Xvoucher Privacy & GDPR Policy

Xvoucher Privacy & GDPR Policy

Updated April 2024

This privacy notice for Genuine Genius Technologies, LLC dba Xvoucher (“we”, “us”, or “our”), describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:

• Visit our website at xvoucher.com, or any website of ours that links to this privacy notice,
• Utilize the Xvoucher platform in any capacity,
• Engage with us in other related ways, including any sales, marketing, or events

Reading this privacy policy will help you understand your privacy rights and choices. Acceptance of our policies and practices is critical to our ability to safeguard your information. Agreeing to these controls is required to use our Services. If you still have questions or concerns, please contact us at support@xvoucher.com.

What data do we process?

When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Additional details about specific data which we collect is available in the relevant section of this policy below.

Do we process any sensitive personal information?

No, we do not process sensitive personal information.

Do we receive any information from third parties?

No, we do not receive any information from third parties. Platform users may enter information of individuals with whom they have a business relationship in order to distribute vouchers or similar services facilitated by Xvoucher. These users must have appropriate permissions from the recipient prior to submitting their personal information into Xvoucher.

How do we process your information?

We process your information to provide, improve, and administer our Services, to communicate with you, for security and fraud prevention, and to comply with applicable laws. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. 

Do we share your personal information with third parties?

We may share your information in specific situations to facilitate or improve the platform’s Services. These are detailed in the relevant section below.

How do we secure your personal information?

We have technical and organizational controls in place to protect your personal information. Our processes and procedures are designed to provide the best practical protections against unauthorized third parties improperly engaging with your information. While there is no guarantee of absolute security, we routinely monitor and control the methods of accessing, collecting, and modifying your information to react to any existing or emerging threats.

What are your rights?

Depending on your geographic location, applicable privacy laws may provide you with certain rights regarding your personal information. We outline these rights throughout this policy, and you may exercise those rights by contacting support@xvoucher.com with your request. We will consider and act upon your request in accordance with applicable law.

What Information Do We Collect?

We collect personal information when you:

• Register or use the Service 
• Express an interest in obtaining information about us
• Otherwise contact us

The personal information we collect depends on the context of your interactions with us and the Services. We may collect the following personal information that you provide during your usage of the Service and interactions with us:

• Name
• Email Addresses
• Phone Numbers
• Physical Addresses
• Usernames
• Passwords

We utilize Stripe, Inc. to process and store payment information which you provide during your usage of our Service. This data includes any payment instrument numbers, security codes, or other related data which you provide. You may find Stripe, Inc. privacy notice here: https://stripe.com/privacy

Automated Information Collection

We automatically collect certain information when you visit, use, or navigate our website and the Service. This information does not reveal your specific identity but may include device and usage information such as:

• IP Address
• Browser and Device Characteristics
• Operating System
• Language Preferences
• Referring URL
• Device Name
• Country
• Location
• Other Technical Information

The purpose of this data collection is primarily to maintain the security and operation of our Service, and for internal analytics and reporting purposes. This information includes:

Log and Usage Data: Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device characteristics, browser type, and settings and information about your activity using the Service.

Device Characteristics: We collect device data, such as information about your computer, phone, tablet, or other device you use to access our Service. Depending on your device, this data may include your IP address, device/application identifier, location, browser type, hardware model, mobile carrier or internet service provider, operating system, and other information related to your system configuration.

Like many businesses, we also collect information through cookies and similar technologies. You can learn more about cookies at: https://allaboutcookies.org

Why Do We Process Your Information

1. We process your personal information for a variety of reasons, depending on how you interact with our Service:
2. We may process your information so you can create and log in to your account, as well as keep your account in working order. 
3. We may process your information to provide you with the service you have requested.
4. We may process your information to respond to your requests and inquiries, as well as solve any potential issues you might have with our Service.
5. We may process your information to send you details about our Services, changes to our policies, and other similar information.
6. We may process your information to fulfill and manage your orders made through our Service.
7. We may process your information when needed to request your feedback or to contact you about your use of our Services. 
8. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
9. We may process information about how you use our Services to better understand how they are being used so we can improve them.
10. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.

What Legal Basis Do We Rely On to Process Your Information

We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law. This typically includes processing with your consent, to comply with laws, to provide you with services related to fulfilling our contractual obligations, to protect your rights, or to fulfill other legitimate business interests.

EU & UK Locations

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal basis we rely on in order to process your personal information. As such, we may rely on the following legal basis to process your personal information:

Consent: We may process your information if you have given us permission to do so for a specific purpose. You can withdraw your consent at any time by contacting support@xvoucher.com

Performance of a Contract: We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services to you.

Legitimate Interests: We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. We may process your personal information for some of the purposes we’ve identified in order to:

Analyze how our Services are used so we can improve them to engage and retain users Diagnose problems and/or prevent fraudulent activities Understand how our users use our products and services so we can improve user experience

Legal Obligations: We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement or a regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation.

Vital Interests: We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

Canada Locations

We may process your information if you have given us specific permission to use your personal information for a specific purpose, or in situations where your permission can be inferred. You may withdraw your consent at any time by contacting support@xvoucher.com.

In some exceptional cases, we may be legally permitted under applicable law, to process your information without your consent. These cases may include:

• If collection of your information is clearly in the interests of an individual, and consent cannot be obtained in a timely way.
• For investigations and fraud detection as well as fraud prevention.
• For business transactions in certain circumstances
• If the collection of information is necessary to assess, process, or settle an insurance claim
• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information, and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, or other legal process which compels us to disclose your information as part of a production of records
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
• If the information is publicly available and is specified by the regulations

When and With Whom Do We Share Your Information

Vendors and Third-Party Service Providers.

We may share your data with third-party vendors and service providers who perform services for us or on our behalf and require access to such information to do that work. Contracts  with these third parties are in place and are designed to help safeguard your personal information. These contracts require that third parties cannot do anything with your personal information unless as a result of our explicit instruction. They will not share your personal information with any organization aside from ourselves. They commit to protecting the data they hold on our behalf, and retain it for the period we instruct. The categories of third parties we may share personal information with are:

• Cloud Service Providers
• Payment Processors
• Order Fulfillment Services
• User Account Registration and Authentication Services

We may also need to share your personal information in the following situations:

Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

Google Analytics: We may share your information with Google Analytics to track and analyze the use of our website and Services. We may use Google Analytics Advertising Features, including Demographics and Interests Reporting. To opt out of being traced by Google Analytics, please visit https://tools.google.com/dlpage/gaoptout. You can opt out of Google Analytics Advertising Features through http://myadcenter.google.com and within the Ad Settings section of any mobile apps. For more information on the privacy practices of Google please visit https://policies.google.com/privacy

Business Partners: We may share your information with our business partners to offer you certain products or services as well as promotional offers related to our Services. 

Do We Use Cookies and Other Tracking Technologies

We may use cookies or similar tracking tools to access or store information. Some cookies are essential to the operation of our Service, and must be utilized in order to adequately support the usage of our Service. You can learn more about cookies and how they impact your privacy at: https://allaboutcookies.org 

Is Your Information Transferred Internationally

Our servers are located in the United States. If you are accessing our services from outside of the United States, please be aware that your information may be transferred to, stored, and processed by us in facilities in the United States, as well as India, the United Kingdom, the Netherlands, and other countries. Our Third Parties with whom we may share your information may also transfer and store your information in other countries.

If you are a resident of the European Economic Area, United Kingdom, or Switzerland, then these countries may not have data protection laws or other similar laws as comprehensive as those in your country. However, we take all necessary measures to protect your personal information in accordance with this privacy notice and applicable law.

How Long Do We Keep Your Information

We retain your personal information for as long as it is necessary for the purposes as set out in this privacy notice. Should a longer retention period be required or permitted by law, we may retain your personal information to satisfy those requirements. (i.e. tax purposes, accounting, or other legal requirements) No purpose in this notice will require us keeping your personal information for longer than eighty four (84) months past the start of the idle period of the user’s account.

When we no longer have an ongoing legitimate business requirement to process your personal information, we will either delete or anonymize such information, or, if this is not possible, we will securely store your personal information and isolate it from any further processing until deletion is possible.

Do We Collect Information from Minors

Our Service may at times process the information of individuals considered under the age of majority in their jurisdiction. To use our Service, you must either be (a) at least eighteen (18) years of age or the age of majority in your jurisdiction of residence (whichever is greater); or, (b) if you are between the ages of thirteen (13) and eighteen (18) years of age and are a resident of the United States, you must have the consent of your legal parent or guardian to use our Service. If you are under the age of thirteen (13) please do not use our Service. If we learn that we have collected or received personal information from a child under the age of thirteen (13) without verification of parental or guardian consent, we will delete that information. If you believe we might have information from or about a child under the age of thirteen (13) please contact us at support@xvoucher.com.

Do Not Track Requests

Some web browsers and mobile operating systems include a Do-Not-Track feature which you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this time, no uniform standard has been recognized and implemented to honor these requests. As such, we do not currently respond to browser signals or any other mechanism which automatically communicates your request not to be tracked.

Geographically Limited Privacy Rights 

In some regions, countries, provinces, states, and territories you may have certain rights under the applicable data privacy laws for your area. These may include the right to (i) request access and obtain a copy of your personal information; (ii) request rectification or erasure of your personal information; (iii) restrict the processing of your personal information; (iv) to data portability; and (v) not be subjected to automated decision making. 

You may also have the right to object to the processing of your personal information entirely. We have outlined some of these areas below, but if you believe we are infringing upon your rights please contact support@xvoucher.com regarding your concern. We will consider and act upon any quest in accordance with the applicable data protection laws.

