Privacy Policy

1. Introduction

xAutomatic ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of your information when you use our website at https://xauto.in and our mobile applications (collectively, the "Service").

This Privacy Policy applies to all users of our Service, including registered users, visitors, and business partners. By accessing or using our Service, you consent to the collection, use, disclosure, and storage of your information as described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

We comply with applicable privacy laws and regulations, including the Information Technology Act, 2000 and its relevant rules, and we are monitoring developments regarding the Personal Data Protection Bill in India to ensure continued compliance.

2. Definitions

To help you better understand this Privacy Policy, here are some key terms and their definitions:

• Personal Information: Information that identifies, relates to, describes, or can reasonably be linked to a particular individual.
• Non-Personal Information: Information that does not directly identify an individual.
• Sensitive Personal Information: Information such as passwords, payment information data.
• Service: The website (active) and mobile applications (planned in future) operated by xAutomatic.
• User: An individual who accesses or uses our Service.
• Cookies: Small files placed on your device that enable various features of our Service.
• Data Controller: The entity that determines the purposes and means of processing personal information.
• Data Processor: The entity that processes personal information on behalf of the Data Controller.

3. Information We Collect

We collect different types of information to provide and improve our Service to you:

3.1 Information You Provide to Us

• Account Information: When you create an account, we collect your name, email address, phone number, username, and password.
• Profile Information: Details you choose to add to your profile such as profile picture, bio, location, and social media links.
• Business Information: If you use our platform for business purposes, we collect company name, GST number, business address, and other business-specific information.
• Payment Information: When you make a purchase, we collect payment details such as credit/debit card information, UPI IDs, or bank account details. (Note: We do not store complete payment information; this is processed through our secure payment partners).
• Communications: Information you provide when contacting our customer support or responding to surveys.
• User Content: Information you post, upload, or otherwise share through our Service, including comments, feedback, and reviews.

3.2 Information We Collect Automatically

• Device Information: Information about the device you use to access our Service, including hardware model, operating system and version, unique device identifiers, network information, and IP address.
• Usage Information: Information about how you interact with our Service, including pages visited, time spent on those pages, features used, search queries, referring/exit pages, and date/time stamps.
• Location Information: With your consent, we may collect precise location data from your device. You can disable location services in your device settings.
• Cookies and Similar Technologies: We use cookies, web beacons, pixels, and similar technologies to collect information about your browsing behavior and preferences. See our Cookies section for more details.
• Log Data: Server logs, including IP address, browser type, ISP, referring/exit pages, operating system, date/time stamps, and clickstream data.

3.3 Information From Third Parties

• Social Media: If you connect your social media accounts to our Service, we may collect information from those accounts, such as your name, email address, friends/connections, profile picture, and other information you make available.
• Analytics Providers: We receive aggregated information from analytics providers to help us understand user behavior and improve our Service.
• Business Partners: We may receive information about you from our business partners, such as when they provide us with information to fulfill a service, process a payment, or help prevent fraud.

3.4 Sensitive Personal Information

We generally do not collect sensitive personal information unless required for specific services. When we do, we obtain explicit consent and implement enhanced security measures to protect this information. You have the right to withdraw your consent at any time, though this may impact our ability to provide certain services.

4. Legal Basis for Processing

We process your information based on one or more of the following legal grounds:

• Consent: We process your information based on your explicit consent, which you can withdraw at any time.
• Contractual Necessity: Processing is necessary to perform the contract we have with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests.
• Legal Obligation: Processing is necessary to comply with a legal obligation to which we are subject.
• Vital Interests: Processing is necessary to protect your vital interests or those of another person.
• Public Interest: Processing is necessary for the performance of a task carried out in the public interest.

5. How We Use Your Information

We use the information we collect for various purposes, including:

5.1 To Provide and Maintain Our Service

• Creating and managing user accounts
• Processing transactions and sending related information
• Providing customer support and responding to inquiries
• Personalizing your experience based on your preferences
• Enabling you to connect with other users and businesses
• Facilitating the technical functionality of our Service

5.2 To Improve and Develop Our Service

• Analyzing usage patterns to improve user experience
• Identifying technical issues and bugs
• Testing and developing new features
• Conducting research and surveys to better understand user needs
• Generating aggregated, anonymized analytics and insights

