Compliance

This page summarizes our corporate compliance approach for GEXC Labs and gexc.com. It is not a certification claim. Individual portfolio companies may pursue additional product-specific compliance programs as their markets require.

We align our corporate data practices with widely recognized privacy principles, including purpose limitation, data minimization, security safeguards, and respect for individual rights.

• Privacy Policy describes collection and use of personal information
• Support for access and deletion requests via privacy@gexc.com
• Vendor and subprocessors reviewed for appropriate data handling

Our security program emphasizes defense-in-depth for corporate systems. Details are available on our Security page, including infrastructure protections, application controls, and responsible disclosure.

Depending on operations, customers, and jurisdictions, GEXC Labs and portfolio companies may need to consider frameworks such as:

• GDPR / UK GDPR (personal data of individuals in the EEA/UK)
• CCPA/CPRA and similar US state privacy laws
• CAN-SPAM and anti-spam rules for marketing communications
• Industry-specific requirements as portfolio products enter regulated markets

We evaluate applicability as our products and customer base evolve and update practices accordingly.

As an AI venture studio, we encourage portfolio companies to design AI features with transparency, human oversight where appropriate, evaluation of model outputs, and safeguards against misuse. Product-level AI disclosures and policies are maintained by each launched company as relevant.

Launched companies (MyPDF.io, Recruit.win, Resume.win, Any.win, and future products) may maintain independent legal entities, terms, privacy policies, DPAs, and compliance attestations. Use of a portfolio product is governed by that company's agreements, not solely by this corporate compliance page.

We use carefully selected infrastructure and SaaS providers (for example hosting, CDN/WAF, analytics, and communications). We expect vendors to maintain appropriate security and confidentiality commitments consistent with the services they provide.

We aim to maintain reliable availability of corporate systems through cloud hosting, backups where appropriate, and operational monitoring. Portfolio companies define their own uptime and continuity commitments in product terms or SLAs.

For compliance-related inquiries, including:

• Privacy or data subject requests
• Security questionnaires for partnerships
• Vendor due diligence
• Policy clarifications

Contact compliance@gexc.com. We respond as reasonably practicable based on the nature of the request.

This Compliance page will be updated as GEXC Labs grows, new portfolio companies launch, and regulatory expectations change. The "Last updated" date reflects the latest revision.