Privacy Policy

Effective date: May 10, 2025


‍

Loxala Global, Inc., a Delaware corporation (“Loxala”, “us”, “we”, “Company” or “our”) is committed to ensuring that your privacy is protected and that your data stays safe.

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use Loxala.com services including our Loxala.com tools and services at Loxala.com; our mobile, tablet and other smart device applications, when applicable; or other Loxala services as well as other Loxala tools, surveys, technology and programs and all associated services (collectively, the “Loxala Platform”). This Privacy Policy is a legally binding agreement between you ("User", "you" or "your") and the Company. By accessing and using the Loxala Platform, you acknowledge that you have read, understood, and agree to be bound by the terms of this Agreement. This Policy does not apply to the practices of companies that we do not own or control.

We use your data to provide and improve the Loxala Platform. By using the Loxala Platform, you agree to the collection and use of information about you and your property in accordance with this policy now and as amended by us. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms of Use.

Definitions

  • Personal Data:  Personal Data means data about a living individual who can be identified from that data (or from other information either in our possession or likely to come into our possession).
  • Usage Data:  Usage Data is data collected automatically either generated by the use of the Loxala Platform or from the Loxala Platform infrastructure itself (for example, the duration of a page visit).
  • Cookies:  Cookies are small pieces of data stored on your device (computer or mobile device).
  • Data Controller:  Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed.  For the purpose of this Privacy Policy, we are a Data Controller of your Personal Data.
  • Data Processors (or Service Providers):  Data Processor (or Service Provider) means any natural or legal person who processes the data on behalf of the Data Controller.  We may use the services of various Service Providers in order to process your data more effectively.
  • Data Subject (or User):  Data Subject is any living individual who is using our Loxala Platform and is the subject of Personal Data.

Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Loxala Platform to you.  Our information collection includes using cookies on a computer/handheld device or using or touching information in any way, including, but not limited to, collecting, storing, deleting, using, combining and disclosing information, all of which activities will take place in the United States. If you reside outside the United States your information will be transferred, processed and stored there under United States privacy standards.

Types of Data Collected

‍

Personal Data

‍

While using our Loxala Platform, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:

  • Account Registration Information
  • Data relating to your job history
  • Email address
  • First name and last name
  • Cookies and Usage Data
  • Resumes and CVs
  • Personal Information that you choose to provide in creating and managing your profile
  • Basic Identifiers: Name, email address, postal address, IP address, and geolocation data (approximate location based on IP).
  • Financial Information: Payment data, processed securely through Stripe (Loxala does not store credit card details directly).
  • Contact Data: Phone number and address for identity verification and communication.
  • Sensitive Data: Geolocation, date of birth, and government ID for identity verification, meeting KYC/AML requirements.
  • User ID and basic profile details.
  • Freelancer portfolios, project deliverables, and work samples uploaded by users to showcase skills or complete projects.
  • IP addresses of individuals when using the Loxala Platform

More specifically, Loxala collects specific data from users who participate in our Referral Program, including full name, email address, country of residence, website or social media links, a brief description of online presence, traffic and audience insights (such as monthly page views or social media follower counts), and consent to Loxala's affiliate program terms. This data is used to support our Referral Program, ensuring compliance with guidelines and policies.

We may use your Personal Data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you, and we may share your information with third parties for marketing and sales purposes. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we or our partners send.

Usage Data

‍

We may also collect information that your browser sends whenever you visit our Loxala Platform or when you access the Loxala Platform by or through a mobile device.  This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Loxala Platform that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.  When you access the Loxala Platform by or through a mobile device, this Usage Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.  The Loxala Time Tracker captures and stores screenshots of users' screens, which are securely hosted in our database. These records help verify work progress and assist in resolving disputes.

