1. Overview
DotXen Infotech provides digital tools and online services through https://dotxen.com and associated websites or subdomains.
We aim to follow applicable data-protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act), and applicable rules and notifications, to the extent they apply to our activities.
2. Scope and applicability
This page provides general information about our data-protection approach across DotXen websites and tools. The information collected can differ from one tool to another.
The applicable obligations and commencement dates depend on the law, rules, notifications, the nature of the service, and the role played by DotXen Infotech in processing data.
3. Personal data we may process
Depending on the service and how you use it, information may include:
- Contact details: name, email address, or other details you submit.
- Account information: login identifiers and account-related records, where accounts are offered.
- Technical information: IP address, browser type, device details, timestamps, and security logs.
- Service inputs: information you voluntarily enter or upload into a tool.
- Support requests: messages and details sent to our support team.
- Payment records: transaction references or billing information, where paid services are offered and such records are required.
We should collect only information that is reasonably necessary for the relevant service and its stated purposes. Do not submit sensitive or confidential information to a tool unless the tool clearly supports that use.
4. Purpose of processing
Personal data may be used, where applicable, to:
- Provide and operate requested services.
- Maintain accounts and respond to support requests.
- Protect systems, detect misuse, and investigate security issues.
- Maintain service records and troubleshoot technical problems.
- Process transactions and meet applicable legal obligations.
- Improve reliability and performance using appropriate information.
We do not intend to use personal data for unrelated purposes without an appropriate legal basis or other permission required by applicable law.
5. Consent and privacy notices
Where consent is required, the relevant service should provide a clear notice describing the personal data involved, the purpose of processing, and the available method for giving or withdrawing consent.
- Consent should not be assumed merely because a user visits a website.
- Optional cookies or tracking technologies should be handled according to applicable requirements and the actual technologies in use.
- Where applicable, users should be able to withdraw consent through a practical process.
- Withdrawal of consent does not necessarily invalidate processing lawfully carried out before withdrawal.
Read our Privacy Policy and Cookie Policy for further details.
6. Data security measures
Appropriate safeguards should be selected and maintained according to the data and risks involved. These may include:
- HTTPS/TLS for data transmitted between the browser and website.
- Strong administrative passwords and restricted hosting access.
- Secure PHP coding, input validation, and protection against common web attacks.
- Database access restrictions and secure handling of credentials.
- Software updates, backups, log review, and security monitoring.
- Access controls and appropriate safeguards for service providers.
No internet-based service can guarantee absolute security. Actual safeguards must be verified for each DotXen service.
More information: Security Information.
7. Data retention and deletion
Personal data should be retained only for as long as necessary for the stated purpose, applicable legal obligations, security, dispute resolution, or other lawful requirements.
Where appropriate, data should be securely deleted or de-identified when it is no longer required. Backups, fraud prevention records, and legally required records may need different retention periods.
To submit a deletion request, visit Data Deletion or email [email protected]. Requests may require identity verification and may be subject to applicable legal exceptions.
8. User requests and rights
Depending on the applicable law and circumstances, individuals may have rights relating to access to information about processing, correction or erasure of personal data, grievance redressal, and nomination of another individual.
Requests can be sent to [email protected]. Please identify the relevant DotXen service, explain your request, and provide only the information reasonably needed to verify and process it.
We will assess requests under applicable law. Some requests may be limited by legal obligations, security requirements, or permitted exceptions.
9. Security incidents and data breaches
We should maintain a process to assess suspected personal-data incidents, contain the issue, preserve relevant evidence, investigate impact, and take corrective action.
Where required by applicable law, notifications to affected individuals and relevant authorities should be made in the prescribed manner and within the applicable timelines.
To report a suspected security issue, contact [email protected] with the subject “Privacy or Security Incident”. Do not include passwords or unnecessary sensitive personal information.
10. Hosting and third-party services
Certain services may rely on hosting providers, infrastructure providers, payment providers, email services, analytics, or other third parties. The providers used can vary by product.
Before sharing personal data with a service provider, we should assess the provider's role, the information shared, applicable contractual safeguards, access controls, and any relevant cross-border or legal requirements.
Users should review the applicable terms and privacy notices of third-party services when they interact with those services.
11. Children's personal data
Services intended for or used by children require particular care. Where applicable, age-related requirements, verifiable parental consent, and restrictions under the DPDP Act and relevant rules must be followed, subject to applicable exemptions and notifications.
If you believe a child has provided personal data in a manner that raises a privacy concern, contact us so that we can assess the matter.
12. Grievances and contact
For privacy questions, requests, or complaints relating to personal data processed by DotXen, contact:
How to submit a request
Include the relevant service name, a clear description of the issue, and a way to contact you. Please do not send passwords or unnecessary sensitive data.
Requests will be reviewed and handled according to applicable legal requirements and the processes implemented for the relevant service.
13. Official legal resources
For the authoritative text and current notifications, consult:
- Ministry of Electronics and Information Technology (MeitY)
- India Code — Central Acts and legislation
Legal requirements and commencement dates may change or apply in stages. Confirm the current official notifications and obtain professional legal advice where needed.