Privacy Policy

Document History

Executive Summary

This is how we handle personal information. In short, three separate things happen here, and each has its own switch.

• If you visit the Site, the cookie banner decides whether analytics and advertising run in your browser.
• If you contact us, we use what you sent to reply to you.
• If we contact your business first, we found your details from a data provider or a public source. The cookie banner had nothing to do with it and the one-click unsubscribe link or a reply is how you stop it.

1. Who We Are

Andexor Network, Inc. ("Andexor," "we," "us," or "our") operates https://andexor.net/, including every page under that address (the "Site"). This Privacy Policy explains how we handle personal information. It is incorporated into our Terms of Service, and words defined there have the same meaning here. Sections 20 through 25 explain how we use cookies and similar technologies on the Site.

Andexor is the business, or "controller," responsible for the personal information this policy covers. Our contact details are in Section 19.

2. What This Policy Covers

By "personal information" we mean information that identifies, relates to, or could reasonably be linked to a particular person or household. Information that has been aggregated or de-identified so that it can no longer be linked to a person is not personal information.

This policy covers personal information about:

• visitors to the Site;
• people who contact us, through the Contact Us form, by email, by telephone, or by mail;
• client contacts, meaning the people who represent a business that has engaged us;
• prospects, meaning people whose contact details we obtained from a source other than the person, as described in Section 6; and
• security researchers who report an issue under our Security Policy.

3. What This Policy Does Not Cover

When we perform services for a client, we may handle personal information that belongs to the client, such as the visitors, subscribers, and customers of the client's own websites and other digital properties. We handle that information on the client's behalf and on its instructions, as its service provider or processor, under the Andexor Network, Inc. Services Agreement. The client's own privacy policy governs it. If you have a question or a request about that information, contact the client, and we will help the client respond.

4. Information We Collect

Information You Give Us

• Inquiry details. When you submit the Contact Us form or otherwise contact us, we collect what you send: typically your name, email address, telephone number, company name, website address, and the content of your message.
• Information about your website and business. If you ask for an audit, proposal, or quote, we collect and review information about your website and other digital properties in order to prepare it.
• Client account and billing details. If you engage us, we collect the names and contact details of your designated contacts, your billing details, and records of our dealings with you. Payments are handled by our payment processor; we do not store full payment card numbers.
• Feedback. Any ratings, reviews, testimonials, or other Feedback you give us, as described in the Terms of Service.
• Security reports. If you report a security issue, we collect what the Security Policy asks you to include: your contact details, a description of the issue, the date and time of your testing, the Internet Protocol (IP) address you tested from, any accounts or usernames you used, and how you would like to be credited.

Information Collected Automatically

• Server and security logs. Like most websites, our servers and our hosting and security providers record each request: IP address, date and time, the page requested, the referring page, the browser or agent identifier ("user agent"), and the response. This applies to automated agents and crawlers as well as to people.
• Device and usage information. With your permission, the analytics and advertising technologies described in Section 5 collect information such as cookie identifiers, pages viewed, links clicked, time on page, approximate location derived from your IP address (city or region, not a precise location), device type, browser, operating system, and how you arrived at the Site.

Information From Other Sources

• Lead Data. We obtain business contact and firmographic information from third-party data providers and public sources. See Section 6.
• Service providers and partners. We receive reports from our analytics and advertising providers about how visitors use the Site and respond to our advertising.
• Public sources. We may review publicly available information about your business, such as your website, business listings, and public social media profiles, when you ask us about our services or when we discover your business, website, or social profiles and look for opportunities to serve you.

Information we do not want. We do not ask for, and ask you not to send us, sensitive personal information: government identifiers, financial account or payment card numbers, account passwords, health information, precise geolocation, biometric or genetic information, or information about a person's race, ethnicity, religion, politics, union membership, sex life, sexual orientation, citizenship, or immigration status. We do not use or disclose sensitive personal information to infer characteristics about anyone.

