Company: Xperiserv Technologies
This Personal Data Protection Policy describes how Xperiserv Technologies (“we,” “our,” or “us”) collects, processes, stores, and protects personal data of our users and clients globally. We are committed to upholding privacy standards under: India — Digital Personal Data Protection Act, 2023 (DPDPA 2023); European Union — GDPR (Regulation (EU) 2016/679); United States — applicable federal and state-level privacy principles (e.g., CCPA, CPRA). This policy ensures transparency, lawful data processing, and user control across all jurisdictions where we operate.
1. What We Collect
- Personal Identification Data: Name, email address, phone number, and account details.
- Technical and Usage Data: IP address, device information, browser type, and usage logs.
- Communication Data: Customer support messages, feedback, and service inquiries.
- Payment Data: Processed securely through third-party payment partners (we do not store card or banking details).
2. Purpose of Data Collection
- To provide and manage our digital services.
- To communicate updates, invoices, or service notices.
- To enhance website and platform security.
- To comply with legal obligations under applicable laws.
- To improve our products and user experience.
3. Legal Basis for Processing
India (DPDPA 2023): Data is processed based on explicit user consent or other lawful purposes disclosed at the time of collection. Users have full rights to access, correct, and erase their personal data.
European Union (GDPR): We process data under one or more of the following lawful bases: Consent; Contractual Necessity; Legal Obligation; Legitimate Interest (for security, fraud prevention, or service improvement, provided it does not override your rights).
United States (CCPA/CPRA and Other Laws): We comply with U.S. privacy standards ensuring transparency, user control, and data minimization. California residents may request details on data categories collected, opt-out of data sharing, and request deletion under the CCPA and CPRA.
4. User / Data Subject Rights
India (DPDPA 2023): Right to access, correction, erasure, and grievance redressal. Right to nominate another person to exercise your rights.
European Union (GDPR): Right to access and portability; rectification and erasure (“Right to be Forgotten”); restrict or object to processing; withdraw consent at any time; lodge a complaint with your national data protection authority.
United States: Right to know what data is collected; request deletion; opt-out of data sharing or sale (where applicable); non-discrimination for exercising privacy rights.
5. Security of Data
We implement multiple layers of protection: SSL/TLS encryption for data transfer; secure cloud infrastructure and firewalls; access control and staff confidentiality agreements; periodic vulnerability testing and audits; breach notification procedures in compliance with global laws. All third-party vendors and partners (including payment processors like Razorpay, Paytm, PhonePe, and Easebuzz) maintain PCI DSS and equivalent data protection certifications.
6. Data Retention
We retain personal data only as long as required to: fulfill the purpose for which it was collected; comply with legal or regulatory obligations; resolve disputes or enforce agreements. Once data is no longer needed, it is securely deleted or anonymized.
7. Contact
For any data protection request or query, email [email protected].