Xperiserv Technologies (“we,” “us,” or “our”) — this Privacy Policy explains how we collect, use, share, and safeguard your personal data when you use our websites and services (the “Services”), including xperiserv.in and any site that links to this Policy. If you do not agree with our policies and practices, please do not use the Services. Contact: [email protected].
- Summary of Key Points
- What Information We Collect
- Payment Data (Multiple Partners)
- How We Process Your Information
- When and With Whom We Share Information
- Third-Party Websites
- Data Retention
- How We Keep Your Information Safe
- Information About Minors
- Your Privacy Rights (India)
- Cookies & Tracking
- Do-Not-Track
- Changes to This Policy
- Contact Us
- Review, Update, or Delete Your Data (DSR)
1) Summary of Key Points
- We collect personal data you provide, data generated by your use of the Services, and limited data from trusted third parties.
- We comply with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable IT Rules.
- We use data to deliver, secure, improve, and support the Services. We do not sell personal data.
- We do not store or retain any payment card/banking details. Payments are processed by multiple trusted payment partners.
- You can access, correct, delete, or withdraw consent regarding your data, subject to law.
2) What Information We Collect
Personal Data You Provide
When you register, request information, subscribe to updates, contact support, or otherwise interact with us, you may provide: name, email address, phone number; billing/shipping address, organization details; account credentials and preferences.
Sensitive Personal Data
We do not intentionally collect or process sensitive personal data (e.g., biometric, health, religious beliefs). If ever required by law or contract, we will obtain explicit consent.
Information from Other Sources
We may receive limited information (e.g., contact details or public profile links) from public databases, marketing partners, affiliates, social media platforms, or analytics providers to keep our records accurate and relevant.
3) Payment Data (Multiple Partners)
Payments are securely processed by our authorized payment partners. We do not collect, store, or retain any payment card numbers, CVV, UPI PIN, or bank account credentials on our systems. When you pay for services, transactions are handled by providers such as Razorpay (availability may vary). We receive only limited non-sensitive payment metadata (e.g., payment ID, order ID, transaction status) to confirm and reconcile transactions. Our payment partners process financial data in line with PCI DSS and applicable RBI guidelines. If you have questions about a specific transaction, we may guide you to the relevant provider for further details.
4) How We Process Your Information
We process personal data to: provide, operate, and support the Services; create/manage accounts and authenticate users; process orders, invoices, and customer requests; detect and prevent fraud or misuse; communicate updates, marketing (where permitted), and service notices; analyze usage to improve features and performance; comply with legal/regulatory obligations. Lawful bases: consent, performance of a contract, legal obligation, and legitimate interests, as applicable.
5) When and With Whom We Share Information
- Service Providers/Processors (e.g., hosting, analytics, payment partners, email delivery) under confidentiality and data protection terms.
- Business Partners/Affiliates to enable features or joint offerings.
- Legal/Regulatory disclosures when required by law or to protect rights and security.
- Business Transfers in connection with a merger, acquisition, or reorganization.
6) Third-Party Websites
Our Services may link to third-party websites or apps. We are not responsible for their content or privacy practices. Review their policies before providing data.
7) Data Retention
We retain personal data only as long as necessary for the purposes described here, to comply with laws (e.g., tax/accounting), resolve disputes, and enforce agreements.
8) How We Keep Your Information Safe
We use reasonable technical and organizational safeguards, including encryption in transit, access controls and monitoring, to protect personal data.
9) Information About Minors
Our Services are not directed to children under 18, and we do not knowingly collect data from minors.
10) Your Privacy Rights (India)
Under the DPDP Act 2023, you may request access, correction, erasure, and grievance redressal, and may nominate another individual to exercise rights on your behalf. Requests can be sent to [email protected].
11) Cookies & Tracking
We may use cookies and similar technologies to operate the site and understand usage. You can manage cookies through your browser settings.
12) Do-Not-Track
We currently do not respond to DNT browser signals, as no uniform standard has been adopted.
13) Changes to This Policy
We may update this Policy from time to time. The “Last Updated” date reflects the latest revision.
14) Contact Us
15) Review, Update, or Delete Your Data (DSR)
To exercise your data rights, email [email protected] with the subject “Data Rights Request”. We will verify your identity and respond within applicable statutory timelines.