European Economic Area and the United Kingdom

You have the right to (i) request access and obtain a copy of your personal information; (ii) request rectification or erasure of your personal information; (iii) restrict the processing of your personal information; (iv) to data portability; and (v) not be subjected to automated decision making. In certain circumstances you may have the right to object to the processing of your information entirely. 

If you believe that we are unlawfully processing your personal information, you also have the right to complain to your member state’s data protection authority. If you are in the UK, you have the right to complain to the UK data protection authority.

If we are relying on your consent to process your personal information, which may either be express or implied consent depending on the circumstance, you have the right to withdraw that consent at any time. You can withdraw your consent by contacting us at support@xvoucher.com. 

THIS WILL NOT AFFECT THE LAWFULNESS OF THE PROCESSING BEFORE ITS WITHDRAWAL NOR, WHEN APPLICABLE LAW ALLOWS, WILL IT AFFECT THE PROCESSING OF YOUR PERSONAL INFORMATION CONDUCTED IN RELIANCE ON LAWFUL PROCESSING GROUNDS OTHER THAN CONSENT.

Switzerland

You have the right to (i) request access and obtain a copy of your personal information; (ii) request rectification or erasure of your personal information; (iii) restrict the processing of your personal information; (iv) to data portability; and (v) not be subjected to automated decision making. In certain circumstances you may have the right to object to the processing of your information entirely. 

If you believe that we are unlawfully processing your personal information, you may contact the Federal Data Protection and Information Commissioner of Switzerland.

If we are relying on your consent to process your personal information, which may either be express or implied consent depending on the circumstance, you have the right to withdraw that consent at any time. You can withdraw your consent by contacting us at support@xvoucher.com. 

THIS WILL NOT AFFECT THE LAWFULNESS OF THE PROCESSING BEFORE ITS WITHDRAWAL NOR, WHEN APPLICABLE LAW ALLOWS, WILL IT AFFECT THE PROCESSING OF YOUR PERSONAL INFORMATION CONDUCTED IN RELIANCE ON LAWFUL PROCESSING GROUNDS OTHER THAN CONSENT.

United States

Privacy regulations are not uniform across the United States, and as such your state of residency is an important consideration for determining your privacy rights. Please see the list below, and if you believe there is a error or omission please contact us at support@xvoucher.com 

We collect the following categories of personal information:

• Identifiers (i.e. Online identifiers, IP address, third party identifiers) 
• Personally Identifying Information (i.e. Name, Address, Email, Username)
• Commercial Information (i.e Transaction IDs)
• Internet Activity (ie. Browser activity when using our Service)
• Geolocation Data (i.e. Device Location) 

We will use and retain the collected personal information as needed to provide Services or for as long as the user has an active account with us. We may also collect additional information outside of this categories when you interact with us in person, online, or by phone or mail in the context of:

1. Receiving help though customer support channels
2. Participation in customer surveys
3. Facilitation in the delivery of our Services

We may capture and share your personal information through the usage of Beacons, Pixels, and Tags in circumstances outlined in this policy.

Your information may be disclosed to our service providers pursuant to a written contract between us and each service provider as outlined above. We may use your personal information for our own business purposes, such as internal research for future Service development and demonstration. 

This is not considered the sale or sharing of your personal information. We do not sell personal information to third parties for a business or commercial purpose, and any sharing is strictly limited to the contractual purposes outlined with the third party in question. We have disclosed the previous categories of information to third parties for a business or commercial purpose in the preceding twelve (12) months.

California Residents

The California Code of Regulations defines “residents” as:

1. Every individual who is in the State of California for other than a temporary or transitory purpose and,
2. Every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose.

“Shine The Light” Law

California residents are permitted to request and obtain from us, once per year and free of charge, information about categories of information we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with whom we have shared their personal information in the preceding calendar year.

CCPA Privacy Notice

Under the California Consumer Privacy Act (CCPA), you have the rights listed below:

Right to Deletion: You can ask for the deletion of your personal information. If you ask us to delete your personal information, we will delete your personal information subject to certain exceptions as provided by law such as the exercise of another consumer of their right to free speech, our compliance requirements resulting from a legal obligation, or any processing that may be required to protect against illegal activities.

Right to Know: You have the right to know the following:

• Whether we collect and user your personal information;
• The categories of personal information we collect;
• The purposes for which the collected personal information is used;
• If we sell or share your personal information with third parties;
• The categories of personal information shared or sold for a business purpose;
• The business purpose for collecting, selling, or sharing personal information;
• The specific pieces of personal information we have collected about you.

Right to Non-Discrimination: We will not discriminate against you should you exercise your privacy rights. However, we may not be able to provide you with services should you request the deletion of your personal information.

