Privacy Policy

Last updated: June 2026

This Privacy Policy explains how XSData Factory Pvt Ltd ("XSData Factory", "we", "us", or "our") collects, uses, discloses, and safeguards personal data when you visit xsdatafactory.com or contact us. We are based in Chennai, Tamil Nadu, India, and act as the data fiduciary / data controller for the personal data described here.

1. Information we collect

Information you provide

When you submit our enquiry form or email us, we collect the details you choose to share — typically your name, work email, company, phone number, and the contents of your message. You are not required to provide more than is necessary for us to respond.

Information collected automatically

When you visit the site, our hosting and security provider may process limited technical data — such as IP address, browser type, device information, referring page, and timestamps — for security, fraud prevention, and to keep the site reliable. We may use privacy-respecting analytics that do not rely on advertising cookies.

2. How we use personal data

• To respond to your enquiry and discuss a potential engagement.
• To provide, maintain, secure, and improve our website and services.
• To send you information you have requested or that relates to an active discussion.
• To comply with legal obligations and protect our rights.

Where the law requires a lawful basis (for example, under the EU/UK GDPR), we rely on your consent, our legitimate interest in responding to business enquiries, or the steps necessary to enter into a contract at your request. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), we process personal data on the basis of your consent or other lawful grounds permitted by the Act.

3. Cookies and analytics

We aim to keep cookies to a minimum. Any essential cookies are used to keep the site functioning (for example, remembering your light/dark theme preference, which is stored only in your own browser). If we use analytics, we choose privacy-respecting options and do not sell your data. You can control cookies through your browser settings.

4. How we share personal data

We do not sell your personal data. We share it only where necessary:

• Service providers — trusted vendors who help us operate, such as our website host and security provider and our email/communication provider, acting on our instructions.
• Legal and safety — where required by law, regulation, legal process, or to protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, or reorganisation, subject to this Policy.

5. International transfers

We operate from India and use service providers that may process data in other countries. Where personal data is transferred across borders, we take steps to ensure it remains protected in accordance with applicable law.

6. Data retention

We keep personal data only for as long as needed for the purposes described here — for example, to respond to and follow up on your enquiry — and then delete or anonymise it, unless a longer period is required by law.

7. Security

We apply reasonable technical and organisational measures — including encryption in transit, access controls, and least-privilege practices — to protect personal data. No method of transmission or storage is completely secure, but we work to safeguard your information appropriately.

8. Your rights

Subject to applicable law, you may have the right to access, correct, update, or erase your personal data, to withdraw consent, to object to or restrict certain processing, and to data portability. Data principals under the DPDP Act also have the right to nominate and to seek grievance redressal.

To exercise any of these rights, email us at hello@xsdatafactory.com. We will respond within the timeframes required by applicable law.

9. Grievances

If you have a concern about how we handle your personal data, please contact us at hello@xsdatafactory.com and we will work to resolve it. If you are in India and remain unsatisfied, you may escalate to the Data Protection Board of India once it is operational. If you are in the EU/UK, you may also contact your local supervisory authority.

10. Children

Our website and services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children.

11. Changes to this Policy

We may update this Policy from time to time. We will post the revised version here and update the "Last updated" date above.

12. Contact us

XSData Factory Pvt Ltd · Chennai, Tamil Nadu, India
Email: hello@xsdatafactory.com