Privacy Policy

Effective Date: June 1, 2025  |  Last Updated: June 1, 2025

XtotheSpot ("we," "us," or "our") operates the website located at xtothespot.com (the "Site"). This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your information. By using the Site, you agree to the practices described in this policy.

1. Information We Collect

Information you provide directly:

• Account registration details (email address, password)
• Messages or inquiries submitted through our contact email
• Storefront partner application details

Information collected automatically:

• Log data: IP address, browser type, pages visited, referring URL, and timestamps
• Device information: operating system, screen resolution, and device type
• Cookie and session data (see Section 4)
• Aggregate usage analytics via Google Analytics (see Section 5)

2. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the Site and its features
• Process storefront partner applications and manage partner accounts
• Respond to your inquiries and provide customer support
• Monitor and analyze usage trends to improve user experience
• Detect and prevent fraudulent or abusive activity
• Send transactional emails (e.g., account verification, application status updates)
• Comply with applicable legal obligations

We do not sell or rent your personal information to third parties.

3. Affiliate Disclosure & Third-Party Links

XtotheSpot participates in affiliate advertising programs including, but not limited to, the Amazon Associates Program, Walmart Affiliate Program, and eBay Partner Network. When you click a product link and make a qualifying purchase, we may receive a small commission at no additional cost to you.

Our Site contains links to third-party retailer websites. Once you leave our Site, we have no control over the content or privacy practices of those websites. We encourage you to review the privacy policy of any site you visit.

4. Cookies & Similar Technologies

We use cookies and similar tracking technologies to enhance your experience on the Site. Cookies are small text files stored on your device. We use them to:

• Keep you logged in to your account
• Remember preferences and session state
• Collect anonymous analytics data

You can control or disable cookies through your browser settings. Note that disabling cookies may affect certain Site features, including account login.

5. Google Analytics

We use Google Analytics to understand how visitors interact with the Site. Google Analytics collects data such as pages viewed, time on site, and general geographic region. This data is aggregated and anonymous. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with services. You may request deletion of your account and associated personal data at any time by contacting us at [email protected].

7. Security

We implement industry-standard security measures — including HTTPS encryption and hashed password storage — to protect your information. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Site is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

9. Your Rights

Depending on your location, you may have the right to access, correct, or request deletion of your personal data. To exercise any of these rights, please contact us at [email protected].

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of the Site after any changes constitutes your acceptance of the revised policy.

11. Shopify App — Merchant Data

XtotheSpot offers a Shopify application ("the App") that allows merchants to connect their Shopify store to the XtotheSpot marketplace. This section describes how we collect and handle data obtained through the Shopify API in connection with the App.

Data we collect from Shopify merchants:

• Shop domain and store name (used to identify and associate your store with your XtotheSpot account)
• Shopify API access token (stored encrypted; used solely to read product and inventory data from your store)
• Product and variant data: titles, SKUs, barcodes, prices, images, and inventory levels
• Inventory webhook events (used to keep marketplace listings in sync with your store)

What we do not collect:

• We do not collect, store, or process any of your customers' personal information (names, emails, addresses, payment details, or order history)
• We do not access any Shopify data beyond the scopes explicitly granted: read_products and read_inventory

How merchant data is used:

• To match your Shopify product variants to listings in the XtotheSpot marketplace catalog
• To automatically activate or deactivate your marketplace listings when inventory changes in your Shopify store
• To display your product data within the App interface embedded in your Shopify Admin

Data sharing:

Merchant store data is not sold, rented, or shared with any third party except as required to operate the XtotheSpot marketplace (e.g., displaying matched product listings to buyers on xtothespot.com). We are bound by the Shopify API Terms of Service and handle all merchant data in accordance with those terms.

Data retention and deletion:

When a merchant uninstalls the App, we receive a Shopify app/uninstalled webhook and immediately deactivate all associated marketplace listings. You may request complete deletion of your store data at any time by contacting us at [email protected]. We comply with Shopify's mandatory GDPR webhooks for customer data requests, customer data deletion, and shop data deletion.

12. Contact

If you have questions about this Privacy Policy, please contact us at:
[email protected]
XtotheSpot — United States