Additionally, we automatically collect device and network data such as IP address, device details, and browsing history on the platform, as well as usage information including pages visited, links clicked, and interactions with our services. We use cookies and pixel tags for functionality, performance, analytics, and targeted advertising. Login timestamps, device information, and geolocation data are also collected to monitor user access, detect suspicious activity, and enhance security. Personal information is also collected directly from you when you create an account, including your name, email address, postal address, password, and optional profile photo. For identity verification purposes, we may collect data through third parties, such as Stripe, to meet KYC/AML compliance requirements. Payment data is processed securely through Stripe, and we do not store credit card details directly. If you contact us or engage with customer support, we may collect data related to these communications and may also record video calls between clients and freelancers for dispute resolution and quality assurance purposes. Furthermore, if you use social logins (e.g., Google or Apple) for account creation, we may collect limited profile information from these third-party platforms. Additionally, we may gather information from publicly accessible sources when relevant to our services.  Messages exchanged on the platform, video call logs (but not recordings), and task updates are collected to monitor quality, manage disputes, and improve user experience.

Location Data

‍

We may use and store information about your location if you give us permission to do so (“Location Data”). We use this data to provide features of our Loxala Platform, to improve and customize our Loxala Platform.  Geolocation data may also be collected as part of compliance with KYC/AML requirements and to detect suspicious activity. You can enable or disable location services when you use our Loxala Platform at any time, through your device settings.

Video Call Recording

‍

Loxala records video calls conducted through the platform to maintain quality standards, resolve disputes, and ensure compliance with our policies.

Chat Message Monitoring

Loxala reserves the right to review chat messages exchanged on the platform. This monitoring is conducted to uphold platform quality, address user concerns, and handle dispute cases as needed.

Tracking & Cookies Data

‍

We use cookies and similar tracking technologies to track the activity on our Loxala Platform and hold certain information.  Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Loxala Platform. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Loxala Platform.

Examples of Cookies we use:

  • Session Cookies. We use Session Cookies to operate our Loxala Platform.
  • Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
  • Security Cookies. We use Security Cookies for security purposes.

Use of Data

‍

Please note that we never sell your information to any third party. Company may use your collected data for various purposes, including, but not limited to:

  • To provide and maintain our Loxala Platform
  • To notify you about changes to our Loxala Platform
  • To allow you to participate in interactive features of our Loxala Platform when you choose to do so
  • To provide customer support
  • To gather analysis or valuable information so that we can improve our Loxala Platform
  • To monitor the usage of our Loxala Platform
  • To detect, prevent and address technical issues
  • To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information

Additionally:

‍

  • Master Talent Program: Loxala collects additional supporting materials, such as certifications and portfolio samples, from freelancers applying to become Master Talent. This data is used to evaluate applications and facilitate faster approval.
  • Loxala Enterprise Contracts: Loxala partners with DocuSign to provide legally binding contracts for Loxala Enterprise participants, ensuring validity and enforceability for freelancers and clients.
  • Loxala Academy: Loxala collects user feedback to develop industry-specific courses, tailoring our offerings to meet user interests.
  • Community Content Monitoring: To maintain a safe and professional environment, Loxala actively monitors user-generated content for compliance with platform guidelines and removes content related to prohibited topics such as political or adult material.

Intellectual Property and Copyright Protection

Loxala hosts user-submitted portfolios and project deliverables, actively monitoring for unauthorized use or reproduction to ensure compliance with copyright laws and safeguard user intellectual property.

Legal Basis for Processing Personal Data Under General Data Protection Regulation (GDPR)

If you are from the European Economic Area (EEA), Company legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it.

Company may process your Personal Data because:

‍

  • We need to perform a contract with you
  • You have given us permission to do so
  • The processing is in our legitimate interests and it’s not overridden by your rights
  • For payment processing purposes
  • To comply with the law

Retention of Data

Company will use commercially acceptable means to retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. We minimize the storage of sensitive information. Currently, only user passwords are stored, and these are securely hashed and salted. Payment-related data is managed exclusively through PCI DSS-compliant services like Stripe, ensuring sensitive financial information is handled securely outside our environment. Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Loxala Platform, or when we are legally obligated to retain this data for longer periods.

Transfer of Data

Your information, including Personal Data, may be transferred to, and maintained on, computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.  If you are located outside United States and choose to provide information to us, please note that we may transfer the data, including Personal Data, to United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.  Company will use commercially acceptable means to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Business Transaction

If Company is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will use commercially acceptable means to provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

Disclosure for Law Enforcement

Under certain circumstances, Company may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency, the IRS, etc.).

Legal Requirements

Company may disclose your Personal Data in the good faith belief that such action is necessary to:

  • To comply with a legal obligation
  • To prevent or investigate possible wrongdoing in connection with the Loxala Platform
  • To protect the personal safety of users of the Loxala Platform or the public
  • To protect against legal liability

California Online Privacy Protection Act (CalOPPA)

We do not support Do Not Track (“DNT”). Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked.  You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.  In addition to the rights as explained in this Policy, California residents who provide Personal Information (as defined in the statute) to obtain products or services for personal, family, or household use are entitled to request and obtain from us, once a calendar year, information about the Personal Information we shared, if any, with other businesses for marketing uses. If applicable, this information would include the categories of Personal Information and the names and addresses of those businesses with which we shared such personal information for the immediately prior calendar year (e.g., requests made in the current year will receive information about the prior year). To obtain this information please contact us.

If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit https://oag.ca.gov/privacy/ccpa.

Your Data Protection Rights Under General Data Protection Regulation (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. Company aims to take commercially acceptable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

  • The right to access, update or to delete the information we have on you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
  • The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
  • The right to object. You have the right to object to our processing of your Personal Data.
  • The right of restriction. You have the right to request that we restrict the processing of your personal information.
  • The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
  • The right to withdraw consent. You also have the right to withdraw your consent at any time where Company relied on your consent to process your personal information.

Please note that we may ask you to verify your identity before responding to such requests. You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).

Service Providers

We may employ third-party companies and individuals (“Service Providers”) to facilitate and support the Loxala Platform, perform platform-related services, process payments, provide analytics, and assist with communication. These third parties may have access to limited Personal Data strictly for the purpose of performing their specific tasks on our behalf. Users may opt-out of certain types of data sharing with these third parties, subject to the opt-out policies provided by the third parties.

Security of Data

The security of your data is critically important to us. While we strive to use commercially acceptable means to safeguard your Personal Data and employ industry-leading practices, it is important to note that no method of transmission over the Internet or electronic storage is 100% secure. Despite our efforts to protect your information, we cannot guarantee its absolute security.  In the event of a data breach, Loxala will notify affected users via email, providing details about the breach and any recommended actions users should take.

We may use the following tools, but not limited to:

  • Amazon Web Services (AWS)

We utilize secure cloud storage and hosting services, including Amazon Web Services (AWS), to protect user data.  For more information on the privacy practices of AWS, please visit the AWS Privacy & Terms: https://aws.amazon.com/privacy/

  • Xano

Loxala uses Xano as a secure backend platform to manage APIs, process data, and handle server-side operations. Xano hosts data on reputable cloud providers and applies modern data protection practices. Learn more at Xano Privacy Policy https://legal.xano.com/privacy-notice

Multi-Factor Authentication (MFA)

‍

We implement MFA to enhance security by requiring users to verify their identity through multiple methods before accessing their accounts. Users may need to provide a one-time code sent to their mobile device or use biometric verification, such as fingerprint scanning. MFA ensures that unauthorized access is prevented even if passwords are compromised.

Analytics

We may use third-party Service Providers to monitor and analyze the data shared from your use of our Loxala Platform, including, but not limited to:

  • Google Analytics and Google Tag Manager

Google Analytics is a web analytics service provided by Google that tracks and reports website traffic. Google uses the data collected to monitor and analyze the use of the Loxala Platform. This data may be shared with other Google services and used by Google to contextualize and personalize ads on its advertising network.