5.3 To Communicate With You

• Sending service-related notifications, such as security alerts and updates
• Providing information about new features or services
• Sending marketing communications (with your consent where required)
• Responding to your comments, questions, and customer service requests
• Conducting polls, surveys, and collecting feedback

5.4 To Ensure Safety, Security, and Legal Compliance

• Verifying your identity and preventing fraud
• Monitoring and preventing potentially prohibited or illegal activities
• Enforcing our Terms of Service and other legal agreements
• Protecting the rights, property, or safety of xAutomatic, our users, or others
• Complying with applicable laws, regulations, and legal processes
• Addressing disputes and defending our legal rights

5.5 For Marketing and Advertising

• Delivering relevant advertisements based on your interests and activities
• Measuring the effectiveness of advertisements and marketing campaigns
• Promoting our products and services to potential customers
• Offering personalized promotions and special offers

We process your information for these purposes based on our legitimate interests, your consent, contractual necessity, and/or compliance with our legal obligations. Where we rely on your consent for processing, you have the right to withdraw your consent at any time.

6. Sharing Your Information

We are committed to protecting your privacy and do not sell your personal information to third parties. However, we may share your information in the following circumstances:

6.1 With Service Providers

We share information with third-party service providers who need access to your information to help us operate, develop, and improve our Service. These service providers include:

• Payment Processors: We share payment information with payment processors like Cashfree, Razorpay, Paytm, and PayU to process transactions.
• Cloud Service Providers: We use cloud infrastructure providers like AWS, Google Cloud, or Azure to host our Service and store data.
• Analytics Providers: We use analytics providers like Google Analytics to understand user behavior and improve our Service.
• Customer Support: We use customer support tools to manage and respond to user inquiries.
• Email and Communication Services: We use email service providers to send notifications, updates, and marketing communications.
• Security and Fraud Prevention: We use security service providers to protect our Service and users from fraud and security threats.

All service providers are contractually bound to use your information solely for providing services to us and to maintain appropriate security measures to protect your information.

6.2 With Business Partners

We may share your information with business partners for specific purposes, such as co-branded offerings or promotional events. We will always obtain your explicit consent before sharing your information for these purposes.

6.3 For Legal Reasons

We may disclose your information if required to do so by law or in good faith belief that such action is necessary to:

• Comply with legal obligations or a judicial proceeding, court order, or legal process
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public
• Protect against legal liability

6.4 During Business Transfers

If we are involved in a merger, acquisition, financing, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your information, as well as any choices you may have regarding your information.

6.5 With Your Consent

We may share your information with third parties when we have your explicit consent to do so for specified purposes not listed above.

6.6 Aggregated or De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for various purposes, including data analytics, research, and improving our Service.

7. Data Storage and Retention

We store and process your information in India, as well as on servers located in other countries where our service providers for data centers operate, including but not limited to the United States and Europe. We implement appropriate safeguards when transferring data across borders.

7.1 Retention Period

We retain your information for as long as necessary to:

• Provide you with our Service and fulfill the purposes outlined in this Privacy Policy
• Comply with legal and regulatory obligations
• Resolve disputes and enforce our agreements

Different types of information may be retained for different periods:

• Account Information: Retained as long as your account is active. After account closure, we retain certain information for a limited period to comply with legal obligations.
• Transaction Records: Retained for 8 years to comply with tax and financial regulations.
• Communications: Customer service communications are retained for 2 years.
• Usage Data: Retained for 26 months, after which it is aggregated or de-identified.

7.2 Account & Data Deletion

You have the right to request deletion of your account and all associated personal data at any time. We provide multiple methods for you to request data deletion:

• In-App Settings: You can delete your account directly through the app settings under "Account" > "Delete Account"
• Email Request: Contact us at hello@xautomatic.in with the subject "Data Deletion Request"
• Web Portal: Access your account settings on our website and select the data deletion option

Data Deletion Process:

• Upon receiving your deletion request, we will delete or de-identify all your personal information within 30 days
• This includes profile data, transaction records, communications, and usage data
• However, we may retain certain information for legitimate business or legal purposes (e.g., tax compliance, fraud prevention, dispute resolution)
• You will receive confirmation of data deletion or notification of any retained information during the process
• Backup copies may take an additional 60 days to be permanently purged from our systems

Note: Once your account is deleted, you will lose access to all your data and services. This action cannot be undone. If you have questions about the data deletion process, please contact our Privacy Team at hello@xautomatic.in.

8. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your country.

Whenever we transfer your information internationally, we implement appropriate safeguards to ensure that your information receives adequate protection. These safeguards include:

• Data transfer agreements incorporating standard contractual clauses approved by relevant authorities
• Privacy certifications
• Vendor assessment and contractual commitments
• Implementation of appropriate technical and organizational security measures

By using our Service, you consent to the transfer of your information to countries outside of India, including to countries that may not provide the same level of data protection as your home country.

9. Data Security

We implement robust security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption: We use industry-standard encryption technologies (TLS/SSL) to protect data in transit and at rest.
• Access Controls: We restrict access to personal information to authorized personnel only, based on job role and need-to-know principles.
• Authentication: We implement multi-factor authentication for accessing sensitive systems.
• Regular Security Assessments: We conduct regular security assessments, including penetration testing and vulnerability scanning.
• Employee Training: Our staff undergoes regular privacy and security training.
• Incident Response: We have procedures in place to address potential data breaches promptly.
• Data Backups: We maintain regular backups of data to prevent data loss.

While we implement these security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at hello@xautomatic.in.

9.1 Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify you and relevant authorities as required by applicable law. The notification will include information about the nature of the breach, the information affected, the measures we have taken, and recommendations for protective measures you should take.

10. Your Rights

We respect your rights concerning your personal information. You have the following rights:

10.1 Access and Information

You have the right to access personal information we hold about you and to request information about how we process it.

10.2 Correction and Updating

You have the right to request correction of any inaccurate or incomplete personal information we hold about you.

10.3 Deletion and Erasure

You have the right to request deletion of your personal information in certain circumstances, subject to legal retention requirements.

10.4 Objection and Restriction

You have the right to object to processing of your personal information and to request restriction of processing in certain circumstances.

10.5 Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another service provider.

10.6 Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

10.7 Complaint

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.

10.8 How to Exercise Your Rights

To exercise any of these rights, please contact us at hello@xautomatic.in. We will respond to your request within 30 days. We may need to verify your identity before processing your request. In some cases, we may charge a reasonable fee based on administrative costs for providing the information or taking the action requested.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and use information about you and your interaction with our Service. Cookies are small text files that are placed on your device when you visit a website, which enable the website to recognize your device and remember your preferences.

11.1 Types of Cookies We Use

• Essential Cookies: These are necessary for the Service to function properly and cannot be turned off in our systems.
• Performance/Analytics Cookies: These allow us to count visits and traffic sources so we can measure and improve the performance of our Service.
• Functionality Cookies: These enable the website to provide enhanced functionality and personalization.
• Targeting/Advertising Cookies: These are set through our site by our advertising partners to build a profile of your interests and show you relevant ads on other sites.

11.2 Third-Party Cookies

Some cookies are placed by third parties on our behalf. These third parties may collect information about your online activities over time and across different websites. We do not control these third-party tracking technologies.

11.3 Managing Cookies

Most web browsers allow you to control cookies through their settings preferences. However, if you limit the ability of websites to set cookies, you may impact your overall user experience. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org.

11.4 Do Not Track

Some browsers have a "Do Not Track" feature that lets you tell websites that you do not want to have your online activities tracked.

12. Children's Privacy

Our Service is not intended for children under the age of 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you are a parent or guardian and you become aware that your child has provided us with personal information without your consent, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.

13. Third-Party Links and Services

Our Service may contain links to third-party websites, services, or applications that are not owned or controlled by xAutomatic. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

We are not responsible for the content, privacy practices, or security measures of any third-party services. The inclusion of a link to a third-party service does not imply an endorsement by us of the third-party service or its privacy practices.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated Privacy Policy on this page with a "Last Updated" date.

For significant changes, we will provide a more prominent notice, which may include email notification of Privacy Policy changes if we have your email address. We encourage you to review this Privacy Policy periodically to stay informed about our information practices.

Your continued use of our Service after any changes to this Privacy Policy constitutes your acceptance of the revised Privacy Policy.

15. Dispute Resolution

If you have any concerns or disputes regarding this Privacy Policy or our data practices, please contact us first at hello@xautomatic.in. We will promptly review and respond to your concerns.

All disputes arising out of or in connection with this Privacy Policy shall be governed by the laws of India and subject to the exclusive jurisdiction of the courts in Mumbai, Maharashtra, India.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: