Privacy Policy

This Policy applies to:

• Visitors to our website(s) and landing pages;
• Prospective, current, and former Clients, and their authorized representatives;
• Individuals whose data is collected, processed, or appended in connection with our lead generation, prospecting, data enrichment, and business development services performed on behalf of Clients ("Data Subjects" or "Leads");
• Job applicants, vendors, and business partners who interact with us.

This Policy does not apply to third-party websites, platforms, or advertising networks that we may link to or that display our ads; those parties maintain their own privacy practices, and we encourage you to review them separately.

2.1 Information You Provide Directly

• Contact details: name, job title, company name, business address, phone number, and email address;
• Business information: company size, industry, revenue range, funding needs, financial services interests, and related business data submitted through forms, calls, or CRM intake;
• Communications: information you provide when you contact us, request a proposal, respond to outreach, or participate in surveys;
• Account and billing information, if you become a Client.

2.2 Information Collected Automatically

• Device and usage data: IP address, browser type, operating system, referring URLs, pages viewed, click-through activity, and timestamps;
• Cookies and similar tracking technologies (see Section 6);
• Advertising identifiers and campaign performance data collected through pixels, tags, and analytics tools embedded in our own and Client marketing assets.

2.3 Information Collected or Appended from Third Parties

As part of our business development, lead generation, and prospect-screening services, we may collect, purchase, license, or receive publicly available and commercially available business data from data providers, public records, business registries, professional networking platforms, and marketing data vendors. This may include:

• Company firmographic data (industry, location, size, growth signals, funding or debt-raise activity);
• Publicly listed business contact information for company decision-makers;
• Third-party enrichment data used to qualify companies as prospective leads for CRM integration.

We take reasonable steps to source such data from providers who represent that the data was collected in compliance with applicable law, and we do not knowingly collect sensitive personal information (e.g., financial account numbers, government identifiers, health data) through these channels beyond what is necessary and lawful for business-to-business marketing purposes.

We use the information described above for the following purposes:

1. To identify, qualify, and screen prospective business leads for our own services and on behalf of Clients;
2. To structure, standardize, and export data into CRM-ready formats for integration into our own or Client sales and marketing systems;
3. To deliver, personalize, and measure the performance of advertising and marketing campaigns across digital, social, email, and other channels;
4. To communicate with prospects, Leads, and Clients regarding funding opportunities, business services, proposals, and related offerings;
5. To operate, maintain, and improve our website, tools, and internal systems;
6. To comply with legal obligations, enforce our agreements, and protect the rights, property, and safety of the Company, our Clients, and third parties;
7. To conduct internal analytics, reporting, quality assurance, and business planning.

We do not use information for automated decision-making that produces legal or similarly significant effects concerning an individual without human review.

Where required by applicable law (including the EU/UK GDPR or similar frameworks), we rely on one or more of the following legal bases: performance of a contract, our legitimate interests in conducting business development and marketing activities, your consent (where obtained), and compliance with legal obligations.

We do not sell personal information for monetary consideration in the traditional sense; however, some data-sharing arrangements described below may be considered a "sale" or "share" under certain state privacy laws (see Section 9). We may disclose information to:

• Our Parent Company, X-It Media Solutions, and its affiliated companies, for corporate administration, shared services, and consolidated reporting;
• Clients, for the purpose of delivering screened, qualified leads and CRM-ready data as contracted;
• Service providers and vendors who perform functions on our behalf, such as CRM hosting, data enrichment, email/SMS delivery, analytics, cloud storage, and IT support, under contractual confidentiality and data protection obligations;
• Advertising and analytics partners, to deliver and measure marketing campaigns (see Section 6);
• Professional advisors (legal, accounting, insurance) as needed;
• Regulators, law enforcement, or other parties where required by law, subpoena, or legal process, or to protect our rights or the safety of others;
• A successor entity in connection with a merger, acquisition, financing, or sale of assets involving the Company or X-It Media Solutions.

We and our advertising partners use cookies, web beacons, pixels, and similar technologies to recognize your browser or device, remember preferences, measure campaign performance, and deliver interest-based advertising, including retargeting.

• Strictly necessary cookies: required for core website functionality;
• Analytics cookies: help us understand how visitors use our site and campaigns;
• Advertising/marketing cookies: used by us and third-party ad networks/social platforms to deliver and measure targeted advertising.

You can control cookies through your browser settings, our cookie banner/preference center (where available), and industry opt-out tools such as the Digital Advertising Alliance (optout.aboutads.info) and Network Advertising Initiative (optout.networkadvertising.org). Disabling cookies may limit certain website features.

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, including satisfying legal, accounting, or reporting requirements, resolving disputes, and enforcing our agreements. Lead and prospect data supplied to Clients is retained according to the applicable client services agreement and deleted or anonymized when no longer needed for a legitimate business purpose.

We implement administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including access controls, encryption in transit where applicable, and restricted employee access on a need-to-know basis. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have some or all of the following rights regarding your personal information:

• Right to know/access the categories and specific pieces of personal information we hold about you;
• Right to request correction of inaccurate information;
• Right to request deletion of your personal information, subject to legal exceptions;
• Right to opt out of the sale/sharing of personal information or targeted advertising, where applicable under state law (e.g., California, Florida, Colorado, Virginia, and similar state privacy statutes);
• Right to non-discrimination for exercising your privacy rights;
• Right to data portability, where applicable;
• Right to withdraw consent, where processing is based on consent.

To exercise these rights, submit a request through the contact information in Section 14. We will verify your identity before processing your request and will respond within the time required by applicable law. If you are a Lead whose information was provided to us by or on behalf of one of our Clients, you may also need to contact that Client directly, as they may act as the party responsible for the underlying relationship.

Business contact information used solely for business-to-business marketing communications may be treated differently than consumer personal information under certain state and federal laws (e.g., CAN-SPAM Act, TCPA); however, we honor applicable opt-out and do-not-contact requests as described in Section 10.

If you receive marketing emails, calls, or text messages from us, you may opt out at any time by:

• Clicking the "unsubscribe" link included in our emails;
• Replying "STOP" to SMS messages, where applicable;
• Contacting us directly using the information in Section 14 and requesting to be added to our internal do-not-contact list.

We will process opt-out requests within the timeframe required by applicable law (including the CAN-SPAM Act and the Telephone Consumer Protection Act). Please note that opting out of marketing communications does not opt you out of transactional or service-related communications.

Our website and services are directed to businesses and business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have inadvertently collected such information, we will take steps to delete it.

Our website, campaigns, and advertisements may contain links to or be displayed on third-party websites, social media platforms, and advertising networks. We are not responsible for the privacy practices of those third parties, and we encourage you to review their respective privacy policies.

We are based in the United States, and information we collect may be processed and stored in the United States or other jurisdictions where our service providers operate. Where required, we implement appropriate safeguards for cross-border transfers of personal information.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

NoBass Media Group
A Division of X-It Media Solutions
Attn: Privacy Officer
101 E Kennedy Blvd #2160, Tampa, FL 33602
Email: xitmediasoulutions@gmail.com

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Effective Date" at the top of this Policy indicates when it was last revised. Material changes will be communicated through our website or other appropriate means. Your continued use of our website or services after changes take effect constitutes acceptance of the revised Policy.