Users can opt out of Google Analytics tracking by using the Google Analytics Opt-Out Browser Add-on or by adjusting their cookie preferences on the Loxala Platform. For more information on Google's privacy practices, please visit the Google Privacy & Terms web page.

Payments

‍

We may provide paid products and/or services within the Loxala Platform. In that case, we use third-party services for payment processing (e.g. payment processors). We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

The payment processors we work with include, but are not limited to:

  • Stripe

Stripe is used for secure payment processing. Opting out of data sharing with Stripe may affect payment functionality, as it is required for transactions. For more on Stripe’s data handling, please refer to the Stripe Privacy Policy https://stripe.com/privacy.

Customer Relationship Management (CRM)

‍

We maintain certain data about our users to enable us to provide the tools and services on the Loxala Platform, including, but not limited to:

  • Salesforce

We use Salesforce to manage customer relationships, track user interactions, and support our sales, support, and onboarding workflows. Salesforce securely stores customer data and enables efficient communication and service delivery across our platform.
 For more information on the privacy practices of Salesforce, please visit: https://www.salesforce.com/company/privacy

Communications Platforms

‍

Loxala provides secure, integrated communication features to support interactions between users on the platform. These include:

  • Video Communication

We offer a built-in video call system that allows users to communicate directly through the platform. Call logs (such as time, participants, and duration) may be securely stored to ensure quality assurance, resolve disputes, and enforce platform policies. We do not use external video conferencing services for this functionality.

  • Real-Time Messaging

The platform includes a real-time messaging feature that enables users to exchange direct messages. Message data may be stored and monitored as necessary to maintain safety, support dispute resolution, and uphold platform standards.

Social Media Platforms

‍

Company uses social media platforms for certain tools and services on the Loxala Platform, including but not limited to:

  • Facebook

For more information on the privacy practices of Facebook, please visit Facebook’s Data Policy: https://www.facebook.com/privacy/explanation

  • Instagram

Instagram services are provided by Instagram, Inc.

You can learn more about the privacy practices and policies of Instagram by visiting their Data Policy page: https://help.instagram.com/519522125107875

  • LinkedIn

You can opt-out of LinkedIn Sponsored Messaging remarketing by visiting: https://www.linkedin.com/help/linkedin/answer/62649/opt-out-of-sponsored-messaging?lang=en

You can learn more about the privacy practices and policies of LinkedIn by visiting their Privacy Policy page:  https://www.linkedin.com/legal/privacy-policy

  • YouTube

YouTube is a service provided by Google LLC.
For information on YouTube’s privacy practices, please refer to the Google Privacy Policy: https://policies.google.com/privacy

  • X (formerly Twitter)

X is a social media platform operated by X Corp. (formerly Twitter, Inc.).
 To learn more about X’s data practices, visit their Privacy Policy: https://x.com/en/privacy

Generative Artificial Intelligence

‍

  • OpenAI: OpenAI is used for content moderation to maintain a professional environment. Data shared with OpenAI is limited to content moderation.

You can learn more about the privacy practices and policies of OpenAI by visiting their Privacy Policy page:  https://openai.com/enterprise-privacy

Links to Other Sites

Our Loxala Platform may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.  We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Children Under the Age of 18

Our Loxala Platform is not intended for children under 18 years of age. No one under age 18 may provide any personal information to or on the Loxala Platform. We do not knowingly collect personal information from children under 18. If you are under 18, do not use or provide any information on this Loxala Platform or through any of its features, register on the Loxala Platform, use any of the interactive or public comment features of this Loxala Platform, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or username you may use. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at [email protected].

*California residents under 16 years of age may have additional rights regarding the collection of their personal information. Please see https://oag.ca.gov/privacy/ccpa

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.  You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

‘’Make a data request’’

Contact Us

If you have any questions about this Privacy Policy, please contact us: