Privacy Policy

Last updated: 20 October 2026 · Version 2026-10-20

Xenexo("we", "us") respects your privacy. This policy explains what personal data we collect when you visit xenexo.in or contact us, why we collect it, how long we keep it, and the rights you have. It is written to meet India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, for visitors from the EU/UK, the General Data Protection Regulation (GDPR).

1. Information you give us

When you submit a contact or quote form, we collect:

• Your name and email address (required).
• Phone / WhatsApp number and company name (optional).
• The service you are interested in, your message, and — if you choose to share them — your approximate budget, timeline and preferred contact method.
• A record of your consent: the date and time you accepted this policy and the policy version.

If you contact us directly by email or WhatsApp, we receive the details you include in that conversation.

2. Information collected automatically

To understand which channels bring us enquiries, we record a small amount of context with each form submission:

• Campaign tags in the link you used (UTM source, medium, campaign, term, content).
• The website that referred you, the first page you landed on, and the page you submitted the form from.
• Your device type (desktop, mobile or tablet) and country, derived from your connection.

This information is kept in your browser's local storage for up to 30 days and only sent to us if you submit a form. We do notstore your IP address or full browser fingerprint with your enquiry, and we do not use advertising or cross-site tracking cookies. You can clear this data at any time by clearing your browser's site data.

3. Why we use your data

• To reply to your enquiry and send you a confirmation email.
• To prepare proposals, estimates and project communication you request.
• To keep internal notes about our conversations so we can serve you well.
• To understand, in aggregate, which pages and campaigns are useful to visitors.

Our legal basis is your consent, which you give when you tick the consent box on our forms, and — where you ask us for a proposal or engage us — the steps needed to enter into a contract with you. We do not sell, rent or trade your personal data, and we do not send marketing newsletters unless you separately ask for them.

4. Who we share it with

We share data only with service providers ("data processors") that help us run this website, under contracts that require them to protect it:

• Our website and server hosting provider.
• MongoDB Atlas, the cloud database where enquiries are stored.
• Our email delivery provider, used to send notifications and confirmations.

These providers may process data on servers outside India. We may also disclose data if required by law or to protect our legal rights.

5. How long we keep it

We keep enquiry data for up to 24 months after our last interaction with you, unless you become a client (in which case project records are kept for as long as required for contractual, tax and legal purposes). After that, we delete it. You can ask us to delete it sooner at any time.

6. How we protect it

Data is transmitted over encrypted HTTPS connections and stored in an access-controlled database. Only authorised team members can view enquiries through a password-protected admin area. No method of transmission or storage is completely secure, but we take reasonable safeguards appropriate to the data we hold.

7. Your rights

Depending on where you live, you have the right to:

• Access — ask for a summary of the personal data we hold about you.
• Correction — ask us to correct or complete inaccurate data.
• Erasure — ask us to delete your data.
• Withdraw consent — at any time, as easily as you gave it. This does not affect processing already carried out.
• Grievance redressal — raise a complaint with us, and if unresolved, with the Data Protection Board of India (or your local supervisory authority in the EU/UK).
• Nominate — under the DPDP Act, nominate another person to exercise your rights in the event of death or incapacity.

To exercise any of these rights, email hello@xenexo.in from the address you used to contact us. We aim to respond within 30 days.

8. Children

Our services are intended for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted data to us, contact us and we will delete it.

9. Changes to this policy

We may update this policy as our services or the law change. The version and date at the top of this page will always reflect the latest update, and each enquiry records the version that was in effect when it was submitted.

10. Contact & grievance officer

For privacy questions, requests or complaints, contact our grievance officer at hello@xenexo.in. Xenexo is based in India.