You are not required by law to give us any information. If you choose not to, we may be unable to answer your inquiry or prepare what you asked for.

5. Cookies, Analytics, And Advertising Technologies

A cookie is a small file that a website stores in your browser. A pixel is a small piece of code that tells a third party that a page was loaded or an action was taken. We use three kinds of these technologies. Sections 20 through 25 explain them in more detail, and the Cookie Declaration in Section 25 lists every cookie the Site uses and lets you change your choice.

Google Analytics. Google Analytics is operated by Google LLC ("Google"). It sets cookies and collects the device and usage information described in Section 4. Google processes this information on our behalf to produce reports for us, and also uses it as described in How Google uses information from sites or apps that use our services. We have not enabled Google's advertising features in Google Analytics. Google offers a browser add-on that turns Google Analytics off on every site you visit.

Meta Pixel. The Meta Pixel is operated by Meta Platforms, Inc. ("Meta"). When it is allowed to run, it tells Meta that your browser visited the Site and what you did here, such as viewing a page or submitting the Contact Us form, together with cookie identifiers, your IP address, and browser information. If you have a Facebook or Instagram account, Meta may associate this activity with it. Meta uses this information to report results to us, to let us show our advertisements to people who have visited the Site and to people similar to them, and for its own purposes described in the Meta Privacy Policy. We do not send Meta the content of your message or the contact details you type into our forms. You can control whether Meta uses activity shared by websites and apps to personalize your experience through the Activity from other businesses setting in Meta's Accounts Center (Settings > Accounts Center > Ad preferences), as described in Meta's Help Center.

Your choice comes first. Analytics and advertising technologies stay off until you allow them in the cookie banner. You can change your choice at any time through the Privacy Settings link in the footer of every page, which opens the cookie banner again, or the Do Not Sell or Share My Personal Information link beside the copyright line, which opens the Cookie Declaration in Section 25. Declining has no effect on your ability to use the Site.

What the cookie banner does not do. The cookie banner controls only the analytics and advertising technologies on this Site. It does not identify you, and declining it does not tell us who you are. It does not cause and cannot stop an email or telephone call from us. If we contact your business and you have never dealt with us, it is because we found your business contact details as Section 6 describes, not because of anything you did or did not do on the Site. If you received a marketing email and do not wish to receive more, use the one-click unsubscribe link in the email. If you received a marketing phone call and do not wish to be called again, please tell us on the call. Or you may write to us, as Section 11 describes.

Global Privacy Control. If your browser or an extension sends a Global Privacy Control (GPC) signal, we treat it as a request from that browser to opt out of the sale and sharing of personal information and of targeted advertising, and advertising technologies stay off for that browser.

Your browser's settings also let you block or delete cookies. If you delete cookies, we will ask for your choice again on your next visit.

6. Lead Data

This Section explains how we handle information about people who have not dealt with us directly.

What it is

"Lead Data" is business contact and firmographic information that we buy or license from third-party data providers, or gather from public sources such as company websites, business directories, and public professional profiles. It typically includes a person's name, employer, job title, business email address, business telephone number, business address, professional profile address, and information about the business itself, such as its industry, size, location, and website. We also create simple inferences from it, such as whether a business is likely to be a good fit for a service. Lead Data has no connection to your visit to the Site or to your cookie choices.

What it is not

We do not buy or use Lead Data that includes sensitive personal information of the kinds listed in Section 4, information about anyone we know to be under 18, or precise geolocation. We do not knowingly buy Lead Data about people located in the European Economic Area, the United Kingdom, Switzerland, California, Oregon, Texas, or Vermont. We do not deliver to clients Lead Data about people or businesses located in California, Oregon, Texas, or Vermont, and we are not registered as a data broker in any state. We determine location from the business address and other location information in the record.

Lead Data is not a "consumer report." We do not provide it, and our clients may not use it, to decide anyone's eligibility for credit, insurance, employment, housing, or any similar purpose.

How we use it

We take reasonable steps to confirm that Lead Data is accurate and current before we use it, such as removing records that fail validation, removing duplicates, removing anyone who has opted out, and removing records for people or businesses located in California, Oregon, Texas, or Vermont from anything we deliver to clients. We also assess whether a business is likely to be a good fit before contacting it or delivering its record to a client.

• For our own marketing. We contact businesses that we believe may benefit from our services.
• For our clients. As part of our services, we deliver qualified Lead Data, other than Lead Data about people or businesses located in California, Oregon, Texas, or Vermont, to clients so that they can contact prospective customers of their own. A client that receives Lead Data from us must agree to use it only for its own lawful marketing, not to resell it, and to honor opt-out requests.

Your choices

Anyone, wherever they live, may ask us at any time to:

• tell them whether we hold Lead Data about them, what it is, and where we got it;
• correct it;
• delete it; or
• stop using it and stop delivering it to clients.

Send your request to privacy@andexor.net with the word "Leads" in the subject line. We will act on it within 45 days, free of charge. When you opt out or ask us to delete, we keep the minimum needed on a suppression list, such as your email address or phone number, so that we do not acquire or use your information again, and we pass your request on to any client that received your information from us. Every marketing email we send also contains a one-click unsubscribe link.

7. How We Use Information

Most people covered by this policy fall into one of three groups: visitors to the Site, people who contact us, and prospects whose contact details we obtained from another source. The bullets below say which group each use applies to, and Section 6 explains the prospect case in full.

We use personal information to:

• respond to your inquiry and prepare any audit, proposal, or quote you request;
• contact you by email or telephone about your inquiry, as the Terms of Service describe. You may ask us to stop at any time;
• provide, bill for, and support our services, and communicate with a client's designated contacts;
• market our services to businesses we believe may benefit from them, by email and telephone, using Lead Data as described in Section 6. We do not ask for permission before the first contact; every marketing email includes a one-click unsubscribe link, and you may tell us at any time to stop, by any channel;
• measure and target our advertising, as described in Section 5, but only if you allow advertising technologies in the cookie banner;
• deliver qualified Lead Data to clients, as described in Section 6;
• understand how the Site is used, and maintain and improve the Site and our services;
• protect the Site, our systems, our clients, and others, including by detecting and blocking abuse, enforcing our Terms of Service, and investigating and resolving security reports;
• credit a security researcher on the Site, but only if and as the researcher asks;
• comply with the law, respond to lawful requests, keep required records, and establish, exercise, or defend legal claims; and
• carry out any other purpose that we describe to you when we collect the information, or that you consent to.

We do not use personal information to make decisions about you by solely automated means that produce legal or similarly significant effects. We do not use personal information for purposes that are incompatible with those above without telling you first and, where the law requires it, obtaining your consent.

8. How We Disclose Information

What we do not do. We do not sell or rent, to anyone, the personal information of visitors, of people who contact us, or of our clients and their contacts, and we do not give it to anyone for their own marketing.

Two practices that some laws treat as a "sale," "sharing," or "targeted advertising." Some privacy laws define these terms broadly enough to cover the following, so we describe them plainly and give you a way to opt out of each:

• Advertising technologies. If you allow advertising in the cookie banner, the Meta Pixel discloses identifiers and Site activity to Meta, as described in Section 5. Opt out through the Do Not Sell or Share My Personal Information link or a Global Privacy Control signal.
• Lead Data delivered to clients. As described in Section 6, and never about people or businesses located in California, Oregon, Texas, or Vermont. Opt out by writing to privacy@andexor.net.

Other disclosures. We disclose personal information to:

• Service providers that work for us under contracts that limit their use of the information to that work: website hosting and content delivery, security and abuse prevention, email and telephone, customer relationship management, analytics, payment processing and accounting, data verification, and professional advisers such as lawyers and accountants.
• Lead Data providers, to the limited extent needed to match, verify, or suppress records, including to tell a provider that someone has opted out.
• Clients, as described in Section 6.
• The public, where you ask us to: a testimonial you have given us, or a security acknowledgement in the form you requested.
• Government authorities and others, where we believe in good faith that the law requires it, such as in response to a subpoena or court order, or where it is necessary to protect the rights, property, or safety of Andexor, our clients, or anyone else, to investigate fraud or a violation of our Terms of Service, or to establish or defend a legal claim.
• A successor, in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets. The successor may continue to use the information only as this policy describes, unless you agree otherwise.

