Privacy Policy

This Privacy Policy describes how x-new ("we", "us", or "our") collects, uses, stores, shares, and protects your personal data when you:

• Visit our website at xnew.in (the "Website")
• Use our mobile application XNew Partner (the "App") available on Google Play (package name: com.xnew.partner)
• Register as or interact with an XNew Partner (vendor, merchant, or service provider)
• Contact us or otherwise provide your personal data

By using our Website or App, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

We collect the following categories of personal data when you interact with our platform:

A. Information You Provide Directly

• Account Registration: Full name, email address, phone number, business name, business address, GSTIN / tax ID, and password when you register as an XNew Partner on the App or Website.
• Profile Information: Business description, logo, product/service catalog, images, pricing details, operating hours, location (state, district, taluka, city), and social media links (e.g., WhatsApp, Instagram).
• Communication: Messages, inquiries, and feedback you send to us through contact forms, email, or support channels.

B. Information Collected Automatically

• Device Information: Device model, operating system version, unique device identifiers (e.g., Android ID, advertising ID), IP address, and mobile network information.
• Usage Data: Pages visited, products viewed, search queries, click actions (Call/WhatsApp triggers), time spent, and navigation patterns on both Website and App.
• Location Data: Approximate location derived from IP address or precise location (if you grant location permissions) to show relevant vendors and products near you.
• Cookies & Similar Technologies: We use cookies, local storage, and similar tracking technologies on the Website. See Section 9 (Cookies) for details.

C. Information from Third Parties

• Analytics data from Google Analytics, Firebase, or similar services.
• Transaction metadata from service layers (e.g., dialers, WhatsApp Business API).
• Payment processing data from third-party payment gateways (we do not store full payment card numbers).

2. How We Use Your Information

We use your personal data for the following purposes:

• Provide & Maintain Services: To operate the XNew Partner platform, display vendor profiles, product listings, and contact information to consumers.
• Account Management: To create and manage your partner account, verify your identity, process subscription plans, and send account-related notifications.
• Communication: To respond to your inquiries, send service updates, promotional offers (with your consent), and important policy changes.
• Improve Our Platform: To analyze usage patterns, fix bugs, enhance user experience, and develop new features.
• Analytics & Insights: To generate aggregated, anonymized insights about vendor performance and consumer behavior.
• Security & Fraud Prevention: To detect, prevent, and address technical issues, spam, abuse, or fraudulent activity.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

3. How We Share Your Data with XNew Partners

As an XNew Partner platform, a core part of our service involves sharing certain data with our partners. This section explains what, why, and how we share.

A. What We Share

• Consumer Data (End Users): When a consumer contacts a vendor (e.g., by clicking Call or WhatsApp), we share the consumer's name, phone number, and inquiry details with the respective vendor partner to fulfill the service request.
• Partner/Vendor Data: Business name, product catalog, pricing, location, contact number, and operating hours are publicly displayed on the Website and App to enable discovery by consumers.
• Analytics Data: Aggregated, anonymized analytics (e.g., profile views, click-through rates) may be shared with vendor partners to help them understand their performance.

B. Consent for Sharing

Consumers: By submitting a contact form, clicking Call/WhatsApp, or otherwise initiating contact, you explicitly consent to your contact information being shared with the respective XNew Partner (vendor) to respond to your inquiry.

Partners (Vendors): By registering as an XNew Partner, you explicitly consent to your business profile and contact details being shared publicly on our platform and with consumers who express interest in your products/services.

C. No Sale of Personal Data

We do not sell your personal data to third parties. Data is shared only as necessary to provide the XNew Partner services or as required by law.

4. Third-Party Service Providers

We may engage trusted third-party service providers to assist in operating our platform. These providers are contractually bound to protect your data and use it only for the services we engage them for:

• Cloud Infrastructure: Hosting providers for servers, databases, and content delivery.
• Analytics: Google Analytics, Firebase Analytics, or similar tools to understand platform usage.
• Payment Processing: Third-party payment gateways for subscription payments (we do not store credit/debit card numbers).
• Communication: Email delivery services, SMS gateways, WhatsApp Business API for notifications.
• Map Services: Mapping providers for location-based features.

