XSolutions Website Privacy Policy
Effective date: 11/02/2026 · Last updated: 11/02/2026
XSolutions Consulting Services LLC (“XSolutions,” “we,” “us”) operates www.xsolutions.com (the “Site”). This Privacy Policy explains what personal information we collect through the Site, how we use and share it, and the choices and rights you have.
Scope. This policy covers the Site and our related marketing and inquiry communications. It does not cover:
- the Intermodal Portal website or application, each of which has its own privacy notice; or
- personal information we process for our managed-services clients on their behalf, which is governed by our service agreements and Data Processing Agreement with those clients.
The Site is intended for businesses in the United States and is not directed to children.
- Information we collect
Information you give us. When you submit an inquiry, request a download, subscribe to updates, use live chat or email us, we collect your name, company, job title, business email address, phone number and the content of your message.
Information collected automatically. When you visit the Site, we and our service providers collect your IP address, browser and device type, pages viewed, referring site, and the date and time of your visit. Where you consent (or where your choices allow), cookies and similar technologies also collect information about how you use the Site and other websites. See Section 4 and the cookie table in the Appendix.
Information from others. We may receive business contact information from our advertising and analytics partners.
We do not ask for, and ask you not to submit, sensitive information such as Social Security numbers, financial account numbers or health information through the Site.
- How we use information
We use personal information to:
- respond to inquiries, provide requested materials and follow up on your interest in our services;
- send newsletters, event invitations and service information to business contacts (you can opt out at any time);
- operate, secure and improve the Site, including preventing spam, bots and fraud;
- understand how the Site is used and measure our advertising, where you have allowed analytics and advertising cookies;
- manage our relationship with clients and prospects, including billing; and
- comply with law and protect our rights.
We do not use personal information from the Site to make automated decisions that have legal or similarly significant effects on you.
- How we share information
We do not sell personal information, and we do not share it with third parties for their own marketing.
We share personal information only with:
- Service providers that run the Site and our business for us under contract, such as website hosting and security (Cloudflare), email and productivity (Microsoft 365), our CRM and email marketing tools, live chat, form spam protection (Google reCAPTCHA), and payment processors that are PCI DSS compliant. They may use the information only to provide their services to us.
- Analytics and advertising partners, such as Google, LinkedIn and Meta (Facebook), through cookies and similar technologies, only where you have allowed those cookies. Using their advertising cookies to show you ads on other websites may count as “sharing” or “targeted advertising” under some U.S. state privacy laws. You can turn this off at any time (see Section 4).
- Authorities and others where required: to comply with law, a court order or other legal process, or to protect the rights, property or safety of XSolutions, our clients or others.
- A successor business, if XSolutions is involved in a merger, acquisition or sale of assets, subject to this policy.
We may share aggregated or de-identified information that cannot reasonably identify you.
- Cookies and your choices
The Site uses cookies and similar technologies (such as local storage and embedded content). The Appendix lists them.
- Essential cookies run the Site securely, protect our forms from spam and remember your cookie choices. They are always on.
- Nonessential cookies — analytics, advertising, social media and embedded content, and chat — load only if you allow them in our cookie banner.
Your choices
- Cookie settings: use the cookie banner when you first visit, or the “Manage consent” link at the bottom of any page, to accept or reject nonessential cookies by category and change your choice at any time.
- Global Privacy Control (GPC): if your browser sends a GPC signal, we treat it as a request to opt out of advertising cookies and any “sharing” or “targeted advertising” for that browser.
- Do Not Track: we honor GPC as described above; we do not respond to other “Do Not Track” browser signals.
- Browser settings: you can also block or delete cookies in your browser. Blocking essential cookies may affect how the Site works.
- Partner choices: you can learn more about or opt out of personalized advertising through Google’s Ad Settings and LinkedIn’s ad preferences.
- Email marketing
You can stop marketing emails at any time by using the unsubscribe link in any email or by contacting us. We will still send messages needed to provide services you have contracted for, such as service notices and invoices.
- How long we keep information
We keep personal information only as long as needed for the purposes above or as required by law, under our records retention schedule:
- Inquiry emails: two to seven years, depending on the subject.
- Prospect records in our CRM: one year after our last communication if you have not responded.
- Client records: for the duration of our relationship, then as required for legal, tax and audit purposes.
- Unsubscribe requests: kept permanently so we can continue to honor them.
- Cookies: for the durations shown in the Appendix.
- Security
We protect personal information with administrative, technical and physical safeguards appropriate to its sensitivity, including encryption of data in transit (HTTPS), multi-factor authentication, access limited to staff who need it, endpoint protection and 24/7 security monitoring, and oversight of our service providers. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a security breach as required by law.
- Your privacy rights
Wherever you live, you may ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct inaccurate information;
- delete your information, subject to legal or contractual reasons we must keep it; and
- stop marketing to you and opt out of advertising cookies.
State privacy rights. This paragraph applies only if a U.S. state privacy law covers our processing of your personal information, such as the California Consumer Privacy Act, the Connecticut Data Privacy Act or the New Jersey Data Privacy Act. In that case, you also have the rights that law provides, which may include the right to:
- know the categories and specific pieces of personal information we have collected about you, and to receive a portable copy;
- opt out of the sale of your personal information, its “sharing” for cross-context behavioral advertising, targeted advertising, and profiling that produces legal or similarly significant effects; and
- appeal our decision on your request.
We do not sell personal information. We may share identifiers and internet activity with advertising partners through cookies where you have allowed them (Section 3); you can opt out at any time through the cookie settings or Global Privacy Control (Section 4), or by contacting us. We do not collect sensitive personal information through the Site, and we do not knowingly sell or share the personal information of anyone under 16.
For California residents, in the past 12 months we have collected: identifiers (such as name, email, phone and IP address); professional information (company and job title); internet activity (pages viewed and cookie data); and approximate location derived from IP address. Sources, purposes, recipients and retention are described in Sections 1, 2, 3 and 6.
Appeals. If we decline your request, you may appeal by emailing [email protected] with “Privacy Appeal” in the subject line. We will respond within 60 days. If you disagree with our response, you may contact your state Attorney General.
How to make a request: email [email protected] or call (845) 362-9675. To protect your information, we verify requests by matching the details you provide (such as your name, email address and company) with the information we hold. If needed, we may ask you for additional information to confirm your identity, and we will use it only for that purpose. If we cannot verify your identity, we may decline a request to access or delete information and will tell you why. If we hold no personal information about you, we will tell you. Requests to opt out do not require verification. We will respond within 30 days, or sooner where the law requires. An authorized agent may make a request for you with your written permission. We will not treat you differently for exercising your rights.
- Visitors outside the United States
The Site is intended for U.S. businesses. If you visit from another country, your information will be processed in the United States, where privacy laws may differ from those in your country. If the EU or UK GDPR applies to you, we rely on these legal bases: performing or preparing a contract with you; our legitimate interests in responding to inquiries, marketing to business contacts and securing the Site; your consent for nonessential cookies and newsletters (which you can withdraw at any time); and legal obligations. You may also have the right to object to processing, to restrict it, to data portability and to complain to your local data protection authority.
- Children
The Site is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
- Links to other websites
The Site links to other websites and social media pages that we do not control. Their privacy practices are governed by their own policies.
- Changes to this policy
We will post any changes on this page and update the “Last updated” date. If we make material changes, we will provide a more prominent notice on the Site.
- Contact us
XSolutions Consulting Services LLC, Attention: Compliance Officer
20 Squadron Blvd., STE 320, New City, NY 10956
Telephone: (845) 362-9675 · Email: [email protected]
Appendix — Cookies and similar technologies on the Site
Based on our cookie review of www.xsolutions.com (October 2026). “Persistent” means the item remains until it expires or you clear it in your browser.