We do not disclose a security researcher's identity to anyone outside Andexor without the researcher's consent, unless the law requires it.

9. How Long We Keep Information

We keep personal information only as long as we need it for the purposes in Section 7, and then delete or de-identify it. The periods below are our standard practice. We keep information longer where the law requires it, or where we need it to resolve a dispute or enforce an agreement.

10. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls based on least privilege, and contracts that require our service providers to protect the information they handle for us. No website or system is perfectly secure, and we cannot guarantee the security of information sent to us over the internet. Please do not send confidential or sensitive information through the Site.

If we learn of a security incident that affects your personal information, we will notify you and the appropriate authorities as the law requires.

If you believe you have found a security problem, please report it as our Security Policy describes, by email to security@andexor.net.

11. Your Choices

• Cookies and advertising. Use the cookie banner, the Privacy Settings or Do Not Sell or Share My Personal Information link in the footer of every page, or a Global Privacy Control signal. See Sections 5 and 24.
• Marketing email. Use the one-click unsubscribe link in any marketing email, or write to us. We may still send you messages about an inquiry or engagement you started.
• Telephone calls. Our calls are placed manually by a person; we do not use an autodialer or prerecorded or artificial-voice messages. Tell us on the call, or write to us, and we will stop, and we will add your number to our internal do-not-call list.
• Lead Data. See Section 6.
• Everything else. Write to privacy@andexor.net.

12. Your Privacy Rights

Privacy laws in a growing number of states give their residents rights over their personal information. These include California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, among others. Rather than treat people differently by state, we offer the rights below to every resident of the United States, whether or not a particular law applies to us or to you.

You may ask us to:

• confirm whether we hold personal information about you, and give you access to it;
• tell you the categories of sources it came from, and the third parties to whom we disclosed it;
• correct it if it is inaccurate;
• delete it;
• give you a portable copy of the information you provided to us;
• opt out of the sale or sharing of your personal information, of targeted advertising, and of profiling that produces legal or similarly significant effects (we do not engage in that kind of profiling); and
• appeal a decision we make about your request.

How to make a request. Write to privacy@andexor.net, call 855-ANDEXOR, or write to the mailing address in Section 19. To opt out of advertising technologies, you can also use the Do Not Sell or Share My Personal Information link or a Global Privacy Control signal; those do not require you to identify yourself.

How we verify. To protect you, we need to confirm that a request to access, correct, or delete comes from the person the information is about. We usually do that by replying to the email address we have on file for you, and we may ask for a small amount of additional information if what we hold is sensitive. We use what you give us for verification only. We do not verify opt-out requests.

Authorized agents. You may have someone make a request for you. We will ask the agent for proof of your signed permission, and we may ask you to confirm it with us directly.

When we respond. We complete most requests within a few business days, and in every case within 30 days. We act on opt-out requests as soon as we reasonably can, and never later than 15 business days.

Appeals. If we decline your request, we will say why. You may appeal by replying to our decision within 60 days. We will take a fresh look at the request and at our reasons, and answer in writing within 30 days. If you are still not satisfied, you may complain to the attorney general of your state.

No retaliation. We will not deny you service, charge you a different price, or treat you worse because you used any of these rights. We do not offer financial incentives in exchange for personal information.

Limits. These rights are not absolute. We may keep information that we need to complete a transaction you requested, to detect and investigate security incidents, to comply with the law, or to defend a legal claim, and we keep a suppression record after an opt-out so that the opt-out keeps working. In practice, the reasons we might not do all of what you ask are these:

• We cannot confirm that the request comes from the person the information is about. We will tell you what we need, and we act as soon as you provide it.
• The records are client billing records that we must keep for tax and accounting purposes, as the retention periods in Section 9 describe. We delete everything else and tell you what we kept.
• The record is your entry on our suppression list. Keeping it is what prevents your information from coming back to us from another source, so we keep the minimum needed for that purpose, as Section 6 describes.
• The records are tied to an open security investigation or legal dispute. We act when it is closed.
• The information belongs to a client and we hold it only as the client's service provider, as Section 3 describes. We direct you to the client and help the client respond.
• Giving you a copy of a record would also disclose another person's information. We give you what is yours and withhold the rest.

In every case, we will tell you which of these applies and what we did with the rest of your request.

13. Additional Information for California Residents

This Section gives the disclosures described in the California Consumer Privacy Act (CCPA), as amended. It describes our practices over the past 12 months and going forward.

We collect and use each category for the purposes in Section 7, disclose each category to the service providers described in Section 8 for those purposes, and keep each for the periods in Section 9.

Sale and sharing. We do not sell the personal information of California residents. We do not deliver Lead Data about people or businesses located in California to clients. Under the CCPA's definitions, allowing the Meta Pixel to run is "sharing" for cross-context behavioral advertising, and the recipient is Meta. You may opt out as described in Sections 5 and 12. We have no actual knowledge that we sell or share the personal information of anyone under 16.

Data broker registration. Andexor is not a "data broker" as defined in California's Delete Act, because we do not sell the personal information of consumers with whom we have no direct relationship, and we are not registered with the California Privacy Protection Agency as one.

Sensitive personal information. We do not collect it, and so do not use or disclose it for any purpose that would give rise to a right to limit its use.

Shine the Light. We do not disclose personal information to third parties for their own direct marketing. California residents may ask us once a year, free of charge, about any such disclosure.

Complaints. You may contact the California Privacy Protection Agency at https://cppa.ca.gov/ or the California Attorney General.

14. Additional Information For The European Economic Area, The United Kingdom, And Switzerland

This Section applies to you if you are in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, and the General Data Protection Regulation (GDPR), the UK GDPR, or the Swiss Federal Act on Data Protection applies to our handling of your personal information.

Controller. Andexor Network, Inc., at the address in Section 19, is the controller. You can reach us about any data protection matter at privacy@andexor.net.

Legal bases. We rely on the following:

Where we rely on legitimate interests, we have weighed them against your interests and rights. You may ask us for more information about that assessment.

Your rights. You have the right to ask us for access to your personal information; to have it corrected or erased; to have our use of it restricted; to receive the information you gave us in a portable format; and to object to our use of it where we rely on legitimate interests. You may object to direct marketing at any time, and we will stop. Where we rely on consent, you may withdraw it at any time, which does not affect what we did before you withdrew it. To use any of these rights, write to privacy@andexor.net. We respond within one month, and will tell you if a complex request needs up to two more.

Complaints. You may complain to the data protection authority where you live or work or where you believe a violation occurred. In the UK, that is the Information Commissioner's Office. We would appreciate the chance to address your concern first.

International transfers. We operate from the United States, and when you use the Site or contact us, your information goes directly to the United States, whose laws may not give the same protection as the laws where you live. When we or our service providers transfer personal information out of the EEA, the UK, or Switzerland, the transfer relies on an adequacy decision where one applies, or otherwise on the European Commission's Standard Contractual Clauses, with the UK or Swiss addendum where needed. You may ask us for a copy of the relevant safeguards.

Automated decisions. We do not make decisions about you by solely automated means that produce legal or similarly significant effects.

15. Children

The Site is not directed to anyone under 18, and we do not knowingly collect personal information from them. If you are under 18 and use the Site anyway, you may do so only with the consent of a parent or guardian, as the Terms of Service say. We do not knowingly sell or share the personal information of anyone under 18, or use it for targeted advertising. If you believe someone under 18 has given us personal information, write to legal@andexor.net and we will delete it.

16. Where We Process Information

The Site is operated from the United States, and the information you submit is processed and stored in the United States. Some of our service providers may process information in other countries. If you access the Site from outside the United States, you understand that your information will be handled in the United States, as this policy describes.

17. Third-Party Links And Services

The Site may link to third-party websites, tools, and services, including our pages on social media platforms. We do not control them, and this policy does not apply to them. Their own privacy policies govern what they collect.

18. Changes To This Policy

We may revise this policy at any time by posting a revised version on this page and updating the dates in the Document History section above. Revisions take effect on the Effective Date shown. If a revision materially changes how we use personal information that we have already collected, we will post a prominent notice on the Site before it takes effect and, where the law requires it, ask for your consent. Please check this page from time to time.

19. Contact

If you have a question about this policy, or want to use any of the rights or choices it describes, contact us anytime. That includes a question about cookies, or a cookie choice you cannot make work.

Email: privacy@andexor.net

Phone: 855-ANDEXOR

If you believe we have not kept to this policy, for example by missing the times in Section 12 or by not acting on an opt-out, write to legal@andexor.net and say so. Include everything you sent to privacy@andexor.net, such as your original request, the date you sent it, and any reply you received, so that the review can start without hunting for them, which would add further delay. We will review the matter separately from the request itself and reply within 10 business days.

20. Cookie Scope

This section and the ones that follow explain how we use cookies and similar technologies on the Site, and how to change your choice.

Your choice is stored in your browser for this Site only. A choice you make here does not carry over to other websites, to another browser or device, or to a different address such as a subdomain.

21. What Cookies Are

A cookie is a small text file that a website stores in your browser. Similar technologies do the same kind of job: pixels, tags, scripts, and the browser's local and session storage. We call all of them "cookies" in this policy.

Websites use cookies to keep the site working, to remember choices, to measure how the site is used, and to measure advertising. Blocking the ones a site needs can break parts of it.

22. The Four Cookie Categories

The cookie banner sorts cookies into categories. Only the first is always on.

• Necessary. Keep the Site working and secure, and remember your cookie choice. You cannot turn these off here, and the Site does not work properly without them.
• Preferences. Remember choices you make, such as how the Site looks or behaves for you. If you turn them off, some features may be less convenient.
• Statistics. Measure how many people visit, which pages they view, and how they arrived, so we can improve the Site. This data can include online identifiers, so we do not treat it as anonymous.
• Marketing. Measure how well our advertising works and let us show our advertisements to people who have visited the Site.

Statistics and Marketing stay off until you allow them. Each cookie is placed in the category that matches what it actually does on this Site, even when its provider also offers other services.

23. Who Sets Cookies

Some cookies come from us. Others come from companies we use for analytics and advertising, such as Google (Google Analytics) and Meta (the Meta Pixel). Those companies have their own policies for what they collect, and Section 5 describes how each one is used on the Site. The Cookie Declaration in Section 25 lists every cookie the Site uses, with its category, provider, purpose, and how long it lasts. A scan of the Site keeps that list current.

24. Your Cookie Choices

• Change or withdraw your consent. Use the Privacy Settings link in the footer of every page, which opens the cookie banner again, or the consent controls in the Cookie Declaration in Section 25. You can do this at any time. Withdrawing consent applies from then on; it does not undo what was collected while you had allowed it, and it does not ask the companies that already received the data to delete it.
• Global Privacy Control. If your browser or an extension sends a Global Privacy Control signal, we treat it as a request to opt out of the sale and sharing of personal information and of targeted advertising, and advertising cookies stay off for that browser.
• Browser settings. Your browser lets you block or delete cookies and site storage. Private browsing, clearing your browser data, or switching browsers or devices can reset your choice, and we will ask again on your next visit.
• Do Not Track. This older browser signal has no common standard, so the Site does not respond to it. Use Global Privacy Control instead.

Declining has no effect on your ability to use the Site.

25. Cookie Declaration