Privacy Notice

This notice explains how CXStrike handles information when you visit this website, request a free baseline, or participate in an authorized lead-response monitoring check.

Information we collect

• Request information: work email, agency or company name, the domain to check, and your authorization confirmation.
• Monitoring evidence: the authorized test label, submission and response timestamps, status, and limited evidence needed to document the inquiry path. When necessary, this can include a redacted screenshot of the public form result or confirmation.
• Security information: a one-way cryptographic hash derived from the submitting connection address for rate limiting. CXStrike does not store the raw address in its request database.
• Private status access: when a baseline request is accepted, the site creates a high-entropy access code and displays it once in a private status link. The request database stores only a SHA-256 digest of that code.
• Service logs: our infrastructure provider may process routine request metadata needed to deliver and protect the website.

How we use information

We use information to review authorization, scope and perform requested checks, create evidence reports, respond to inquiries, prevent abuse, operate the service, and meet legal obligations. We do not sell personal information or use request data for cross-context behavioral advertising.

Authorization and monitoring

CXStrike only accepts checks for domains the requester owns or is permitted to test. Tests are clearly labeled, low frequency, and limited to the agreed public inquiry path. We do not bypass CAPTCHA or other access controls.

Retention

Free-baseline request records, the status-access digest, and necessary evidence, including any redacted screenshots, are scheduled for deletion 30 days after submission. Purpose-built demo evidence is scheduled for deletion after 90 days. A customer agreement may establish a different period for paid monitoring. We may preserve limited information longer when reasonably necessary for security, dispute resolution, or legal compliance.

Service providers and disclosure

Cloudflare provides website delivery, security, serverless processing, and database infrastructure. We disclose information when needed to operate the service, follow your instructions, protect rights and safety, or comply with law. We do not authorize service providers to use request data for their own marketing.

Security

We use access controls, transport encryption, data minimization, request-size limits, same-origin controls, rate limiting, and automatic retention cleanup. The private status page shows only limited lifecycle information and does not display your work email, company, internal notes, or detailed testing scope. Its access code is placed after the # in the link, so it is not included in the page request. Keep the link private: anyone who has it may view that limited status information, and CXStrike cannot recover the original code from its stored digest. No system is perfectly secure, so please do not submit sensitive personal information through the baseline form.

Your choices and requests

You may ask to access, correct, or delete your request information. Depending on where you live, additional rights may apply. Email privacy@parsethedata.com. We may need to verify your request before acting.

Children

CXStrike is a business service and is not directed to children under 13. Do not use the service to submit children’s information.

Changes

We may update this notice as the service changes. The effective date above identifies the current version.

Contact

Privacy questions: privacy@parsethedata.com
General inquiries: cxstrike@parsethedata.com