| Category | Name | Provider | Purpose | Duration |
| Essential — Consent management | cmplz_functional | Complianz (this site) | Stores cookie consent preferences | 365 days |
| Essential — Consent management | cmplz_statistics | Complianz (this site) | Stores cookie consent preferences | 365 days |
| Essential — Consent management | cmplz_preferences | Complianz (this site) | Stores cookie consent preferences | 365 days |
| Essential — Consent management | cmplz_marketing | Complianz (this site) | Stores cookie consent preferences | 365 days |
| Essential — Consent management | cmplz_user_data | Complianz (this site) | Determines which cookie banner to show | 365 days |
| Essential — Consent management | cmplz_id | Complianz (this site) | Stores cookie consent preferences | 365 days |
| Essential — Consent management | cmplz_saved_services | Complianz (this site) | Stores cookie consent preferences | 365 days |
| Essential — Consent management | cmplz_saved_categories | Complianz (this site) | Stores cookie consent preferences | 365 days |
| Essential — Consent management | cmplz_policy_id | Complianz (this site) | Stores accepted cookie policy ID | 365 days |
| Essential — Consent management | cmplz_banner-status | Complianz (this site) | Stores whether the cookie banner was dismissed | 365 days |
| Essential — Consent management | wp_consent_* | WordPress (this site) | Stores cookie consent preferences | 1 month |
| Essential — Consent management | aviaCookieConsent | Website theme (this site) | Stores cookie consent banner choice | 365 days |
| Essential — Security | _grecaptcha | Google reCAPTCHA | Spam and bot protection on forms | 6 months |
| Essential — Security | rc::a | Google reCAPTCHA | Reads and filters requests from bots | Persistent |
| Essential — Security | rc::b | Google reCAPTCHA | Reads and filters requests from bots | Session |
| Essential — Security | rc::c | Google reCAPTCHA | Reads and filters requests from bots | Session |
| Essential — Site delivery | mirage_cache_manifest | Cloudflare | Faster image delivery through the CDN | Persistent |
| Essential — Site delivery | wpEmojiSettingsSupports | WordPress (this site) | Checks browser emoji support so pages display correctly | Session |
| Nonessential — Analytics | _ga | Google Analytics | Stores and counts pageviews | 2 years |
| Nonessential — Analytics | _ga_* | Google Analytics | Stores and counts pageviews | 1 year |
| Nonessential — Analytics | lms_analytics | Stores and tracks a visitor’s identity for LinkedIn analytics | 30 days | |
| Nonessential — Analytics | AnalyticsSyncHistory | Stores and tracks visits across websites | 30 days | |
| Nonessential — Analytics | *_mixpanel | Mixpanel | Tracks visitor actions and usage on the site | 365 days |
| Nonessential — Analytics | formbricks-js | Formbricks (survey tool) | Survey and feedback tracking | Persistent (local storage; until cleared) |
| Nonessential — Advertising | _gcl_au | Google AdSense | Stores and tracks conversions | Persistent |
| Nonessential — Advertising | google_adsense_settings | Google AdSense | Ad delivery and retargeting | Persistent |
| Nonessential — Advertising | _gcl_ls | Google AdSense | Stores and tracks interaction | Persistent |
| Nonessential — Advertising | lms_ads | Stores and tracks visits across websites | 30 days | |
| Nonessential — Advertising | UserMatchHistory | Ad delivery and retargeting | 30 days | |
| Nonessential — Advertising | li-oatml | Ad delivery and retargeting | 1 month | |
| Nonessential — Advertising | _guid | Stores and tracks a visitor’s identity | 90 days | |
| Nonessential — Advertising | li_sugr | Stores and tracks a visitor’s identity | 90 days | |
| Nonessential — Advertising | li_adsId | LinkedIn advertising identifier | 6 months | |
| Nonessential — Advertising | _fbc | Stores last visit | 2 years | |
| Nonessential — Advertising | _fbp | Stores and tracks visits across websites | 3 months | |
| Nonessential — Advertising | fr | Ad delivery and retargeting | 3 months | |
| Nonessential — Advertising | act | Stores logged-in users | 90 days | |
| Nonessential — Advertising | xs | Stores a unique session ID | 3 months | |
| Nonessential — Advertising | c_user | Stores a unique user ID | 30 days | |
| Nonessential — Advertising | datr | Fraud prevention and browser identification | 2 years | |
| Nonessential — Advertising | sb | Stores browser details | 2 years | |
| Nonessential — Advertising | _js_datr | Browser identification | 2 years | |
| Nonessential — Advertising | fbm* | Stores account details | 1 year | |
| Nonessential — Advertising | *_fbm_ | Stores account details | 1 year | |
| Nonessential — Advertising | VISITOR_INFO1_LIVE | YouTube (Google) | Ad delivery and retargeting | 6 months |
| Nonessential — Advertising | PREF | YouTube (Google) | Stores user preferences | 8 months |
| Nonessential — Advertising | YSC | YouTube (Google) | Stores and tracks interaction | Session |
| Nonessential — Advertising | GPS | YouTube (Google) | Stores location data | Session |
| Nonessential — Advertising | topicsLastReferenceTime | Chrome browser (Topics API) | Interest-based advertising signal; may be set by the browser, not the site | 3 weeks |
| Nonessential — Social media / embedded content | wd | Reads screen resolution | 1 week | |
| Nonessential — Social media / embedded content | csm | Fraud prevention | 90 days | |
| Nonessential — Social media / embedded content | actppresence | Tracks whether the browser tab is active | Session | |
| Nonessential — Social media / embedded content | bcookie | Stores browser details | 1 year | |
| Nonessential — Social media / embedded content | bscookie | Stores logged-in users | 1 year | |
| Nonessential — Social media / embedded content | lidc | Load balancing | 1 day | |
| Nonessential — Social media / embedded content | X-LI-IDC | Load balancing | 1 day | |
| Nonessential — Social media / embedded content | sdsc | Load balancing | Session | |
| Nonessential — Social media / embedded content | li_gc | Stores LinkedIn cookie consent preferences | 6 months | |
| Nonessential — Social media / embedded content | li_alerts | Stores whether a message has been shown | 1 year | |
| Nonessential — Social media / embedded content | BizographicsOptOut | Stores LinkedIn privacy preferences | 10 years | |
| Nonessential — Social media / embedded content | linkedin_oauth_ | LinkedIn sign-in / authentication | Session | |
| Nonessential — Social media / embedded content | Google Fonts API | Google Fonts | No cookie set; visitor’s IP address is sent to Google when fonts load | Expires immediately |
| Nonessential — Social media / embedded content | Google Maps API | Google Maps | No cookie set; visitor’s IP address is sent to Google when maps load | Expires immediately |
| Nonessential — Chat support | twk_* | Tawk.to | Live chat session | Session |
| Nonessential — Chat support | twk_uuid_* | Tawk.to | Recognizes returning chat visitors | 6 months |
| Nonessential — Chat support | tawk_has_register_visitor | Tawk.to | Records that the visitor is registered in chat | Session |
| Nonessential — Chat support | TawkConnectionTime | Tawk.to | Chat connection timing | Session |
| Nonessential — Chat support | previousNav | Tawk.to | Temporarily stores the last page viewed so chat agents have context (session storage) | Session |
| Nonessential — Chat support | intercom-device-id-* | Intercom | Stores a unique device ID | 9 months |
| Nonessential — Chat support | intercom-session-* | Intercom | Chat session | 1 week |
| Nonessential — Notifications | _BEAMER_* | Beamer | Product-update notices; tracks which a visitor has seen | 300 days |
| Nonessential — Forms / CRM | contactId | Keap (CRM) | Links a submitted web form to the visitor’s contact record in our CRM | Session |
| Nonessential — Performance | long_tasks_event_log | Third-party script (unidentified) | Performance logging (local storage) | Persistent |
| Nonessential — Performance | long_tasks_span_log | Third-party script (unidentified) | Performance logging (local storage) | Persistent |
| Nonessential — Performance | loglevel | Third-party script (unidentified) | Debug logging | Persistent |
Set only for logged-in XSolutions staff, never for ordinary visitors: WP_DATA_USER_52, qm-container-height, qm-container-width, googlesitekit_*.