Right to Limit Sensitive Information: We do not process sensitive personal information.

Right to Object: You may object to the processing of your personal information. However, we may not be able to provide you with services should you object to the processing of information which is critical to the provision of Services.

Right to Correct: You may request that we make a correction to the information we hold on you should the information be incorrect or no longer relevant. 

Right to Opt-Out: You may request to opt out from future selling or sharing of your personal information to third parties. Upon receiving an opt-out request, we will act upon the request no later than fifteen (15) business days from the date of the request’s submission. However, we may not be able to provide you with services should you opt out of the processing of information which is critical to the provision of Services.

In the event you wish to exercise your rights, we will need to verify your identity to determine you are the same person about whom we hold information in our system. These verification efforts may require us to ask you to provide additional information so that we can match it with the information you have previously provided. We may also use other verification methods as circumstances dictate.

You may authorize an agent to make a request under CCPA on your behalf. We may deny a request from an authorized agent that does not submit adequate proof that they have been validly authorized to act on your behalf. 

We will only use information submitted during this process for the purpose of verifying your request. We will delete such additional provided information pursuant to your request after your identity has been confirmed. 

To exercise your rights please contact us at support@xvoucher.com 

Colorado Residents

Under the Colorado Privacy Act (CPA) you have the rights listed below. These rights are not absolute, and in certain cases, we may decline your request as permitted by law.

• Right to be informed whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of your personal data you have provided
• Right to opt-out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling to drive decisions that produce significant effects

To exercise your rights please contact us at support@xvoucher.com. Please note that the exercise of some of these rights may render us to be unable to provide further Service if the impacted data is essential to our business operations.

If we decline to take action on your request, you have the right to appeal the decision. Within forty-five (45) days of the receipt of an appeal we will inform you in writing of any action taken or not taken in response to your appeal. In addition we will include a written explanation of the reasons for our decision.

Connecticut Residents

The Connecticut Data Privacy Act (CTDPA) grants you the rights listed below. However, these rights are not absolute, and in certain circumstances, we may decline your request as permitted by law.

• Right to be informed whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of your personal data you have provided
• Right to opt-out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling to drive decisions that produce significant effects

To exercise your rights please contact us at support@xvoucher.com. Please note that the exercise of some of these rights may render us to be unable to provide further Service if the impacted data is essential to our business operations.

If we decline to take action on your request, you have the right to appeal the decision. Within sixty (60) days of the receipt of an appeal we will inform you in writing of any action taken or not taken in response to your appeal. In addition we will include a written explanation of the reasons for our decision.

Utah Residents

The Utah Consumer Privacy Act (UCPA) provides Utah residents with the rights listed below. These rights are not absolute, and in certain cases, we may decline your request as permitted by law.

• Right to be informed whether or not we are processing your personal data
• Right to access your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of your personal data you have provided
• Right to opt-out of the processing of your personal data if it is used for targeted advertising or the sale of personal data

To exercise your rights please contact us at support@xvoucher.com. Please note that the exercise of some of these rights may render us to be unable to provide further Service if the impacted data is essential to our business operations.

Virginia Consumers

Under the Virginia Consumer Data Protection Act (VCDPA) consumers have several rights related to their personal data. Under this legislation:

“Consumer” is defined as a natural person who is a resident of the Commonwealth of Virginia acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.

“Personal data” means any information which is linked or reasonably linkable to an identified or identifiable natural person. Personal data does not include de-identified data or publically available information. 

If the definition of consumer applies to you, we must adhere to the following rights relating to your Personal data:

• Right to be informed whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of your personal data you have provided
• Right to opt-out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling to drive decisions that produce significant effects

To exercise your rights please contact us at support@xvoucher.com. Please note that the exercise of some of these rights may render us to be unable to provide further Service if the impacted data is essential to our business operations.

We may request that you provide additional information reasonably required to verify you and your request. Upon receiving your request we will respond within forty-five (45) days of receipt. The response period may be extended once by an additional forty-five (45) days when necessary. We will inform you of any such extension as well as the reason for the extension.

You may authorize an agent to make a request under VCDPA on your behalf. We may deny a request from an authorized agent that does not submit adequate proof that they have been validly authorized to act on your behalf. 

If we decline to take action regarding your request, we will provide you with a written response indicating our decision and the reasoning behind it. You may appeal our decision, we have sixty (60) days from the receipt of your appeal to inform you in writing of any action taken or not taken in response to your appeal and an explanation of the decision. If your appeal is denied, you may contact the Virginia Attorney General to submit a complaint. 

Updates to This Policy

We may update this policy from time to time. The updated version will be indicated by an updated date at the beginning of the policy, and will be effective as soon as it is accessible. If we make material changes to this policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this policy frequently to be informed as to how we are protecting your information.

Contact Us

If you have questions or comments about this notice please contact us at:

support@xvoucher.com