Privacy Policy for ThingsX

At ThingsX, accessible from http://thingsx.com, one of our main priorities is the privacy of our visitors. This Privacy Policy outlines what personal data we collect, how we use it, your rights under the General Data Protection Regulation (GDPR), and how you can exercise those rights.

1. Data Controller

ThingsX is the Data Controller of your personal data collected through our website and services.

2. Information We Collect

Depending on how you interact with us, we may collect the following types of personal data:

• Contact details (e.g., name, email address, phone number)
• Cookie data (see Section 6)
• Communications (e.g., when you contact us via email)

3. Legal Basis for Processing (under GDPR)

We process your personal data under one or more of the following legal bases:

• Performance of a contract – to fulfill our obligations to you
• Consent – where you have given explicit permission
• Legitimate interests – such as improving our website or services
• Legal obligation – to comply with legal requirements

4. How We Use Your Information

We use the information we collect for various purposes:

• To operate and maintain our website
• To improve user experience and analyze trends
• To respond to your inquiries and provide support
• To send service-related updates (if applicable)
• To comply with legal obligations

5. Data Retention

We retain your personal data only as long as necessary for the purposes stated in this Privacy Policy, and to:

• Comply with legal obligations
• Resolve disputes
• Enforce our policies

6. Cookies and Consent

We use cookies and similar tracking technologies on our website and services to enhance user experience, analyze traffic, and support marketing efforts.

Types of Cookies We Use

• Strictly Necessary Cookies – Required for basic site functionality, such as navigation, security, and network management. These cookies are always active and do not require consent.
• Performance and Analytics Cookies – Help us understand how visitors interact with our site (e.g., page visits, traffic sources) to improve performance.
• Marketing and Advertising Cookies – Used to deliver personalized content and advertisements and to measure the effectiveness of our campaigns.

Consent Management Based on Jurisdiction

Your cookie preferences and rights may vary depending on your location:

• European Economic Area (EEA), United Kingdom, and Switzerland

  In accordance with the General Data Protection Regulation (GDPR) and related privacy laws, we request your explicit consent before placing any non-essential cookies on your device. When you first visit our website, a cookie banner will appear allowing you to:
  • Accept all cookies
  • Reject non-essential cookies
  • Customize your preferences

  Your consent is the legal basis for processing data collected through these cookies. You may withdraw or update your consent at any time via the “Cookie Settings”link provided on our website.

• California (United States)

  Under the California Consumer Privacy Act (CCPA/CPRA), you have the right to opt out of the “sale” or “sharing” of personal information, including data collected by certain third-party cookies. You can exercise this right at any time by selecting “Do Not Sell or Share My Personal Information” from the cookie banner or settings page.

• Brazil, Canada, Australia, and Other Jurisdictions

  We manage cookies in accordance with applicable national privacy laws. In some regions, implied consent or opt-out models may apply. We provide a cookie management interface that allows users to review and modify preferences at any time.

Managing Cookies

Most web browsers allow you to control cookies through their settings. You can typically configure your browser to reject all cookies, accept only certain types, or notify you when a cookie is set. Please note that disabling certain cookies may impact website functionality.

7. Your Data Protection Rights (EEA Residents)

If you are located in the European Economic Area, you have the following rights:

• Right to access
• rectification
• Right to erasure
• Right to restrict processing
• Right to object
• Right to data portability
• Right to withdraw consent at any time

To exercise these rights, contact us at info@thingsx.com with the subject line "GDPR Request." We will respond within 30 days.

8.Regional Rights

This Privacy Policy is designed to comply with the General Data Protection Regulation (GDPR) for users located in the European Economic Area (EEA). If you are located outside the EEA, you may have rights under other applicable privacy laws, including but not limited to the California Consumer Privacy Act (CCPA), the Brazilian General Data Protection Law (LGPD), or other national regulations. Please contact us at info@thingsx.com if you wish to understand your rights under your local law. See Appendix A for Regional Privacy Disclosures.

9.Handling Privacy-Related Requests and Complaints

We maintain procedures to ensure that any privacy-related requests or complaints we receive are handled promptly and in accordance with applicable data protection laws. This includes, but is not limited to:

• Forwarding Requests or Complaints: When acting as a data processor or service provider on behalf of another organization, we will promptly forward any privacy-related requests or complaints to that organization in accordance with our contractual obligations.
• Direct Handling When Instructed: Where instructed by the relevant data controller or as required by law, we will address the request directly, which may include deleting, updating, or correcting personal information.
• Timeframes: Requests and complaints will be processed within the time limits required by applicable law and contractual agreements.
• Recordkeeping: We will maintain records of all privacy-related requests and our responses to ensure accountability and compliance.

10. International Data Transfers

If your data is transferred outside the EEA, we ensure adequate safeguards such as Standard Contractual Clauses approved by the European Commission.

11. Security of Your Data

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

12. Children’s Privacy

Our website is not intended for children under 16 years old. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete such information.

In jurisdictions where the minimum age of consent is lower (e.g., 13 in the United States), we still require verifiable parental or guardian consent if local law requires it for processing personal data.

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at info@thingsx.com. We will promptly investigate and take appropriate steps to delete the data.

13. Third-Party Services and Advertising Partners

Our website may contain links to third-party websites or services. We are not responsible for their privacy practices. We recommend reviewing their privacy policies directly.

We may also partner with third-party advertising networks. These networks may use cookies or other tracking technologies to personalize ads.

14. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: info@thingsx.com

Address:

9442 Capital of Texas Hwy North,

Plaza One, Suite 500

Austin, TX 78759

Last updated: August 20th, 2025

Appendix A

Regional Privacy Disclosures

California Residents (CCPA/CPRA)

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These include:

• The right to know what personal information we collect, use, disclose, or sell.
• The right to request access to or deletion of your personal information.
• The right to correct inaccurate personal data.
• The right to opt out of the “sale” or “sharing” of your personal information.
• The right to limit use of sensitive personal information.

We do not sell personal data in exchange for money. However, we may use certain cookies and analytics tools that could be considered "sharing" under CPRA. You may opt out of this or opt to limit use of your sensitive information through our cookie preferences banner.

To exercise your rights, please contact us at info@thingsx.com with the subject line "CCPA Request." We will verify your identity and respond within 45 days.

Brazil Residents (LGPD)

If you are located in Brazil, your personal data is processed in accordance with the Lei Geral de Proteção de Dados (LGPD). Under LGPD, you have the following rights:

• The right to confirm whether we process your data.
• The right to access, correct, or delete your data.
• The right to data portability.
• The right to object to or restrict processing.
• The right to withdraw consent at any time.

If you would like to exercise any of these rights, please contact info@thingsx.com with the subject line "LGPD Request."

Canada Residents (PIPEDA)

If you are a Canadian resident, your data is handled under the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to:

• Access your personal information.
• Request correction of inaccurate information.
• Withdraw consent where applicable.

We collect, use, and disclose personal data in accordance with your consent or as permitted by law. To exercise your rights, email info@thingsx.com with "PIPEDA Request" in the subject line.

Australia Residents (Privacy Act 1988)

If you are in Australia, we handle your personal data in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988. You may:

• Request access to or correction of your personal information.
• Complain about how your data has been handled.

For such requests or complaints, email info@thingsx.com with "Australia Privacy Request" in the subject line.