Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to DotXen Infotech, its websites, subdomains, online applications and digital tools that link to or adopt this policy.

Different services may process different categories of information. Where a service has additional privacy information, that information should be read together with this policy.

2. Personal Data We May Collect

2.1 Information you provide

• Name, email address and phone number when you provide them.
• Account credentials and profile information.
• Messages, support requests and feedback.
• Information you submit through forms or use to operate a tool.
• Billing or transaction details where paid services are offered.

2.2 Technical and usage information

• IP address, request timestamps and server logs.
• Browser, device and operating-system information where available.
• Login events, security events and application activity.
• Diagnostic information required to maintain service reliability.

2.3 Tool-specific information

Depending on the tool you use, you may submit URLs, QR-code destinations, text, files or business records. Do not submit sensitive or confidential information unless the particular service is designed and authorized to handle it.

We aim to collect only information that is reasonably necessary for the stated purpose. The categories above describe possible collection and must be checked against the actual implementation of each service.

3. How We Use Personal Data

Depending on the service and applicable law, we may use information to:

• Provide, operate and maintain websites and tools.
• Create and secure accounts and authenticate users.
• Respond to questions, support requests and complaints.
• Process payments and maintain required transaction records.
• Detect abuse, fraud, unauthorized access and security incidents.
• Diagnose errors and improve service performance.
• Meet applicable legal obligations and enforce our terms.

We do not intend to use personal data for an incompatible purpose without an applicable legal basis and any notice or consent required by law.

4. Legal Basis, Notice and Consent

We process personal data only where an applicable legal basis permits us to do so. Depending on the circumstances, this may include consent, certain legally recognized uses, or compliance with legal obligations.

Where consent is required, we aim to provide clear information about the purpose of processing and a practical way to give and withdraw consent. We may retain limited records needed to demonstrate consent, manage withdrawal, or comply with law.

Withdrawing consent does not necessarily invalidate processing that was lawful before withdrawal. Processing may continue where another lawful basis applies, subject to applicable law.

5. Cookies and Similar Technologies

Our websites may use essential cookies or similar technologies for functions such as login sessions, security and user preferences. Analytics or advertising technologies may also be used if configured on a particular service.

Where consent is required for non-essential cookies or similar technologies, the applicable consent mechanism should be provided. Browser settings may allow you to manage certain cookies, although disabling essential cookies may affect website functionality.

Refer to our Cookie Policy for further details.

6. When We Share Personal Data

Information may be disclosed, where necessary and lawful, to:

• Hosting, infrastructure and technical support providers.
• Email, payment, security and other service providers used by a tool.
• Professional advisers where reasonably necessary.
• Government authorities or other parties where legally required.
• A successor or transaction party in a lawful business reorganisation, subject to applicable safeguards.

We limit disclosures to what is necessary for the relevant purpose and use appropriate contractual and security measures where required.

7. Data Security

We aim to use reasonable technical and organisational safeguards appropriate to the information and risks involved. Depending on the service, these may include HTTPS, access controls, password protection, secure configuration, backups, monitoring and software updates.

No website, transmission or storage system can be guaranteed to be completely secure. If a personal data breach occurs, we will assess and respond to it and provide notifications required by applicable law.

For security-related reports, refer to our Security page.

8. Data Retention and Deletion

We retain personal data only for as long as necessary for the purpose for which it is processed, subject to applicable legal requirements, dispute resolution and legitimate security needs.

Retention periods may differ for account data, support messages, transaction records, security logs and temporary tool content. We define and apply a retention schedule for each category rather than retain information indefinitely.

Where appropriate, data may be deleted, anonymised or otherwise disposed of securely. Backup copies may remain until their scheduled expiry, subject to access restrictions and applicable requirements.

To request deletion, visit Data Deletion.

9. Your Privacy Rights

Depending on applicable law and the circumstances, you may have rights to:

• Request information about personal data processing.
• Request correction or updating of inaccurate information.
• Request erasure of personal data where applicable.
• Withdraw consent where processing is based on consent.
• Raise a grievance and use available complaint mechanisms.
• Exercise any other rights available under applicable law.

We may need to verify your identity or authority before acting on a request. Certain information may be retained where the law requires or permits retention.

Submit a request using our Grievance and Privacy Request page or contact us at [email protected].

10. Children's Personal Data

Our services are not intended to collect children's personal data without considering the requirements of applicable law. Where a service is likely to be used by children or processes their data, appropriate age-related safeguards, verifiable parental consent and other legally required measures must be assessed and implemented.

Any applicable statutory exceptions or exemptions will be applied only where legally available.

11. Storage and Cross-Border Transfers

Personal data may be processed by service providers in locations relevant to the infrastructure used by a service. Cross-border transfers will be handled subject to applicable Indian law, government restrictions and relevant contractual requirements.

The actual hosting locations and provider arrangements should be confirmed for each service before publication of more specific statements.

12. Third-Party Websites and Services

Our websites or tools may link to third-party websites, payment providers or external services. Their privacy practices are governed by their own policies. We encourage you to review those policies before sharing information with them.

13. Changes to This Privacy Policy

We may update this policy when our services, data practices or legal obligations change. The updated version will be published on this page with a revised last-updated date. Where required, we will provide additional notice or obtain consent before implementing a change.

14. Contact and Grievances

For privacy questions, personal data requests or complaints relating to this policy, contact:

Please include enough information for us to understand your request. Avoid sending passwords, OTPs or unnecessary identity documents by email.