At Xferdata, we are committed to protecting your privacy and securing your data. This policy explains how we collect, use, and protect your information when you use our data monetization platform.

Information We Collect

We collect information necessary to provide our data monetization analysis services:

Account information including name, email address, and company details to establish and manage your organization's account.
Your assessments and evaluations of your data assets to help determine their potential value and monetization opportunities.
Connection details and credentials for your supported databases, which are securely stored and encrypted.
Metadata and schema information from your connected data sources to analyze monetization potential and data quality.
Usage data and analytics about how your organization interacts with our platform to improve our services.
Technical information such as IP addresses and browser types to ensure platform security and optimal performance.

How We Use Your Information

Your information is used for the following purposes:

To provide and continuously improve our data monetization services, ensuring you receive the most value from our platform.
To conduct thorough analysis and assessment of your data's monetization potential, providing you with accurate valuations and opportunities.
To generate actionable insights and strategic recommendations tailored to your organization's data assets.
To communicate important updates about your account, service changes, and platform improvements.
To maintain platform security and prevent unauthorized access or abuse of our services.
We maintain strict controls and never access or analyze the actual content of your databases without obtaining your explicit permission first.

Data Security

Our comprehensive security measures include:

Implementation of industry-standard encryption protocols for all data in transit and at rest, ensuring maximum protection of your information.
Regular security audits and penetration testing conducted by independent third-party security firms.
Robust access controls and multi-factor authentication mechanisms to prevent unauthorized access.
Secure, isolated environments for data analysis with strict separation between customer instances.
Mandatory security awareness training for all team members with access to platform systems.

Data Access and Control

You retain complete control over your data with the following rights:

The ability to access and export your account information and analysis results at any time through our platform interface.
Full control to modify or update your database connection settings and access permissions.
The right to delete your account and all associated data from our systems upon request.
Options to revoke access to connected data sources immediately through our security controls.
The ability to request complete deletion of your data from our systems, with confirmation of removal.

Compliance

Our commitment to data protection includes:

Full compliance with GDPR requirements for processing and protecting data of EU residents and organizations.
Adherence to CCPA guidelines ensuring California residents' privacy rights are protected.
Maintenance of SOC 2 Type II certification, demonstrating our commitment to security and privacy.
Regular compliance audits and updates to our security practices and procedures.
Implementation of industry-standard data handling practices across all our operations.

For any privacy-related concerns or inquiries, you can reach our privacy team directly at privacy@xferdata.com for any questions or concerns about your data.

Last updated: May 2025