these technologies through the analytics preferences shown on the website and change your choice later using the Privacy Choices control in the footer.

Storage and Security

Your messages, uploaded content, media, files, and account information are stored securely to support platform functionality and service delivery.

We implement reasonable administrative, technical, and organizational safeguards designed to protect your information against unauthorized access, misuse, alteration, disclosure, or destruction. However, no electronic transmission or storage system can be guaranteed to be completely secure, and we cannot guarantee absolute security.

Third-Party Services

To provide and improve our services, we may rely on trusted third-party providers for infrastructure, hosting, cloud storage, authentication, analytics, notifications, and app distribution services. These providers may process certain information on our behalf solely for service-related purposes.

Such providers may include Supabase, Google Play Services, Apple App Store Services, Expo, EAS Services, Firebase, and other similar infrastructure or technology providers.

We do not sell your private personal information or private messages to third parties.

Data Retention

We retain personal information only for as long as necessary to provide and maintain the services, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud or abuse, and maintain platform integrity, security, and operational reliability.

Retention periods may vary depending on the nature of the information and applicable legal requirements.

Your Rights and Choices

Depending on your jurisdiction, you may have the right to access, correct, update, delete, restrict, or object to certain processing of your personal information. You may also withdraw consent where applicable under local laws.

Certain account information may be updated directly through the platform settings where available.

Account Deletion Requests

You may request deletion of your XELnk account and associated personal data at any time by contacting us at arthur@xelnk.com.

When submitting a deletion request, please provide sufficient information to verify your identity and ownership of the account. Once verified, we will process your request within a reasonable timeframe in accordance with applicable laws and operational requirements.

Upon completion of the deletion request, your profile and account access may be permanently removed, and your posts, messages, uploaded files, and other user-generated content may also be deleted or anonymized. Certain information may still be retained where legally required, necessary for fraud prevention, dispute resolution, enforcement of agreements, security purposes, or technical backup systems.

Residual copies of information may temporarily remain in backups or archived systems for a limited period before permanent deletion.

Children's Privacy

XELnk is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that such information has been collected, we will take reasonable steps to delete it promptly.

International Data Transfers

Your information may be processed and stored in countries outside your country of residence where our infrastructure providers or service providers operate. By using XELnk, you acknowledge and consent to such transfers where permitted by applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, operational practices, or legal requirements. Updated versions will be posted on this page together with the revised effective date.

Your continued use of the platform after any updates constitutes acceptance of the revised Privacy Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at: arthur@xelnk.com