Privacy Policy

Last updated: September 8, 2026

At XMagnet ("XMagnet," "we," "us," or "our"), we are committed to protecting your privacy and handling personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit https://xmagnet.ai, create an account, or use the XMagnet platform and services (the "Services").

This Privacy Policy should be read together with our Terms of Service and Product Terms & Conditions.

1. Who This Policy Applies To

XMagnet is a B2B platform used by businesses. This Policy describes our practices in two different roles:

  • As a controller — for information about our website visitors, account holders, and the individuals who administer or use the Services.
  • As a processor / service provider — for the contact and campaign data our customers upload, obtain, or process through the Services ("Customer Data"). For that data, our customer acts as the controller, and we process it on their behalf under our agreements and applicable law.

2. Information We Collect

Information you provide

  • Name, email address, phone number, company name, and job title
  • Account credentials and profile or billing details
  • Content you submit through forms, support requests, or communications with us

Customer Data you process through the Services

When you use XMagnet, you may upload, import, discover, enrich, or otherwise process contact and company information (such as names, business email addresses, phone numbers, job titles, employers, and related business attributes). We process this Customer Data on your behalf to provide the Services. You are responsible for having the rights and lawful basis required to provide and use this data.

Data from third-party sources

Certain features rely on third-party data providers to supply business contact and company information. This information may be made available to you through the Services subject to these terms and applicable law.

Usage & device data

  • IP address, browser type and version, and device and diagnostic data
  • Pages visited, referring pages, dates and times, and time spent
  • Product usage, feature interactions, and log data

Cookies & tracking technologies

We use cookies and similar technologies to operate the site, remember preferences, and analyze traffic. Where required, we load analytics and advertising tags only after you consent through our cookie preferences (managed via Google Consent Mode). You can change your choice at any time using the cookie preferences control on the site.

3. How We Use Information

  • Provide, operate, secure, maintain, and improve the Services
  • Create and manage your account and process transactions
  • Respond to inquiries and provide customer support
  • Monitor usage, prevent abuse, and protect platform and email deliverability
  • Send service, security, and administrative communications
  • Send marketing communications where permitted, which you may opt out of at any time
  • Comply with legal obligations and enforce our terms

Where the GDPR or similar laws apply, we rely on legal bases including performance of a contract, our legitimate interests (such as operating and securing the Services), your consent (such as for certain cookies or marketing), and compliance with legal obligations.

4. How We Share Information

We do not sell your personal information. We may share information in the following cases:

  • Service providers: vendors who help us operate the Services (for example, hosting, email infrastructure, data enrichment and validation, analytics, and payment processing), under obligations to protect the data.
  • Third-party data providers: to provide contact and company data features.
  • Legal & safety: where required by law or legal process, or to protect rights, safety, and the integrity of the Services.
  • Business transfers: in connection with a merger, acquisition, financing, or sale of assets.
  • With your direction: such as integrations you choose to enable.

5. Email Communications Sent Through the Services

Our customers use XMagnet to send email campaigns to their own recipients. XMagnet is not the sender of those messages and does not control their content. If you received an email sent through XMagnet and wish to unsubscribe or have your information removed, please use the unsubscribe option in that email or contact the sender directly. You may also contact us at privacy@xmagnet.ai and we will use reasonable efforts to route your request to the relevant customer.

6. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Customer Data is retained in accordance with our customer agreements and is deleted or returned as required. Retention periods vary depending on the type of data and the purpose for which it is held.

7. International Data Transfers

XMagnet operates internationally, and your information may be processed in countries other than the one in which you reside. Where we transfer personal information across borders, we implement appropriate safeguards as required by applicable law.

8. Your Privacy Rights

Depending on your location, you may have the right to:

  • Access, correct, update, or delete your personal information
  • Object to or restrict certain processing
  • Withdraw consent where processing is based on consent
  • Request data portability
  • Opt out of marketing communications
  • Lodge a complaint with a supervisory authority

To exercise these rights, contact us at privacy@xmagnet.ai. If your request relates to Customer Data that we process on behalf of one of our customers, we will refer your request to that customer.

9. Security

We use appropriate technical and organizational measures designed to protect personal information. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Third-Party Links

Our website and Services may link to third-party sites or services. We are not responsible for their content or privacy practices, and we encourage you to review their policies.

11. Children's Privacy

The Services are intended for businesses and are not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "Last updated" date. Your continued use of the Services after an update becomes effective constitutes acceptance to the extent permitted by law.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: