Privacy Policy

InfinityXZ is operated by SKXYWTF LLC, doing business as World Trade Factory (“Company,” “we,” “our,” or “us”). Our registered address is 2325 E Camelback Rd #400, Phoenix, AZ 85016, USA.

InfinityXZ provides AI-powered market intelligence tools and an investor profile questionnaire. The questionnaire is used to match prospective clients with financial advisors for follow-up consultation. Nothing on this platform constitutes investment advice, a solicitation, or a recommendation to buy or sell any security.

We collect the following categories of personal information:

• Identity data: First name, last name, email address, age range.
• Financial profile data: Primary investment goal, time horizon, risk tolerance score, risk reaction preference, income range, investable assets range, current asset classes held. These are self-reported ranges — we do not collect exact balances, account numbers, or tax identification numbers.
• Consent records: Timestamp, IP address, and user agent captured when you accept our onboarding disclosure.
• Usage data: Access logs, page views, and interaction history collected automatically via our platform and third-party services (Vercel, Supabase).
• Authentication data: Email address and OAuth tokens if you authenticate via Google or other OAuth providers through our auth system.

We use the information we collect for the following purposes:

• To generate an AI-assisted investor profile summary for review by our advisory team.
• To allow licensed financial advisors to review your profile and determine whether to reach out.
• To send you a confirmation email summarizing your submission.
• To notify our advisory team of new profile submissions.
• To maintain a compliance-grade audit trail of access to your data.
• To comply with applicable laws and regulatory requirements.
• To improve our platform and services.

We do not sell your personal information to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects without human review.

When you complete the investor questionnaire, your profile data is sent to the Google Gemini API to generate a written investor profile summary. This summary is stored in our database and reviewed by human advisors. It is not used to make autonomous investment decisions on your behalf.

Google processes this data as a subprocessor. Their data processing terms apply. See Google’s privacy policy at google.com/privacy for details.

We share personal data only with the following categories of recipients:

• Our advisory team: Licensed financial advisors and administrators employed or contracted by World Trade Factory who review profiles to determine client fit.
• Infrastructure subprocessors: Supabase (database and authentication), Vercel (hosting and serverless functions), Resend (transactional email), Google (Gemini AI API). Each operates under data processing agreements that limit their use of your data.
• Legal and regulatory authorities: Where required by law, court order, or regulatory examination (e.g., SEC, state securities regulators).

We do not share your investor profile, income, or asset information with any marketing companies, data brokers, or unaffiliated third parties for commercial purposes.

We retain your profile data for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Consent records and audit logs are retained for a minimum of seven (7) years to satisfy potential regulatory examination requirements.

If you request deletion of your data (see Section 8), we will anonymize or delete your personal information within 30 days, except where retention is required by law.

All data is encrypted at rest using AES-256 (managed by Supabase/AWS) and in transit using TLS 1.2+. Access to client data is restricted to authorized personnel via role-based access controls and is subject to row-level security policies enforced at the database level.

Every access to your profile by our team is logged in an immutable audit trail. We conduct regular reviews of access logs as part of our internal compliance program.

Despite these measures, no system is 100% secure. If you believe your data has been compromised, contact us immediately at sage@worldtradefactory.com.

Depending on your location, you may have the following rights with respect to your personal information:

• Access: Request a copy of the personal data we hold about you.
• Portability: Download your profile data in a machine-readable format via your client portal at /client.
• Correction: Request correction of inaccurate data.
• Deletion: Request erasure of your personal data (subject to legal retention obligations).
• Opt-out of sale: We do not sell personal data. This right is therefore satisfied by default.

To exercise any of these rights, contact our Privacy Office:

We will respond to verified requests within 30 days (45 days where permitted by law with notice).

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• The right to know what personal information we collect, use, disclose, and sell.
• The right to delete personal information (with certain exceptions).
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information (we do not sell).
• The right to limit use of sensitive personal information.
• The right to non-discrimination for exercising your rights.

To submit a CCPA request, email us at sage@worldtradefactory.com with the subject line “CCPA Privacy Request.”

InfinityXZ uses session cookies required for authentication and security. We do not use third-party advertising cookies or cross-site tracking. Our infrastructure providers (Vercel, Supabase) may set functional cookies as part of their services.

You can manage cookie preferences through your browser settings. Disabling cookies may affect your ability to log in or use certain features of the platform.

InfinityXZ is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, contact us immediately and we will delete it.

InfinityXZ is operated from the United States. If you access the platform from outside the US, your information may be transferred to and processed in the United States, which may have different data protection laws than your country. By using InfinityXZ, you consent to this transfer.

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the “Last updated” date above and, where feasible, by email notification to affected users. Continued use of the platform after changes constitutes acceptance of the revised policy.

For all privacy inquiries, data requests, or questions about this policy: