XYZStore Privacy Policy
Effective Date May 9, 2025
We believe in openness, privacy and 100% data ownership. Transparency first. Privacy always.
This Privacy Policy (“Policy”) describes the personal information (or personal data) we collect from you, how we use that information and our legal basis for doing so. It also covers whether and how that information may be shared and your rights and choices regarding the information you provide to us.
By accessing or using our website, products, or services, you acknowledge that you have read, understood, and agreed to the collection, use, sharing, and potential sale or transfer of your personal information as described in this Policy.
By using our services, you expressly consent to the sale or transfer of your personal information to third parties.
This Privacy Policy does not apply to the collection and processing of information in the ISP Cloud-hosted service provided by us, which is covered by the privacy policy of Server Destroyers LLC here https://shop.serverdestroyers.com/privacy
This Privacy Policy applies to the information that we obtain from you through:
(a) your use of XYZStore websites including their subdomains: https://thexyzstore.com;
(b) any direct contact you make with our team via email, contact forms, discord, newsletter subscriptions, surveys, or when you complete any on-line feedback forms;
(c) when you create, use and make purchases online, through your phone through the XYZStore website or subdomain, or download our software directly from our websites;
(d) when you interact with us via our social media accounts or
(e) when you apply for a role advertised on our websites.
This Privacy Policy also applies to instances where we may receive your personal data from third party service providers.
This Privacy Policy explains:
Who we are
What personal data we collect, when we receive it and how we use it
How to opt-out
Legal rights
Your rights
Children’s privacy
Who we share your personal data with
International Transfers
Retention of data
How we protect your personal data
Automated decision making and profiling
Changes to this Privacy Policy
Contact information
Who we are
We are The XYZ Store - Matthew Zeoli , LLC (“Matthew Zeoli, LLC” or “Company”), a United States limited liability company. The Company provides multiple IP address proxy infrastructure solutions, including IP addresses for the clients to connect to the internet, servers to host and browser the internet, and access to the Company’s data gatherings and proxy management solutions (the “Services”). Services can be reached and used via our website at: https://thexyzstore.com/terms-conditions
The Company and you (as a user of the website, products, or services) are legally bound by the Terms and Conditions (the “Agreement”) which governs the contractual relationship between the Company as a service provider and the Client, as any natural or legal person, as a service user, or a user of System prior to/without logging-in/creating an account (Account).
The latest version of the Agreement is available at: https://thexyzstore.com/terms-conditions
We are the data controller in relation to the activities described in this privacy policy, unless stated otherwise.
If you have any questions about this privacy policy or you would like to access earlier versions of this Privacy Policy, please contact our privacy team at order@thexyzstoredelivery.com
2. What personal data we collect, when we receive it and how we use it
In order for us to provide you the best possible experience on our websites and deliver our services to you, we collect and process certain personal data as follows:
(a) When you contact us via our websites or directly via email — for example, when you ask for support, send us sales enquiries, questions, comments, feedback or when you complete a survey, customer satisfaction questionnaire or report a problem, we will collect your name, email address, discord name, API Keys, if provided, the content of the message, etc. We use this data to answer the questions we receive, to build business relationships, and to analyze the types of questions we receive and improve our customer management processes and to improve our products and services. If you do not provide your personal data, we will not be able to respond to you.
(b) When you sign up to receive our products, content or offers – for example, when you purchase products, or when you subscribe to the newsletter, or consent to receiving marketing materials, we use your email address to deliver the resources you requested. You can always withdraw your consent to receive our marketing content by clicking ‘unsubscribe’ in the relevant emails or contacting order@thexyzstoredelivery.com .
(c) When you create an account — when you purchase a product, sign up for and open an account on our website, or create an account and communicate through Discord, we may ask you to provide us with information such as your name, email address, discord name and details about your organization. In addition, when you purchase our products, we collect and process your username, password, payment information, phone number, IP address, and physical address. As otherwise detailed in this Privacy Policy, we will solely process this information to provide you with the service you purchase, or any other uses allowed in this Privacy Policy or the Terms of Service. If you do not provide your personal data, we would not be able to create the accounts and you would not be able to purchase or use products. You can opt out of having your customer or personal data from being sold at any time by completing the form at the bottom of the page or contacting order@thexyzstoredelivery.com .
(d) When you download or receive any products you purchase from us – we collect and store the following information relating to your purchase, which may in some cases include personal information: the IP address of the server where the instance is stored, URL of the customer, version of the product downloaded. We use this information to manage our products, billing and customer support.
(f) When you interact with us via social media, e.g., or any other similar third party page, your personal data is processed by the social media platform providers under their privacy policies and processes. We process your personal data collected from social media, such as full name, business email address, job title, company, telephone number, any other personal data you provide us with to respond to your requests, develop a business relationship or send you direct marketing communications (subject to prior consent requirements where applicable). If we cannot use your personal data, we would not be able to respond to your requests, establish business relationships or send you marketing materials.
The Company uses the following social media accounts in order to engage with you and other third parties:
Discord Accounts- accessible using this link: discord.gg/xyzstore More information about data collected by Discord and Your preferences is available here: https://discord.com/privacy
(g) We use third party services to enrich our customer or prospective customer data - when you express interest in our product, sign up to our newsletter or other marketing materials, or are our customer, we may use a third-party services provider identified in Who we share your personal data with (section (b) to enable us to collate corporate and professional information about our customers and prospective customers. This allows us to understand our customers’ requirements better, customize sales and marketing efforts and develop our products. The third-party processes your email address as data processors for us, and provides us with the following information, if they hold it, from their database: Company (your employer company name and corporate details), your job title, industry, office location (including city), business telephone number, business email address. We process this personal data on the basis of legitimate interest. Without the information we will not be able to customize our communications with you, to best meet your needs. You can opt-out of data enrichment processing, by completing the form at the bottom of the page.
(h) Usage data - when you visit our site, we will store: the website which you visited us from, the parts of our site you visit, the date and duration of your visit, your IP address which we store in full form in the server logs for 30 days for security reasons and which we anonymize on receipt for use in website analytics, information from the device (device type, operating system, screen resolution, language, country you are located in, and web browser type) you used during your visit. We process this usage data using our own analytics tool and we process the information for statistical purposes, to improve our site and to recognize and stop any misuse.
If you disagree to be bound by the Privacy Policy in any scope or way, you must not use or must immediately cease your use of the services, or any part of it, as well as its infrastructure and functionalities.
As part of our business operations, we may sell or share personal information with third parties for commercial purposes, including marketing, data licensing, audience profiling, and strategic partnerships. By using our services, you acknowledge and agree to this practice unless and until you exercise your legal right to opt out.
The categories of personal information that may be sold or shared include:
Full name, email address, mailing address, and phone number
Discord name, API Keys
Internet and electronic network activity, including IP address and browsing behavior
Commercial information such as purchase history, engagement metrics, or preferences
This disclosure may involve a direct exchange of data for monetary or other valuable consideration and may include cross-context behavioral advertising.
You have the right to opt out of the sale or sharing of your personal information at any time. To exercise this right, you may do any of the following:
Click here And Fill Form: https://thexyzstore.com/terms-conditions
Email us directly at: order@thexyzstoredelivery.com
We will honor your request promptly and will not discriminate against you for exercising your privacy rights.
We do not knowingly sell or share personal information about individuals under the age of 16.
By continuing to use our services, you provide affirmative consent to the sale, sharing, or licensing of your personal information as described herein.
You can opt out of being tracked below.
(j) Cookies- we use cookies (small data files transferred onto computers or devices by sites) for record-keeping purposes and to enhance functionality on our site. You may deactivate or restrict the transmission of cookies by changing the settings of your web browser. Cookies that are already stored may be deleted at any time.
3. Opt-out of website tracking
You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users. You may opt-out via the form at the bottom of the page.
Please be aware that some browsers can delete the opt-out cookie if you have not visited our website in a certain time period (each browser has a different time period) as of the date of this policy. These timeframes may be subject to change. If you are not a regular visitor to our websites and wish to opt-out of analytics use, please check the setting when you visit, to make sure the opt-out is still recognized by your browser.
4. Legal bases
We process your Personal Data on the following legal bases:
Consent – We may process your Personal Data for one or more specific purposes if you give us your consent, for example we ask for your consent to receive marketing materials, surveys or general information about our products. Whenever we process your Personal Data on the basis of your consent, we will ask you for it and inform you about your right to withdraw it.
Contract performance and pre-contractual requests – We may process your Personal Data when it is necessary for the performance of a contract with you or for the performance of pre-contractual measures, which are carried out at your request. For example, when you purchase a product or process a payment, when you send us a customer support request or a technical query.
Legal obligation – We may process your Personal Data when it is necessary for compliance with a legal obligation to which we are subject, for example, to comply with any applicable tax laws.
Legitimate interests – We may process your Personal Data when it is necessary for the purposes of our legitimate interests, unless these are overridden by your interests or fundamental rights and freedoms. For example, when we process your enquiries for customer relationship management purposes or when we enrich customer or prospective customer data with data from a third party provider, as explained further below.
5. Your Rights
Data subject rights vary depending on the applicable privacy laws. We are based in the United States and governed by state privacy laws and any applicable privacy laws that apply to the processing because of their extra-territorial effect (e.g. EU GDPR, UK GDPR).
If the EU GDPR or UK GDPR is the law applicable to our processing of your data, you have the right of access to your Personal Data and to information regarding the processing of Personal Data by us, the right to rectification/correction, erasure, restriction of processing and the right to object to the processing of your Personal Data. You also have the right to receive your Personal Data in a structured, common and machine-readable format and to transmit it or have it transmitted to another controller. If you have given us your consent for processing or sale of your Personal Data, you also have the right to withdraw your consent at any time with effect for the future.
To the extent any U.S. state privacy act applies to our processing of your personal information, your rights may include a right to access, correct, delete, opt-out of certain processing, right to portability, right to opt-in for sensitive data processing, right against automated decision making or other rights provided for under applicable laws.
We can only identify you via your email address and we can only adhere to your request and provide information if we have Personal Data about you through you having made contact with us directly and/or you using our site and/or service. We cannot provide, rectify or delete any data that we store on behalf of our users or customers. If you wish to exercise your rights in relation to personal data processed by a publisher or our website, please contact the publisher first.
To exercise any of the rights mentioned in this Privacy Policy and/or in the event of questions or comments relating to the use of Personal Data you may contact our privacy team: order@thexyzstoredelivery.com.
In addition, you have the right to lodge a complaint with a data protection authority or a supervisory authority responsible for protecting your privacy rights. Please contact us at order@thexyzstoredelivery.com and we can provide you with the details of the appropriate authority.
6. Children’s Privacy
Our websites and products are not intended for children or minors. We do not knowingly collect children’s or minors’ personal data. Any accounts created by a child or a minor without parental consent and brought to our attention will be deleted as required by applicable laws. We abide by COPPA and all applicable laws.
7. Who We Share Your Personal Data With
A. Processors
We use a select number of trusted external service providers for certain technical data processing and/or service offerings. These service providers are carefully selected and meet high data protection and security standards. We only share information with them that is required for the services offered and we contractually bind them to treat any information we share with them as confidential and to process personal data only according to our instructions.
Recipient /Purpose of processing /Our legal basis for processing /Data location and security /Personal data collected by the third party / Privacy terms
Server Destroyers LLC
Secure infrastructure for website servers, proxy hosting, databases and logs
Contract (customers, potential customers)
Legitimate interest (other data subjects): security
New York, USA
IP address (stored for 30 days for security reasons), Server Information, contact information provided via forms, subscriptions or questions
https://shop.serverdestroyers.com/privacy
Moonclerk
Proxy Management, Subscription Management, Database, Hosting, Logs
Contract (customers, potential customers)
Legitimate interest (other data subjects): security
South Carolina, USA
Username, Email, Payment Information, Contact Information, Renewal Date, Product Information
https://www.moonclerk.com/privacy-policy
Stripe
Verify Transactions, Access Risks, Manage Payment Processing
Contract (customers, potential customers)
Legitimate interest (other data subjects): security
California, USA
IP address (stored for 30 days for security reasons), contact information provided via forms, subscriptions or questions
https://stripe.com/privacy
Rayobyte & W.P. LLC
Subscription Management, API Key Information, Logs
Contract (customers, potential customers)
Legitimate interest (other data subjects): security
Nebraska, USA - Discord Usernames, API Keys, Logs / https://rayobyte.com/tos-and-aup/
B. Third party services we use
When you visit our websites, or purchase products or services, we use the following third party services providers who collect and process your data as data controllers or joint controllers with us. These providers may collect personal data beyond the data we collect about you. Please refer to the privacy policies of these third parties for full information about what personal data these third parties collect about you, how they process the data, on what legal basis and how to exercise your data subject rights against them.
Recipient / Purpose of processing / Our legal basis for processing / Data location and security /Personal data collected by the third party /Privacy terms
Stripe
Verify Transactions, Access Risks, Manage Payment Processing
Contract (customers, potential customers)
Legitimate interest (other data subjects): security
California, USA
IP address (stored for 30 days for security reasons), contact information provided via forms, subscriptions or questions
https://stripe.com/privacy
Moonclerk
Proxy Management, Subscription Management, Database, Hosting, Logs
Contract (customers, potential customers)
Legitimate interest (other data subjects): security
South Carolina, USA
Username, Email, Payment Information, Contact Information, Renewal Date, Product Information
https://www.moonclerk.com/privacy-policy
KDMV LLC
Subscription Management, API Key Information, Discord Management
Contract (customers, potential customers)
Legitimate interest (other data subjects): security
Cambodia, Southeast Asia
Discord Usernames, Server Information, API Keys, Subscriptions, or Questions
Server Destroyers LLC
Secure infrastructure for website servers, proxy hosting, databases and logs
Contract (customers, potential customers)
Legitimate interest (other data subjects): security
New York, USA
IP address, Server Information, contact information provided via forms, subscriptions or questions
C. When you instruct us to transfer data to third parties
Please be aware of the following:
Data Export: This transfer is initiated by you and is under your control.
Data Privacy: Once your data is exported to us, it will be governed by the applicable policy of the third party you gave us permission to transfer it to. We strongly advise you to review their terms and policies and understand the implications before initiating the data transfer.
Privacy Considerations: Transferring data, especially visitor data, to external platforms can have privacy implications. It's crucial to ensure that you have the necessary permissions and have considered the privacy ramifications of such a transfer.
8. International transfers
If the EU GDPR or UK GDPR applies to our processing of your personal data, we receive it in the United States on the basis of adequacy decision. For the above processors and third-party services, we transfer your personal data to a third country (i.e. outside the European Union (EU), the United Kingdom or the European Economic Area (EEA)) or the processing takes place in the context of the use of third-party services or the disclosure or transfer of data to other persons, bodies or companies, only in accordance with the applicable legal requirements.
Specifically, for the above processors and third-party services, we process or allow the data to be processed on the basis of adequacy or standard contractual clauses of the EU Commission, subject to data transfer impact assessments where required. More information on this is available from us upon request.
Privacy notice to Clients residing in European Union and California
8.1 If You are a resident of European Union (“EU”), please note that:
8.1.1 We are striving to ensure Your rights under The European Union’s General Data Protection Regulation (“GDPR”) . You can find more information on GDPR and Your rights here: https://gdpr.eu/.
8.1.2 You are entitled to rights under GDPR, as Article 3.2. of GDPR states that the GDPR applies to organizations that are not in the EU if two conditions are met: the organization offers goods or services to people in the EU, or the organization monitors their online behavior. If You are using System/Services, such a situation falls into the scope of mentioned Article 3.2. of GDPR.
8.1.3 The obligations of the Company may be limited due to the exceptions indicated in the GDPR (like number of employees in the Company).
8.1.4 You can contact the Company’s DPO in case You have any questions or concerns related to this Privacy Policy or GDPR.
8.1.4.1 Please contact us via email, by sending Your inquiry to our Data protection team at order@thexyzstoredelivery.com.
8.1.4.2 Please contact us via mail, by sending us Your letter to 7014 13TH AVENUE, SUITE 202, BROOKLYN, NY, 11228
8.2 If You are a resident of California, please note that:
8.2.1 We are striving to ensure Your rights under California Consumer Privacy Act of 2018 (Cal. Civ. §§ 1798.100–1798.199) and the California Consumer Privacy Act Regulations by the Attorney General (collectively, “CCPA”).
8.2.2 You are entitled to:
8.2.2.1 The right to know what personal information is being collected.
8.2.2.2 The right to know whether the personal information is sold or disclosed, and to whom such information is sold or disclosed.
8.2.2.3 The right to say “no” to the sale of personal information.
8.2.2.4 The right to delete.
8.2.2.5 The right to access personal information; and
8.2.2.6 The right to equal service and price.
8.2.3 Upon Your verified request the Company shall provide the information on Your personal information that was collected within one year period preceding the request:
8.2.3.1 the categories of personal information the Company collected about You;
8.2.3.2 the categories of sources from which the personal information is collected;
8.2.3.3. the business or commercial purpose for which personal information was collected;
8.2.3.4 the business or commercial purpose for collecting or selling the resident’s personal information;
8.2.3.5 categories of third parties with whom the Company shares personal information; and
8.2.3.6 the specific pieces of personal information that the Company collected about You.
8.2.3.7 A copy of stored personal information.
8.2.4 As stated herein, the Company may sell your personal information, but only for the reasons set forth herein. Therefore, the Company provides a “Do not sell my personal information” box in the System for any and all to easily opt-out.
11.2.5 You can contact the Company’s DPO in case You have any questions or concerns related to this Privacy Police or CCPA.
11.2.5.1 Please contact us via email, by sending Your inquiry to our Data protection team at order@thexyzstoredelivery.com
11.2.5.2 Please contact us via mail, by sending us your letter to 7014 13TH AVENUE, SUITE 202, BROOKLYN, NY, 11228
11.2.5.3 Additionally, You can contact us by completing the form in the “Contact us” section.
11.2.6 The Company shall provide the answer to Your inquiry within terms indicated in this Policy, but in all cases no later than within 45 days of the verifiable request (with the possibility of one 45-day extension).
11.2.7 The following is a list of the categories of personal information that the Company collected about the California residents for a business purpose within the last twelve months.
API keys, discord name, email address, phone number
11.2.7.1 Account data, including : (i) personal information of the Client / its representative (name, discord name, email…etc); (ii) name of the company, if the Client is a legal entity; (iii) valid email address; (iv) valid phone number; (v) country of the residence (vii) requirements for the Service (expected number of IPs a month, type of purchase, etc.). (viii) a confirmation that the Client agrees to the Agreement and Privacy Policy of the Company; (ix) A confirmation that the Client / its representative is a natural person.
11.2.7.2 Log data, such as (i) IP-address, Your location, location data, traffic data, transaction data (like deposit, payment, refund withdrawal address), computer or mobile device information, frequency, time, length of visit and other page interaction data, operating system, browser type, device type, unique device identification number, identification cookies, optionally form data, crash reports, performance data, third-party cookies, etc.; (ii) at all times when using System / Services, we collect and process the following log data: IP address of first or the last login; account credentials and other information as per the Agreement, including date and time of Account creation, as well as log-in date and time; information collected by cookies and Google Analytics, for example: browser type, the web pages You visited, and time spent on them, access time and dates, unique device identification number, other. The mentioned data in this Clause might be collected without assigning it to the specific user.
11.2.7.3 Other information You may choose to insert in Your billing information.
9. Retention of data
We will retain your information as long as your account is active, as necessary to provide you with the services or as otherwise set forth in this Policy. We will also retain and use this information as necessary for the purposes set out in this Policy and to the extent necessary to comply with our legal obligations, resolve disputes, enforce our agreements and protect our legal rights.
We also collect and maintain aggregated, anonymized information which we may retain indefinitely to protect the safety and security of our websites, improve our Services or comply with legal obligations.
10. How We Protect Your Personal Data
Data security is important to us. We process your personal data securely, using appropriate technical and organization measures designed to protect your data from unauthorized access, disclosure, alteration or loss. Some of the measures include: use of secure cloud infrastructure compliant with a number of information security standards, access controls, bug bounty, in-transit and at-rest encryption, response and tracking of security risks and availability controls.
If you have any concerns about the security of your personal data, please contact us immediately using the contact details provided below.
Data Breach Notification.
The Company strives to protect Your personal data in the best way possible. However, sometimes data breaches occur and such events can happen for various reasons.
In the case of a data breach that would prejudice the privacy, confidentiality and security of the personal data of a data subject, the Company, as a data controller, immediately upon becoming aware of such breach, shall notify the Data Office of such data breach.
The required notification shall include details such as: the nature, category, reasons, approximate number and records of the data breach, a description of the likely consequences of the data breach; and a description of the measures and remedial action taken by the controller to address the data breach.
11. Automated decision-making including profiling
We do not perform automated decision making or profiling.
12. Privacy Policy changes
We may unilaterally modify or update this Policy from time to time without notice. If we make any material changes we’ll let you know, either by notifying you on the website or by sending you an email. Once posted on this website, the amended Privacy Policy will be effective as of the Effective Date stated above. The continuous use of the Services and system shall be deemed as acceptance of this Privacy Policy in the last and most updated version. Anybody can check or access the Privacy Policy. Any update of this Agreement comes in force at the moment it is published.
The latest version of the Privacy Policy shall be available at: www.thexyzstore.com/privacy-policy
Contact us
If you have any questions or concerns regarding this Privacy Policy or how your personal data is processed, please contact us by emailing order@thexyzstoredelivery.com or via the contact form: https://thexyzstore.com/contact
We aim to respond to your inquiries as soon as reasonably possible. If you want to give us feedback on how we handled your request, please let us know. We are always trying to improve.
EU Representative
Because we are located outside of the EU and UK, our team has named a representative of controllers or processors not established in the EU or the EEA and in the UK (Art. 27 GDPR):
If you are a resident of the EU or the EEA, you can contact:
Matt @ order@thexyzstoredelivery.com or submit here: https://thexyzstore.com/contact
If you are a resident of the UK, you can contact:
Matt @ order@thexyzstoredelivery.com or submit here: https://thexyzstore.com/contact
External Data Protection Officer
If you wish to communicate directly with our Data Protection Officer (because you have a particularly sensitive matter for example), please contact them by post, as communication by e-mail could always have security gaps.
Please state in your request that your concern relates to the company XYZStore