CXOVector is a subscription-based executive job intelligence service operated by SpinKorp LLC, a Virginia LLC ("CXOVector", "CXOVector: The Brief," "CXOV," "we," "us," or "our"). This Privacy Policy describes how we collect, use, store, and protect personal information when you use our service, and explains your rights with respect to that information.
This Policy applies to all users of our website and service. By using CXOV, you agree to the collection and use of information as described in this Policy. This Policy is incorporated by reference into our Terms of Use.
We collect information in two ways: information you provide directly, and information collected automatically when you use the service.
Information you provide:
| Category | Examples | Purpose |
|---|---|---|
| Account Information | Name, email address, password | Account creation and authentication |
| Profile & Background | Employment history, current title, resume summary, career background | Generating your personalized brief |
| Search Parameters | Target titles, compensation range, industries, geography preferences | Configuring your brief search |
| Payment Information | Credit card number, billing address | Processing subscription payments (via Stripe — not stored on our servers) |
| Communications | Support requests, messages to our team | Customer support and service improvement |
Information collected automatically:
- Usage data: Pages visited, features used, time spent, click patterns within the service
- Device & technical data: IP address, browser type and version, operating system, referring URL
- Session data: Login timestamps, session duration
- Cookies and similar technologies: As described in Section 8
We do not collect sensitive personal information such as Social Security numbers, government-issued ID numbers, financial account numbers (other than payment processing via Stripe), biometric data, or health information.
We use the information we collect for the following purposes:
- Delivering your brief: Using your profile and parameters to identify, score, and format relevant executive job opportunities for weekly delivery
- Account management: Creating and managing your account, authenticating your identity, and communicating important service information
- Payment processing: Processing your subscription payments through our payment processor (Stripe)
- Service improvement: Analyzing aggregated, de-identified usage patterns to improve our matching algorithms, source network, and user experience
- Customer support: Responding to your questions, requests, and support inquiries
- Legal and compliance: Meeting our legal obligations, enforcing our Terms of Use, and protecting our rights and the rights of other users
- Communications: Sending your brief, transactional emails (receipts, account notices), and service updates. We do not send marketing emails to third parties based on your data
- Sell your personal information to any third party for any purpose
- Share your identity, background, compensation data, or search parameters with employers, recruiters, headhunters, or staffing agencies
- Use your data to train AI models operated by or licensed to third parties without your consent
- Build or sell a profile of you for advertising targeting purposes
- Share your data with data brokers
- Send your personal information to job boards or career platforms on your behalf without your explicit action
- Disclose that you are actively searching for employment to your current employer or any other party
We share personal information only in the limited circumstances described below:
| Recipient | What Is Shared | Why |
|---|---|---|
| Stripe (payment processor) | Payment card information, billing address, transaction data | Processing subscription payments securely |
| Email delivery provider | Your email address, your brief content | Delivering your weekly brief to your inbox |
| Hosting & infrastructure providers | Encrypted account and profile data | Operating and storing the service securely |
| Analytics providers | Aggregated, anonymized usage data only — no personal identifiers | Understanding how the service is used |
| Legal authorities | As required by law | Compliance with valid legal process (subpoenas, court orders, regulatory requirements) |
| Business successors | Account and profile data | In connection with a merger, acquisition, or sale of assets — with notice to you |
All third-party service providers we engage are contractually required to process personal data only on our instructions, implement appropriate security measures, and not use your data for their own purposes.
We retain your personal information for as long as your account is active and for a reasonable period thereafter to fulfill the purposes described in this Policy, comply with legal obligations, and resolve disputes.
- Active accounts: Profile data, brief history, and seen log are retained for the duration of your subscription
- After cancellation: Your data remains accessible for 30 days following cancellation, then is permanently deleted from our systems within an additional 30 days
- Payment records: Transaction records are retained for 7 years as required for tax and accounting purposes
- Support communications: Retained for 2 years following resolution
- Aggregated/anonymized data: May be retained indefinitely as it cannot be used to identify you
You may request earlier deletion of your data at any time by contacting us at privacy@cxovector.com. Deletion requests are processed within 30 days.
We implement commercially reasonable technical and organizational security measures designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption of data in transit using TLS/SSL
- Encryption of sensitive data at rest
- Access controls limiting employee access to personal data on a need-to-know basis
- Regular security reviews of our systems and practices
- Payment card data handled exclusively by Stripe — we never store your full card number
We use cookies and similar technologies to operate and improve the service. Specifically:
| Cookie Type | Purpose | Can You Opt Out? |
|---|---|---|
| Strictly Necessary | Keeping you logged in, maintaining your session, security tokens | No — required for the service to function |
| Functional | Remembering your preferences and settings | Yes — via browser settings |
| Analytics | Understanding how users navigate the service (anonymized) | Yes — via our cookie preference tool |
We do not use advertising cookies or sell cookie-derived data. You can manage cookie preferences through your browser settings; note that disabling certain cookies may affect service functionality.
Email open tracking. The briefs and account emails we send you contain a small, invisible image, sometimes called a tracking pixel. When your email program loads that image, our email delivery provider, Postmark, records that the message was opened, along with the time, the type of email program and device, and an approximate location based on the network address used to load the image. We use this information only to confirm that briefs are being delivered and read, to diagnose delivery problems, and to decide when briefs should arrive. We do not use it for advertising, we do not sell it, and we do not share it with anyone other than Postmark, which processes it on our behalf. We do not track the links in our emails: every link goes directly to its destination.
You can prevent open tracking by setting your email program to not load images automatically. Some email programs, including Apple Mail with Mail Privacy Protection turned on, load images on your behalf, so an open may be recorded even when you have not read the message. Individual open records are kept by Postmark for 45 days and then deleted; Postmark retains aggregate counts, which are not linked to you, for longer. We do not store open data on our own systems. If you have questions about this or would like your open data deleted, contact us at the address listed in the Contact section.
Depending on your location and applicable law, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Portability: Request your data in a structured, machine-readable format
- Restriction: Request that we limit processing of your data in certain circumstances
- Objection: Object to processing based on legitimate interests
To exercise any of these rights, contact us at privacy@cxovector.com. We will respond within 30 days (or the timeframe required by applicable law). We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months
- Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions
- Right to Opt Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out is needed, but you may exercise this right at any time at privacy@cxovector.com
- Right to Correct: You may request correction of inaccurate personal information
- Right to Limit Use of Sensitive Personal Information: We do not collect or use sensitive personal information beyond what is necessary to provide the service
- Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA/CPRA rights
Similar rights may apply to residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with applicable privacy laws. We honor these rights for all users regardless of location to the extent practicable.
To submit a CCPA/state privacy request, contact us at privacy@cxovector.com or call us at the number listed in Section 13. We will verify your identity and respond within the applicable legal timeframe.
CXOV is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18, we will delete that information promptly. If you believe we may have collected information from a minor, please contact us at privacy@cxovector.com.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features. We will provide notice of material changes by sending an email to your registered address and/or posting a notice within the service at least fourteen (14) days before the changes take effect.
Your continued use of the service after the effective date of the updated Policy constitutes your acceptance of the changes. The most current version of this Policy is always available at cxovector.com/privacy.
For any privacy-related questions, requests, or concerns, please contact us:
- Privacy requests & rights: privacy@cxovector.com
- General support: support@cxovector.com
- Legal & compliance: legal@cxovector.com
SpinKorp LLC · 14658 Gap Way, Unit 14 · Haymarket, VA 20168