This Privacy Policy explains how 10X collects, uses, and shares information when you visit our website, apply to work with us, use our products, or participate in anti-abuse verification flows through our services.
We use the information we collect to operate the product, keep accounts secure, prevent abuse, communicate with users, process applications, and comply with legal obligations. If you have questions about this policy, contact us at support@10x.app.
Information We Collect
- Contact and account information, such as your name, email address, social sign-in details, and any other information you provide to us.
- Usage and technical information, such as device details, local device claim markers, browser metadata, IP address, product interaction logs, crash data, and security logs.
- Application and submission information, including information you provide in job applications, coworking applications, forms, or support messages.
- Payment and transactional information where relevant, including billing state, invoices, and credit-related records processed through our payment providers.
How We Use Information
- To provide, maintain, secure, and improve the 10X website, applications, APIs, and related services.
- To authenticate users, restore sessions, verify promotion eligibility, prevent fraud, and enforce product or promotion rules.
- To respond to inquiries, review applications, communicate operational updates, and provide support.
- To analyze website visits, download intents, desktop-app activation, billing activity, performance, reliability, and security events.
- To select, display, and measure contextual sponsored content for eligible accounts, subject to the privacy choices described below.
- To comply with legal obligations, enforce our terms, and protect the rights, safety, and property of 10X, our users, and others.
Verification And Anti-Abuse Signals
10X may use account-level checks, local on-device claim markers, and an approximate country derived from the request IP to enforce one-time promotional offers, prevent duplicate claims, and protect the service against fraud or abuse. Country-of-claim eligibility is not a determination of nationality or residence.
We use these signals only for security, integrity, fraud prevention, and promotional eligibility checks, not to sell or rent data to third parties.
How We Share Information
We do not sell, rent, or share anti-abuse verification data with third parties or affiliates for their own marketing or promotional purposes.
We may share information with vendors and service providers that help us operate the service, such as hosting, analytics, communications, authentication, download delivery, and payment providers, but only for business purposes on our behalf.
This includes PostHog for product and website analytics and Stripe for payment, checkout, billing portal, invoice, and subscription processing.
For eligible builder accounts, this also includes Gravity for contextual sponsored content. We may provide up to eight recent sanitized natural-language chat messages, an opaque account identifier, subscription tier, session and bounded device metadata, IP address, user agent, and a normalized SHA-256 hash of the account email. Gravity receives impression and click requests directly from the browser or native device. If you choose to submit a sponsored lead form, 10X securely relays the information you enter without exposing our provider credential to your device.
We may also disclose information where reasonably necessary to comply with law, enforce agreements, investigate abuse, or protect users and the service.
Data Retention
We retain information for as long as reasonably necessary to operate the service, maintain security and audit records, comply with legal obligations, resolve disputes, and enforce agreements.
Verification records, local device claim-marker state, and security logs may be retained for compliance, fraud prevention, and audit purposes. Signup-credit records may retain keyed device and event identifiers, a bounded policy result and version, and an optional two-letter claim country; 10X does not retain the raw IP address, precise location, or underlying proxy or VPN values in those billing records.
Your Choices
- You may choose not to provide certain information, though some features may not work without it.
- On the web, enabling Global Privacy Control or Do Not Track prevents the Gravity attribution pixel and contextual-ad request. On macOS, a denied or restricted App Tracking Transparency status suppresses the contextual-ad request.
- You may contact us at support@10x.app to request account or privacy-related assistance.
Third-Party Services
Our website and products may link to or rely on third-party services, including Cloudflare, Gravity, PostHog, Stripe, Supabase, and hosting or storage providers. Their privacy practices are governed by their own policies, not this one.
Policy Updates
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, through additional notice.