Privacy Policy

1. Introduction

This Privacy Policy describes how Softisland Hongkong Limited ("Company", "we", "us") collects, uses, and protects information in connection with the IGXE.com API services and related business services (collectively, the "Service").

IGXE.com provides API-based CS2 virtual item inventory and procurement services for business clients. This Privacy Policy applies to our business partners, their authorized representatives, and personnel who interact with our Service.

By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for the processing of personal data is:

Softisland Hongkong Limited

19H MAXGRAND PLAZA, NO.3 TAI YAU STREET, SAN PO KONG, KOWLOON, HONG KONG

Email: api@igxe.com

3. Information We Collect

3.1 Business Account Information

When you register for API access, we collect:

• Company name and registration details
• Business address
• Contact person name, title, email address, and phone number
• Billing information and payment details
• Steam Trade URL for item delivery

3.2 Business Verification Documents

For account verification, we may collect:

• Business registration certificates
• Identification documents of authorized representatives
• Proof of business address
• Banking or payment account information

3.3 Technical and Usage Data

We automatically collect:

• API request logs (endpoints accessed, timestamps, request parameters)
• IP addresses and server information
• Authentication tokens and session data
• Error logs and diagnostic information

3.4 Transaction Data

We record:

• Order details (items, quantities, prices)
• Delivery information (Steam Trade Offer status)
• Payment and billing records
• Account balance and transaction history

3.5 Communications

We retain records of:

• Support requests and correspondence
• Technical integration discussions
• Commercial negotiations and agreements

4. How We Use Information

4.1 Service Provision

• Processing API requests and fulfilling orders
• Delivering items to designated Steam accounts
• Managing account balances and billing
• Providing technical support

4.2 Security and Compliance

• Verifying business identity and legitimacy
• Detecting and preventing fraud or abuse
• Monitoring for unauthorized API access
• Complying with legal and regulatory obligations

4.3 Service Improvement

• Analyzing API usage patterns
• Improving service reliability and performance
• Developing new features and services

4.4 Communications

• Sending service notifications and updates
• Providing API documentation and technical guidance
• Communicating about account status and billing

5. Legal Basis for Processing

We process personal data on the following legal grounds:

• Contract Performance: Processing necessary to provide the Service and fulfill our contractual obligations to you.
• Legal Obligation: Processing necessary to comply with applicable laws, including anti-money laundering regulations and tax requirements.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, security, and service improvement, where such interests are not overridden by your rights.

6. Information Sharing

6.1 Service Providers

We may share information with third-party service providers who assist in operating our Service:

• Payment processors for transaction processing
• Cloud infrastructure providers for data hosting
• Business verification services

These providers are contractually obligated to protect your information and use it only for specified purposes.

6.2 Steam Platform

Item delivery requires interaction with the Steam platform. We transmit Steam Trade URLs and related information necessary to complete Trade Offers.

6.3 Legal Requirements

We may disclose information when required by law, court order, or government request, or when necessary to protect our rights, property, or safety.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6.5 No Sale of Data

We do not sell personal information to third parties for marketing purposes.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including Hong Kong and other jurisdictions where our servers or service providers are located.

When transferring data internationally, we implement appropriate safeguards, including standard contractual clauses where required by applicable law.

8. Data Retention

We retain information for as long as necessary to provide the Service and comply with legal obligations:

• Account and business verification data: Duration of business relationship plus seven (7) years
• Transaction records: Seven (7) years for tax and legal compliance
• API logs: Twelve (12) months
• Support communications: Three (3) years

After the retention period, data is securely deleted or anonymized.

9. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit (TLS) and at rest
• Secure API authentication mechanisms
• Access controls and authentication requirements
• Regular security assessments
• Incident response procedures

While we strive to protect your information, no system is completely secure. You are responsible for maintaining the security of your API credentials.

10. Your Rights

Depending on your location, you may have the following rights regarding personal data:

• Access: Request a copy of personal data we hold about you or your authorized representatives
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of personal data, subject to legal retention requirements
• Restriction: Request restriction of processing in certain circumstances
• Data Portability: Receive data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests

To exercise these rights, contact us at api@igxe.com. We will respond within thirty (30) days.

11. Cookies and Tracking

Our API services primarily operate through programmatic access rather than web browsers. For any web-based dashboards or documentation:

• Essential Cookies: Required for authentication and security
• Functional Cookies: Remember preferences and settings
• Analytics: Understand usage patterns to improve service

You can control cookies through your browser settings.

12. Third-Party Services

Our Service integrates with third-party platforms, particularly Steam. Your use of Steam is subject to Valve Corporation's privacy policy. We are not responsible for the privacy practices of third-party services.

13. Children's Privacy

Our Service is intended for business use only and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the API dashboard. The "Last Updated" date indicates the most recent revision.

Continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

15. Contact Information