Privacy Policy

The data controller responsible for personal information processed through CrossResearch is:

Crossresearch.io

This Policy applies when you visit the CrossResearch website, create or use an account, purchase or manage a subscription, use CrossResearch research or analytical products, interact with AI-powered functionality, communicate with us, subscribe to marketing communications or otherwise use the CrossResearch Services.

"Personal data" or "personal information" means information relating to an identified or identifiable individual.

Depending on how you interact with CrossResearch, we may process: Account and Contact Information This may include your name, username, email address, account identifiers, country or region, authentication information and information you voluntarily provide through your account.

Subscription and Transaction Information When you purchase a subscription or other paid Service, we may receive information such as your subscription plan, billing status, transaction identifier, purchase date, currency, billing country, payment status and related records.

Payment-card or banking details may be processed directly by third-party payment processors.

CrossResearch generally receives the information necessary to confirm and administer the transaction rather than full payment-card credentials.

Product and Usage Information We may collect information about how you interact with CrossResearch, including pages or features accessed, research viewed, settings, preferences, searches, interactions with tools, subscription usage, session information and technical events.

Device, Security and Log Information We may process IP addresses, browser type, operating system, device information, timestamps, authentication events, error logs and similar technical information.

This information may be used to operate the Services, detect fraud and abuse, enforce our Terms, diagnose technical problems and protect users and CrossResearch.

AI and User-Submitted Content When you interact with AI-powered or interactive features, we may process prompts, questions, instructions, uploaded or submitted content, configurations and resulting outputs to provide the requested functionality.

Users should avoid submitting information they are not authorized to disclose.

Communications If you contact CrossResearch, we may process your contact information and the contents of communications, support requests, feedback and associated records.

Marketing Preferences We may process whether you have subscribed to, opened, interacted with or unsubscribed from marketing or informational communications.

Referral and Affiliate Information Where referral or affiliate programs are used, CrossResearch may process referral identifiers, referral sources, clicks, conversions and related information necessary to operate, attribute and prevent abuse of those programs.

Cookies and Similar Technologies CrossResearch may use cookies, local storage, pixels or similar technologies as described below.

CrossResearch may process personal information to:

• create, authenticate and administer user accounts;
• provide research, software, AI functionality and other Services requested by users;
• process and administer subscriptions and transactions;
• maintain user settings, preferences and product history;
• provide customer support;
• communicate important account, security or service information;
• maintain, troubleshoot and improve the Services;
• understand product performance and usage;
• prevent fraud, unauthorized account sharing, scraping, abuse and cybersecurity threats;
• enforce our Terms and protect CrossResearch's legal and intellectual-property rights;
• maintain accounting, tax and transaction records;
• comply with legal obligations and lawful requests;
• administer referral or affiliate programs;
• send marketing communications where legally permitted; and
• establish, exercise or defend legal claims.

Where laws such as the GDPR or similar legislation require a legal basis, CrossResearch may rely on one or more of the following: Performance of a contract: where processing is necessary to create an account, provide a subscription, deliver requested functionality or otherwise fulfil our agreement with you.

Legitimate interests: where processing is reasonably necessary to operate, secure, improve and protect CrossResearch, prevent abuse, understand service performance, communicate with users or protect our legal rights, provided those interests are not overridden by applicable individual rights.

Consent: where required, including for certain marketing communications, optional cookies or other processing for which consent is the appropriate legal basis.

Legal obligations: where processing is necessary to comply with applicable tax, accounting, regulatory, judicial or other legal requirements.

Legal claims and protection of rights: where information is reasonably necessary to establish, exercise or defend legal or contractual rights.

Where processing relies on consent, consent may be withdrawn subject to applicable law.

Information submitted to AI-powered functionality may be processed by CrossResearch and technical service providers used to operate those features.

Such processing may include transmission of relevant prompts or contextual information to infrastructure or AI service providers where necessary to generate requested outputs.

CrossResearch will seek to limit disclosures to information reasonably required to provide the functionality.

Users should not submit confidential, sensitive, regulated or third-party personal information unless they have the appropriate right and a legitimate reason to do so.

CrossResearch does not use AI-generated financial analysis to make legal or similarly significant decisions about users solely through automated processing.

CrossResearch may use cookies and similar technologies for purposes including: Essential functionality: authentication, account security, session management and technical operation.

Preferences: remembering settings and user choices.

Analytics: understanding how the Services are used and identifying technical or product improvements.

Marketing or attribution: measuring campaigns, referrals or conversions where applicable.

Where applicable law requires consent before non-essential cookies or similar technologies are used, CrossResearch will request such consent.

Users may be able to manage their preferences through a cookie-management interface or applicable browser controls.

Disabling certain technologies may affect some functionality.

CrossResearch may send product updates, research communications, newsletters, offers or similar marketing communications where permitted by applicable law.

Users may opt out of marketing emails using the unsubscribe mechanism provided in those communications or by contacting CrossResearch.

Opting out of marketing does not prevent CrossResearch from sending necessary transactional, subscription, account, legal or security communications.

CrossResearch does not disclose personal data indiscriminately.

Information may be shared with carefully selected third parties where reasonably necessary for the purposes described in this Policy, including: Infrastructure and hosting providers used to operate the platform.

AI and technology providers used to provide analytical or interactive functionality.

Payment processors and billing providers used to administer transactions and subscriptions.

Email and communication providers used to send requested or permitted communications.

Analytics, security and fraud-prevention providers used to understand product usage and protect the Services.

Professional advisers , including lawyers, accountants, auditors or insurers, where reasonably necessary.

Authorities or legal parties where disclosure is required by applicable law, lawful legal process or to establish, exercise or defend legal rights.

Corporate transaction parties where CrossResearch is involved in a merger, financing, acquisition, reorganization, sale of assets or similar transaction, subject to appropriate legal safeguards.

Personal information may also be disclosed at the user's direction or with the user's authorization.

Service providers processing information on CrossResearch's behalf are expected to process it consistently with applicable contractual and legal requirements.

CrossResearch may contain links to third-party websites, brokers, platforms, providers or other services.

Third parties operate under their own privacy practices, and CrossResearch is not responsible for how an independent third party processes information after a user leaves or interacts separately from the CrossResearch Services.

Where CrossResearch receives affiliate or referral compensation, appropriate referral identifiers or conversion information may be processed for attribution, accounting and fraud-prevention purposes.

Affiliate compensation does not give the third party unrestricted access to CrossResearch user information.

CrossResearch does not sell personal data to third parties for monetary consideration.

Certain data-protection laws may define terms such as "sale," "sharing" or targeted advertising more broadly than an ordinary commercial sale.

If CrossResearch engages in processing that triggers specific opt-out rights under applicable law, CrossResearch will provide the disclosures and controls required by that law.

CrossResearch may use service providers or infrastructure located in countries other than the country in which a user resides.

As a result, personal data may be processed internationally.

Where applicable data-protection law requires safeguards for international transfers, CrossResearch will use an appropriate legal mechanism, which may include adequacy decisions, approved contractual protections or other lawful transfer mechanisms.

CrossResearch retains personal information only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal, operational, security and accounting requirements.

Retention periods may differ depending on the type of information.

For example, account information may generally be retained while an account remains active; transaction and billing records may be retained for periods required by tax or accounting law; security records may be retained where reasonably necessary for fraud and abuse prevention; support records may be retained for operational and legal purposes; and marketing information may be retained until a user withdraws or opts out, subject to records necessary to respect that choice.

Where information is no longer required, CrossResearch may delete or anonymize it.

Information may be retained for a longer period where reasonably necessary to establish, exercise or defend legal claims, investigate fraud or infringement, comply with legal requirements or preserve evidence of Terms or intellectual-property violations.

Users may request deletion of their account and associated personal information subject to applicable legal and operational requirements.

Deletion does not necessarily require immediate removal of information that CrossResearch must retain for legal obligations, financial records, fraud prevention, security, dispute resolution or the establishment or defence of legal claims.

Information that has been properly anonymized and can no longer reasonably identify a user may also be retained.

CrossResearch uses reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss or misuse.

Measures may include access controls, authentication, encryption in transit, security monitoring, restricted administrative access and other protections appropriate to the nature of the Services.

No electronic system, transmission method or storage system can be guaranteed to be completely secure.

Users are responsible for protecting their login credentials and should promptly notify CrossResearch if they believe their account has been compromised.

Depending on where a user resides and applicable law, users may have rights relating to their personal data, including rights to:

• receive information about how personal data is processed;
• access personal data held about them;
• correct inaccurate or incomplete information;
• request deletion of personal data in certain circumstances;
• restrict certain processing;
• object to certain processing;
• withdraw consent where processing relies on consent;
• receive eligible information in a portable format;
• object to direct marketing;
• lodge a complaint with an applicable data-protection authority; and
• exercise other rights provided by applicable privacy legislation.

These rights may be subject to legal limitations or exceptions.

CrossResearch may request reasonable information necessary to verify the identity and authority of the person making a privacy request.

CrossResearch will not unlawfully discriminate against a user for exercising applicable privacy rights.

Requests may be submitted to:

admin@crossresearch.io

CrossResearch is intended for adults and is not directed toward children under 18.

CrossResearch does not knowingly seek to collect personal information from children through the Services.

If CrossResearch becomes aware that personal information from a child has been collected contrary to applicable requirements, reasonable steps will be taken to delete or otherwise appropriately handle that information.

CrossResearch does not require users to provide sensitive personal information such as medical data, biometric data, political opinions, religious beliefs or similar specially protected information for ordinary use of the Services.

Users should not submit such information through prompts, uploads, communications or other interactive functionality unless specifically requested for a legitimate and lawful purpose.

CrossResearch may preserve or disclose information where reasonably believed necessary to comply with applicable law or lawful legal process, respond to competent authorities, investigate fraud or cybersecurity incidents, enforce the Terms, protect users, establish or defend legal claims, or investigate and enforce intellectual-property rights.

Any such processing remains subject to applicable law.

CrossResearch may update this Privacy Policy to reflect changes in its Services, technology, data practices or legal obligations.

The current version and effective date will be published through the CrossResearch website.

Where required by applicable law, material changes will be communicated through an appropriate notice.

Questions, requests or concerns relating to this Privacy Policy or CrossResearch's processing of personal information may be directed to:

admin@crossresearch.io

Users who are entitled under applicable law to complain to a supervisory or data-protection authority retain the right to do so.