5. Data Security

We implement robust security measures to protect your personal data:

• Encryption: Data in transit is encrypted using TLS/SSL. Sensitive data at rest is encrypted using industry-standard algorithms.
• Access Controls: Strict role-based access controls (RBAC) restrict data access to authorized personnel only.
• Secure Authentication: JWT-based authentication for API access, password hashing, and session management.
• Regular Audits: Periodic security reviews, vulnerability assessments, and code audits.
• Data Minimization: We collect only the data necessary for the stated purposes.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described in this policy, or as required by applicable law:

• Account Data: Retained for the duration of your active account, plus 90 days after account deletion for legal and audit purposes, after which it is permanently deleted or anonymized.
• Analytics Data: Retained in identifiable form for up to 26 months, after which it is aggregated and anonymized.
• Communication Records: Retained for up to 12 months after the last interaction.
• Legal Holds: Data may be retained longer if required by law, regulation, or legal proceedings.

7. Your Rights & Choices

Depending on your jurisdiction (e.g., GDPR, CCPA, Indian IT Act), you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal obligations (Right to be Forgotten).
• Delete Your Account & Data: To delete your account and all associated data, please email us at inquiry@xnew.in. We will process your request within the timeframe required by applicable law (usually 30 days).
• Portability: Request a machine-readable copy of your data to transfer to another service.
• Restriction: Request restriction of processing in certain circumstances.
• Objection: Object to processing based on legitimate interests or direct marketing.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Opt-Out of Sharing: Where applicable, opt out of the sharing of your data with partners for purposes other than the core service.
• Lodge a Complaint: File a complaint with your local data protection authority.

To exercise any of these rights, please contact us at privacy@xnew.in or using the contact details in Section 14. We will respond to your request within the timeframe required by applicable law (usually 30 days).

8. Children's Privacy

Our platform is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at privacy@xnew.in, and we will take steps to delete such information.

9. Cookies & Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance user experience and analyze usage. Below is how we use them:

• Essential Cookies: Required for basic functionality (e.g., session management, CSRF protection). These cannot be disabled.
• Analytics Cookies: Used to understand how visitors interact with the Website (e.g., Google Analytics).
• Preference Cookies: Remember your settings (e.g., location preference, search filters).

Cookie Consent: Upon your first visit to our Website, you will see a cookie consent banner. You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect Website functionality.

App Tracking: The App may request certain permissions (e.g., location, camera, storage). These permissions are used only for specific features (e.g., selecting location, uploading product images). You can manage permissions through your device settings.

10. Cross-Border Data Transfers

Your data may be transferred to and processed in countries other than your own (e.g., cloud servers located in different regions). When we transfer data across borders, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent mechanisms, to protect your data in accordance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page, updating the "Last updated" date, and, where appropriate, notifying you via email or in-app notification. We encourage you to review this policy periodically.

12. Data Protection Officer & Grievance Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@xnew.in
• Phone: 8552886242
• Address: Aurangabad, Maharashtra

We will acknowledge and investigate any complaint and respond within a reasonable timeframe (usually within 30 days).

13. Account Deletion

If you wish to delete your XNew Partner account and all associated data, you can do so by:

• Email: Send a deletion request from your registered email to inquiry@xnew.in.
• Once we receive and verify your request, we will permanently delete your account profile, listings, personal data, and related records within the timeframe required by applicable law (usually within 30 days), subject to the retention periods described in Section 6.

Should you have any questions about deleting your account and data, please contact us at inquiry@xnew.in.

14. Contact Us

For any questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, please reach out to us:

• Email: privacy@xnew.in
• Website: https://xnew.in/contact
• App: XNew Partner on Google Play (com.xnew.partner)

This Privacy Policy is compliant with applicable data protection laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and the Information Technology Act, 2000 (India) read with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.