Privacy Policy
At ETAPX, we are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information. This Privacy Policy explains our data practices across all ETAPX services including Whistlr Network (social platform), Influxx (professional networking), Ocsidian (business tools), Flow (streaming platform), and all associated mobile and desktop applications.
Last Updated: January 3, 2026
Effective Date: January 3, 2026
Contact: privacy@etapx.us
Effective Date: January 3, 2026
Contact: privacy@etapx.us
Information We Collect
We collect information you provide directly, information generated through your use of our services, and information from third-party sources when you connect external services. Our data collection is governed by principles of data minimization, purpose limitation, and user control.
Information You Provide:
- Account Information: Username, email address, phone number, profile photo, bio, display name, and verification information
- Content and Communications: Posts, stories, photos, videos, audio recordings, live streams, messages, comments, reactions, and all user-generated content
- Profile and Preferences: Privacy settings, notification preferences, language, timezone, accessibility options, and interest categories
- Social Connections: Friend and follower relationships, blocked users, group memberships, and connection preferences
- Payment Information: Billing details, payment methods, transaction history, and subscription information for premium features
- Professional Information: Business profiles, creator verification details, monetization preferences, and professional networking data
- Support and Feedback: Customer support communications, bug reports, feature requests, and platform feedback
Information We Collect Automatically:
- Device and Technical Information: IP address, device type, operating system, browser type, unique device identifiers, and hardware specifications
- Usage Data: Pages visited, features used, time spent, interaction patterns, search queries, and engagement metrics
- Location Information: Precise GPS coordinates (with permission), approximate location from IP address, location tags in content
- Performance Data: App performance metrics, crash reports, loading times, and technical diagnostic information
- Communication Metadata: Message delivery status, read receipts, typing indicators, and communication timestamps
🔹 How We Use Your Information
You grant us a limited license to use data to operate, improve, and secure the platform. We use collected information solely to provide, maintain, and improve our services, ensure platform safety and security, personalize your experience, and communicate important updates. All data processing is conducted with appropriate legal basis and in accordance with applicable privacy regulations.
Data Processing Scope and Limitations: Our data processing activities are strictly limited to the purposes explicitly outlined in this Privacy Policy and necessary for the provision of our services across Whistlr Network, Influxx, and Ocsidian platforms. We maintain a data minimization approach whereby personal information is collected and processed only to the extent necessary for legitimate business purposes, service provision, legal compliance, and user-authorized activities. All data processing is conducted under appropriate legal basis as defined by applicable privacy regulations including but not limited to GDPR, CCPA, LGPD, and other regional data protection frameworks.
Ownership and Control Rights: Users retain all proprietary rights, title, and interest in and to their User Content, personal information, and intellectual property provided through our services. ETAPX does not claim ownership of User Content or personal data, and our data processing rights are limited to those expressly granted through this Privacy Policy and our Terms of Service. Users maintain the right to access, modify, export, and delete their personal information in accordance with applicable privacy laws and platform capabilities, subject to legitimate business needs, legal retention requirements, and technical constraints inherent in distributed systems architecture.
Commercial Use and Data Monetization Restrictions
ETAPX does not engage in the direct sale, lease, or transfer of personally identifiable information to third parties for monetary consideration. Our business model is primarily supported through premium subscriptions, creator monetization tools, and optional paid features rather than advertising revenue or data brokerage activities. Any data sharing with third parties is conducted solely for service provision, legal compliance, or user-authorized integrations, and is governed by strict contractual agreements that limit data use to specified purposes and require equivalent privacy protections.
Service Operations:
- Account creation, authentication, and profile management
- Content creation, sharing, and discovery features
- Social networking, messaging, and community features
- Live streaming, co-hosting, and real-time communication
- Payment processing, subscriptions, and creator monetization
- Customer support, troubleshooting, and user assistance
Platform Improvement and Personalization:
- Content recommendation and discovery algorithms
- Product development, feature testing, and user experience optimization
- Analytics, usage statistics, and performance monitoring
- Accessibility improvements and interface customization
- Spam detection, abuse prevention, and content moderation
Algorithmic Improvement and Automated Systems
We use machine learning and automated systems to improve user experience across Whistlr Network, Influxx, and Ocsidian. These systems analyze usage patterns, content engagement, and platform interactions to enhance recommendations, detect spam and abuse, and optimize performance. You maintain control over algorithmic personalization through your privacy settings, and we provide transparency about how these systems work.
Algorithmic Processing and Machine Learning: Our automated decision-making systems, including machine learning algorithms and artificial intelligence technologies, process user data and behavioral patterns to optimize service functionality, content relevance, and platform security. These systems may make automated decisions regarding content recommendations, spam detection, fraud prevention, and user experience personalization. Users maintain the right to object to automated decision-making where such processing significantly affects them, and may request human review of automated decisions through our privacy controls or by contacting our privacy team. Algorithmic processing is conducted in accordance with applicable privacy laws and regulatory guidance governing automated decision-making and profiling activities.
Connected Accounts and Platform Network
ETAPX operates multiple interconnected platforms that can share certain information to provide seamless experiences. When you connect accounts across Whistlr Network, Influxx, and Ocsidian, we may share profile information, connections, and content to enable cross-platform features while respecting your privacy preferences for each service.
Cross-Platform Data Sharing (Only When Accounts Are Connected):
- Whistlr Network to Influxx: Professional profile information, public content, verified status
- Influxx to Ocsidian: Business profile data, professional connections, company information
- Ocsidian to Whistlr Network: Business verification status, professional content permissions
- Universal Profile Elements: Display name, profile photo, verification badges (with permission)
- Authentication Data: Single sign-on capabilities across connected platforms
- Privacy Sync: Consistent privacy settings across platforms when desired
User Content and Platform Usage License
By submitting, posting, or otherwise providing User Content through our services, you grant ETAPX a worldwide, non-exclusive, royalty-free, sublicensable, and transferable license to use, reproduce, distribute, prepare derivative works of, display, and perform such User Content in connection with the provision of our services and the operation of our business, including without limitation for promoting and redistributing part or all of the service in any media formats and through any media channels. This license is limited to the technical and commercial purposes necessary for providing the services across Whistlr Network, Influxx, and Ocsidian platforms, including but not limited to content display, search indexing, recommendation algorithms, backup and recovery operations, content delivery network distribution, and user-initiated sharing functionalities.
The aforementioned license shall remain in effect for the duration of your use of our services and for such additional period as may be necessary for the complete removal of User Content from our systems, including distributed caches, backup storage, and content delivery networks. You acknowledge that the technical architecture of our services may require temporary retention of User Content in various system components even after deletion requests, and ETAPX shall use commercially reasonable efforts to remove such content within ninety (90) days of account termination or content deletion, subject to legal retention requirements and technical constraints inherent in distributed computing environments.
Privacy by Design: Every feature, system, and process at ETAPX is designed with privacy as a fundamental requirement. We believe that user control over personal data is a fundamental right, and we've built our technology to empower users rather than exploit them. Our business model does not depend on selling personal data or manipulating user behavior for profit.
Information Sharing and Disclosure
We do not sell personal information to third parties. We share information only as necessary to provide our services, comply with legal obligations, or with your explicit consent. All data sharing is governed by strict agreements and security requirements.
Service Providers and Partners:
- Technical Infrastructure: Cloud hosting providers, content delivery networks, and database services
- Payment Processing: Stripe and other payment processors for creator monetization and subscriptions
- Communication Services: Email providers, push notification services, and SMS providers
- Analytics and Performance: Crash reporting services, performance monitoring, and usage analytics
- Content and Moderation: Image and video processing services, content moderation tools, and safety providers
Legal and Safety Requirements:
- Compliance with court orders, subpoenas, and legal process
- Protection of rights, property, and safety of users and the public
- Enforcement of Terms of Service and community guidelines
- Prevention of fraud, abuse, and illegal activity
- Cooperation with law enforcement and regulatory authorities
International Data Transfers and Safeguards
ETAPX operates globally and may transfer personal information across international borders to provide our services. All international transfers are protected by appropriate safeguards including adequacy decisions, standard contractual clauses, and certification schemes as required by applicable laws.
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we ensure that any transfer of personal data outside these regions is subject to appropriate safeguards as required by the General Data Protection Regulation (GDPR) and equivalent laws. These safeguards include using European Commission-approved standard contractual clauses and working only with providers who maintain adequate levels of data protection.
Your Privacy Rights and Controls
You have comprehensive rights over your personal information, including access, rectification, erasure, portability, and objection rights. These rights vary by jurisdiction but are accessible through our self-service privacy tools and dedicated privacy support team.
Universal Rights (Available to All Users):
- Account Access: View and download your personal information through account settings
- Profile Control: Update, correct, or remove profile information and preferences
- Content Management: Edit, delete, or control visibility of your posts and content
- Privacy Settings: Granular controls over data collection, sharing, and usage
- Communication Preferences: Control over marketing emails, notifications, and communications
- Account Deletion: Permanent deletion of your account and associated data
Enhanced Rights for EU/EEA, UK, California, and Other Covered Regions:
- Right to Access: Comprehensive data access including processing purposes and third-party sharing
- Right to Rectification: Correction of inaccurate or incomplete personal information
- Right to Erasure: Deletion of personal information under specific circumstances
- Right to Portability: Receive personal data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests or direct marketing
- Right to Restrict Processing: Limit how we process your personal information
- Right to Non-Discrimination: Equal service regardless of privacy choices
Data Retention and Deletion
We retain personal information only as long as necessary for the purposes for which it was collected, to comply with legal obligations, or to resolve disputes. Retention periods vary by data type and are regularly reviewed to ensure compliance with applicable laws and business needs.
Standard Retention Periods:
- Account Data: Retained while account is active, deleted within 90 days of account deletion request
- Content and Communications: Retained while account is active or as long as content exists on the platform
- Usage and Analytics Data: Aggregated and anonymized after 18 months, raw data deleted after 24 months
- Technical Logs: Security logs retained for 12 months, performance logs for 6 months
- Financial Records: Payment and transaction data retained for 7 years for tax and legal compliance
- Legal and Safety Data: Retained as required by legal obligations or safety requirements
Data Security and Protection
We implement comprehensive technical and organizational measures to protect personal information against unauthorized access, use, alteration, and destruction. Our security program includes encryption, access controls, monitoring, and regular security assessments.
Technical Safeguards:
- End-to-end encryption for sensitive communications and data
- Transport layer security (TLS) for all data transmissions
- Advanced encryption standards (AES-256) for data at rest
- Multi-factor authentication and strong password requirements
- Regular security audits, penetration testing, and vulnerability assessments
- Secure coding practices and regular code reviews
Organizational Measures:
- Privacy and security training for all employees
- Principle of least privilege for data access
- Background checks and confidentiality agreements for staff
- Incident response procedures and breach notification protocols
- Regular compliance audits and certification maintenance
- Third-party security certifications and assessments
Children's Privacy: ETAPX services are not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children under these ages. If we learn that we have collected personal information from a child under the applicable age limit, we will promptly delete that information. Parents who believe their child has provided personal information to us should contact our privacy team immediately.
Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable laws. Material changes will be communicated through prominent notice on our platform, email notification, or other appropriate channels. Your continued use of our services after such notice constitutes acceptance of the updated policy.
Contact Information and Privacy Support
For privacy-related questions, concerns, or requests, contact our dedicated Privacy Team through multiple channels. We respond to privacy inquiries within 48 hours and provide comprehensive support for exercising your privacy rights.
Privacy Team Contact:
Email: privacy@etapx.us
Mail: ETAPX Privacy Team, 1234 Technology Drive, San Francisco, CA 94105
In-App: Settings → Privacy & Security → Contact Privacy Team
Response Time: Within 48 hours for all privacy-related inquiries
Email: privacy@etapx.us
Mail: ETAPX Privacy Team, 1234 Technology Drive, San Francisco, CA 94105
In-App: Settings → Privacy & Security → Contact Privacy Team
Response Time: Within 48 hours for all privacy-related inquiries
Data Protection Officer (EU/EEA): dpo@etapx.us
California Consumer Privacy Act Requests: ccpa@etapx.us
General Data Protection Regulation Requests: gdpr@etapx.us
California Consumer Privacy Act Requests: ccpa@etapx.us
General Data Protection Regulation Requests: gdpr@etapx.us