Privacy Policy

1. Information We Collect

• Contact form submissions: your name, email address, phone number, company name, budget range, selected service and any project details you write in the message field.
• Newsletter sign-ups: your email address.
• Client portal accounts: your email address, account credentials handled by our authentication provider, and the projects, messages and files you upload.
• Analytics data: pages viewed, referring site, approximate location derived from IP address, device and browser type, collected through cookies and similar technologies.
• Client social media data: when you engage us for social media management, we access data from platforms you authorize us to connect to on your behalf.

2. Why We Collect It

• To respond to enquiries and prepare quotes or proposals, including calling you back at the phone number you gave us when you submit a form on our site. Tell us at any time to stop calling (on the call, or by emailing info@xperiencelevels.com) and we will.
• To deliver and support the services you have engaged us for.
• To operate the client portal, including project status, messaging, files and invoicing.
• To send newsletters and marketing where you have opted in — you can unsubscribe at any time.
• To understand how the site is used so we can improve it.
• To meet legal, tax and accounting obligations.

3. Third-Party Platforms and Social Media APIs

Xperience Levels connects to third-party social media platforms — including Meta (Facebook and Instagram), YouTube, X and TikTok — on behalf of our clients, using each platform's official APIs and only with the account owner's explicit authorization.

Any data accessed through those platform APIs — including page and profile information, posts, comments, messages, insights and advertising metrics — is used solely to provide our social media management services to the client who authorized the connection. We never sell this data, never use it for advertising unrelated to that client, and never transfer it to data brokers. Access is revoked and the associated data deleted when the engagement ends or when the account owner disconnects our app, whichever comes first.

4. How Your Data Is Stored

Data is stored on managed cloud infrastructure with encryption in transit (HTTPS/TLS) and at rest. Access is limited to team members who need it to do their work, protected by authentication and role-based permissions. Client portal files are held in access-controlled storage tied to your account.

5. How Long We Keep It

• Contact form enquiries that do not become projects: up to 24 months, then deleted.
• Client project records, contracts and invoices: 7 years, to meet tax and accounting requirements.
• Client portal files and messages: for the life of the account, and deleted within 30 days of an account or deletion request.
• Newsletter subscriptions: until you unsubscribe.
• Analytics data: retained in aggregated form per our analytics provider's default retention window.

6. Who We Share It With

We share data only with service providers who help us operate, under contract and only for that purpose:

• Cloud hosting, database, authentication and file storage providers.
• Email delivery and newsletter providers used to send and receive messages.
• Telephone service providers (such as Twilio) that connect our calls.
• Analytics providers that measure site usage.
• Payment and crypto payment processors that handle invoices and subscriptions.
• Social media platforms, where you have authorized us to manage your accounts.
• Legal or regulatory authorities where we are required by law to disclose.

We do not sell your personal data, and we do not share it for third-party advertising.

7. Cookies

We use essential, preference and analytics cookies. You can control cookies through your browser settings. See our Cookie Policy for details.

8. Your Rights

You can ask us to:

• Access a copy of the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete your data — see our Data Deletion Instructions page.
• Withdraw consent for marketing or data processing.
• Restrict or object to certain processing.
• Receive your data in a portable format.

To exercise any of these rights, email info@xperiencelevels.com from the email address associated with your data. We respond within 30 days.

9. Text Messages (SMS)

XL Pay can text bill reminders (for example for rent or lease payments) on behalf of the businesses that use it. We only text people who agreed to get these messages and then confirmed by replying YES. Expect about 3 to 4 messages a month per bill. Message and data rates may apply. Reply STOP to any message to stop, or HELP for help; you can also email info@xperiencelevels.com or call 480-418-8171. Agreeing to texts is never a condition of paying.

Mobile phone numbers and text-message consent are never sold, rented or shared with third parties or affiliates for their marketing. We share them only with our texting provider (Twilio) to deliver the messages you asked for.

10. Children

Our services are not directed to children under 13, and we do not knowingly collect their data.

11. Changes to This Policy

We may update this policy as our services change. The "Last updated" date above always reflects the current version.

12. Contact

Xperience Levels — privacy requests: info@xperiencelevels.com. General enquiries: info@xperiencelevels.com or 480-418-8171 (or 702-470-3755).