GRPHX Zone LLC Privacy Policy

1. Who We Are

GRPHX Zone LLC ("GRPHX Zone," "we," "us," or "our") operates the website grphxzone.com and provides managed technology, AI workflow, design, HR, booking, and custom build services.

• Company: GRPHX Zone LLC
• Website: grphxzone.com
• Registered address: 30 N Gould St Ste R, Sheridan, WY, USA
• Privacy contact: malika.mostafa@grphxai.com

2. Scope

This Privacy Policy explains how we collect, use, disclose, retain, secure, and delete information from our website, business communications, service delivery workflows, and LinkedIn integrations used for company Page management and aggregate reporting.

This policy applies to personal information we process as a business and to LinkedIn data accessed through authorized LinkedIn API permissions, including the LinkedIn Community Management API where applicable.

3. Information We Collect

Website and business contact data

When you visit our website, contact us, request a review, or communicate with us, we may collect information such as name, company, email address, phone number, message content, service interest, IP address, browser/device information, approximate location derived from technical data, referral URLs, and website usage events.

Service and account data

If you become a client or authorized user, we may process account details, project details, business requirements, files you provide, support messages, billing-related records, access logs, and operational data needed to deliver services.

LinkedIn integration data

When an authorized internal user connects a LinkedIn account or company Page to our tools or workflows, LinkedIn may return data permitted by the approved authorization scope. This may include OAuth/account authorization data, company Page identifiers and metadata, Page posts, comments, reactions, shares or other engagement signals, engagement and analytics metrics, limited member/profile fields returned by LinkedIn with engagement records, and access or refresh tokens used to maintain the authorized connection.

4. LinkedIn Authorization and Tokens

LinkedIn integrations require authorization through LinkedIn's OAuth process or another LinkedIn-approved authorization flow. We access LinkedIn data only after an authorized user grants the required permissions for page management, community management, publishing, engagement review, and reporting features.

Access tokens and refresh tokens are used only to authenticate API requests, maintain the authorized connection, manage company Page content, retrieve permitted engagement or analytics data, and support aggregate reporting. We do not ask users to share LinkedIn passwords with us.

5. How We Use Information

We use information for the following purposes:

• Operate, maintain, secure, and improve grphxzone.com and our services.
• Respond to inquiries, provide proposals, manage client relationships, and deliver requested services.
• Authenticate authorized users and administer business accounts.
• Publish, schedule, manage, or review company Page posts where authorized.
• Review comments, reactions, and engagement activity for Page community management.
• Prepare internal performance summaries, aggregate reporting, and analytics about company Page content.
• Detect, investigate, and prevent security incidents, abuse, unauthorized access, or policy violations.
• Comply with legal, contractual, tax, accounting, and platform obligations.

6. LinkedIn Data Use Restrictions

We do not sell LinkedIn data. We do not use LinkedIn personal data, member profile data, comments, reactions, activity data, or engagement records for advertising targeting, prospecting, lead enrichment, cold outreach, sales outreach, or building sales lists.

LinkedIn data is used only for authorized company Page management, community management, content administration, engagement review, and aggregate reporting connected to the authorized LinkedIn Page or account. Access is limited to authorized internal users and service providers who need access to operate or support those approved purposes.

7. Sharing and Subprocessors

We do not sell personal information or LinkedIn data. We may share limited information with vendors and subprocessors that help us operate our website, hosting, analytics, security, communications, cloud storage, workflow automation, and service delivery systems. These providers are permitted to process information only for our business purposes and are expected to protect it appropriately.

We may also disclose information when required by law, to protect rights and security, to enforce agreements, or in connection with a business transaction such as a merger, acquisition, financing, or asset transfer, subject to applicable legal requirements.

8. Retention, Minimization, Deletion, and Revocation

We retain personal information and LinkedIn data only for as long as necessary for the purposes described in this policy, to provide services, maintain security, satisfy legal obligations, resolve disputes, and enforce agreements. We minimize collection and retention where practical.

LinkedIn data can be securely deleted upon LinkedIn request, user request where applicable, authorization revocation, contract termination, account disconnection, or when the data is no longer necessary for the authorized business purpose.

You may revoke LinkedIn authorization through LinkedIn account settings or by contacting us. After revocation, we will stop making new API requests under that authorization and will delete or de-identify retained LinkedIn data where required or when no longer necessary, subject to legal or security retention needs.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include access controls, least-privilege permissions, secure credential handling, HTTPS, monitoring, backups, and internal access restrictions.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we identify a security issue that affects your information, we will respond in accordance with applicable laws and platform obligations.

10. International Transfers

GRPHX Zone LLC is registered in the United States and may work with team members, clients, vendors, and infrastructure providers in other countries. Information may be processed in the United States and other jurisdictions where we or our service providers operate. Where required, we use appropriate safeguards for international transfers.

11. Cookies and Similar Technologies

Our website may use cookies, pixels, log files, local storage, and similar technologies to operate the site, remember preferences, understand traffic, measure performance, protect against abuse, and improve user experience. You can control cookies through your browser settings. Some features may not work correctly if cookies are disabled.

12. Your Privacy Rights

Depending on your location and the nature of your relationship with us, you may have rights to request access, correction, deletion, portability, restriction, objection, or withdrawal of consent for certain personal information. You may also have the right to complain to a data protection authority.

To exercise privacy rights, contact us at malika.mostafa@grphxai.com. We may need to verify your identity and relationship to the relevant account or LinkedIn Page before fulfilling a request.

13. Children's Privacy

Our website and services are intended for business users and are not directed to children. We do not knowingly collect personal information from children under the age required by applicable law.

14. Policy Updates

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date above. Material changes may also be communicated through the website, email, account notices, or another appropriate method.

15. Contact Us

For privacy questions, LinkedIn data deletion requests, authorization revocation support, or other requests related to this policy, contact: