1. Introduction

CRESO Holdings LLC, doing business as VehiX360 ("VehiX360," "we," "us," or "our"), is committed to protecting the privacy of our Affiliates. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you participate in the VehiX360 Affiliate Program.

Please read this privacy policy carefully. By participating in the Affiliate Program, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you register as an affiliate, we collect:

• Identity Information: Full legal name, date of birth
• Contact Information: Email address, phone number, mailing address
• Tax Information: Social Security Number (SSN) or Employer Identification Number (EIN), for tax reporting purposes
• Payment Information: Bank account details for ACH payments, PayPal email, or mailing address for checks
• Business Information: Company name, website URL, LinkedIn profile (if applicable)

2.2 Usage Information

We automatically collect certain information when you use our Affiliate Portal:

• Device Information: IP address, browser type, operating system
• Activity Data: Login times, pages viewed, features used
• Referral Metrics: Clicks, conversions, earnings, referral history

2.3 Cookies and Tracking

We use cookies and similar tracking technologies to track referrals and attribute conversions to affiliates. Our referral tracking uses first-party cookies with a 30-day attribution window.

3. How We Use Your Information

We use collected information for the following purposes:

• Program Administration: Process applications, verify identity, manage your account
• Commission Processing: Track referrals, calculate commissions, issue payments
• Tax Compliance: Generate tax forms (1099-NEC), report to tax authorities as required
• Communication: Send program updates, payment notifications, marketing materials
• Fraud Prevention: Detect and prevent fraudulent referrals or account abuse
• Analytics: Improve the Affiliate Program and our services
• Legal Compliance: Comply with applicable laws and regulations

4. Information Sharing

We may share your information with:

• Service Providers: Payment processors, email service providers, cloud hosting
• Tax Authorities: IRS and state tax agencies for tax reporting
• Legal Requirements: When required by law, subpoena, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do NOT sell your personal information to third parties.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of sensitive data (TLS/SSL in transit, AES-256 at rest)
• Multi-factor authentication (MFA) for account access
• Regular security audits and penetration testing
• Access controls and employee training
• Tax ID numbers are encrypted and only partially displayed (last 4 digits)

While we strive to protect your information, no method of transmission over the Internet is 100% secure. Please use strong, unique passwords and enable MFA on your account.

6. Data Retention

We retain your information for as long as necessary to:

• Maintain your active affiliate account
• Process pending or future commission payments
• Comply with tax record-keeping requirements (typically 7 years)
• Resolve disputes or enforce our agreements

After account termination, we may retain certain information as required by law or for legitimate business purposes.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your information (subject to legal requirements)
• Portability: Receive your data in a portable format
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at privacy@vehix360.com.

8. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it's used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

9. International Data Transfers

VehiX360 is based in the United States. If you participate from outside the US, your information will be transferred to and processed in the United States. By participating in the Affiliate Program, you consent to this transfer.

10. Children's Privacy

The Affiliate Program is not intended for individuals under 18 years of age. We do not knowingly collect information from children. If we learn that we have collected information from a minor, we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Affiliate Portal. The "Last Updated" date at the top of this policy indicates when it was last revised.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: