1. Who we are
This Privacy Policy explains how Uxory Technologies Private Limited ("Uxory", "we", "us" or "our"), a private limited company incorporated in India with its registered office at Belair Street, Pune, MH 411045, India, collects, uses, shares and protects personal data when you visit uxory.in (the "Website"), contact us or use our services.
For the purposes of the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), Uxory Technologies Private Limited is the Data Fiduciary for the personal data described in this policy, and you are the Data Principal.
When we handle personal data on behalf of a client as part of a project, for example the customer data in a website or app we build or host for them, the client is the Data Fiduciary and we act as its Data Processor under our agreement with it. This policy does not cover that data; the client's own privacy policy does.
This policy is published in line with the DPDP Act and the rules made under it and, to the extent they continue to apply, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the "SPDI Rules").
2. Personal data we collect
We collect only what we need to respond to you, run our business and keep the Website secure. Most of it you give us directly.
Information you give us
- Contact and enquiry forms: your name, email address, phone number, company name and message.
- Booking a call: the time you choose, your timezone, your name and email address, and, if you add them, your phone number, what the call is about and a note. We use them to hold the call and to follow up on your enquiry.
- Instant Estimate: your answers about your project (such as the type of project, features, timeline and any notes you add) and, if you ask us to email the estimate to you, your name, email address, company and phone number.
- Newsletter: your email address and whether you are subscribed.
- Reviews: your name, company name (optional), email address, star rating, review text, and the city and country you enter. We use your email address only to verify the review with a one-time code and never publish it. Your name, company, city, country, rating and review are published on the Website, and your city is shown as an approximate point on our reviews map.
- Job applications: your name, email address, the role you are applying for, your CV and anything else you choose to include.
- Referrals: your name and email address, and the name, email address and any note you give us about the person or business you refer. If someone referred you to us, we received your name and email address from them.
- AI chat: the messages you type into the Uxory AI assistant on the Website and the page you are on and, if you choose to share them in the chat, your name and email address. Uxory AI is an automated assistant, not a person: its answers are general information and can be wrong, so please do not share sensitive information in the chat. When you share your details, we pass the conversation to our team so they can reply.
- Calls and messages: the details you give us when you book a call on our website, email or call us, or message us on WhatsApp.
- Clients: contact, billing and tax details, project information, files and communications we need to deliver our services and invoice you. Payments are processed by Razorpay; we do not see or store your full card, UPI or bank details.
Information collected automatically
- Technical data: your IP address, browser and device type, and the pages you request. Our hosting provider records these in server logs to keep the Website running and secure.
- Usage data: how you use the Website, such as pages viewed, buttons clicked, forms started or sent and Instant Estimate steps, collected by Google Analytics. With analytics cookies this is linked to a random browser identifier; without them, only limited signals without cookies are sent.
- Approximate country: worked out from your IP address when you arrive, only to send you to the right country site. We do not store it.
- Hashed IP address: a one-way scrambled form of your IP address, stored with estimate requests, reviews, referrals and AI chat usage so we can limit spam and abuse. We do not store your raw IP address with these records.
- Security signals: information Google reCAPTCHA collects to tell people from bots (see "Cookies and similar technologies" below).
We do not ask for sensitive information such as passwords to your personal accounts, financial account numbers, health information or government identification numbers through the Website, and we ask you not to include them in forms or messages. If a project needs access to your systems, we will agree a secure way to share it.
3. How we use your personal data
- To reply to your enquiries, prepare estimates and proposals, and arrange calls.
- To deliver, support and invoice our services, and to manage our relationship with clients.
- To send the newsletter you subscribed to. Every newsletter email has an unsubscribe link.
- To verify, publish and moderate reviews, and to let you delete your own review.
- To assess job applications and contact candidates.
- To run our referral programme, contact the people referred to us and pay referral rewards.
- To keep the Website secure and to prevent spam, fraud and abuse.
- To improve the Website, our services and our estimates.
- To comply with our legal, tax and accounting obligations, and to establish, exercise or defend legal claims.
We do not use your personal data for decisions made solely by automated means that have legal or similarly significant effects on you. The Instant Estimate is an automated calculation, but it is only indicative; a member of our team reviews every project before we send a binding proposal.
4. Consent and legal basis
We process your personal data on one of the grounds the DPDP Act allows:
- Consent. When you submit a form, request an estimate, subscribe to the newsletter, post a review, apply for a job, make a referral or use the AI chat, you agree to us processing the personal data you give us for the purpose described next to that feature and in this policy.
- Legitimate uses. Where you have voluntarily given us personal data for a specific purpose, such as emailing us for a quote, and have not told us you object; and where the law requires or permits processing, for example to meet tax and accounting obligations, comply with a court order or lawful request, or respond to an emergency.
You can withdraw your consent at any time by emailing contact@uxory.in or, for the newsletter, by using the unsubscribe link in any newsletter email. Withdrawing consent is as easy as giving it. It does not affect processing carried out before you withdrew it, and we may keep data where the law requires us to. If you withdraw consent for something a service depends on, we may no longer be able to provide that service.
5. Who we share it with
We share personal data with service providers that help us run our business. They may use it only to provide their services to us and must protect it under their contracts or terms with us:
- Vercel: hosts the Website, keeps server logs, and works out your approximate country from your IP address so we can show you the right country site.
- Supabase: our database, where we store contact form submissions, booked calls, estimate requests, reviews, referrals, newsletter subscriptions and Uxory AI chats.
- Resend: sends the emails our Website generates, such as replies to forms, emailed estimates, newsletter emails and the one-time codes used to verify reviews.
- Google reCAPTCHA: checks that form submissions come from people, not bots.
- Vercel AI Gateway: passes the Uxory AI chat to the AI models named below. We set it to use only providers that do not use your chat messages to train their models. Providers may keep messages for a limited time under their own terms, for example to detect misuse.
- OpenAI: provides the GPT model that writes the Uxory AI chat's answers and, when you share your details in the chat, a short summary of the chat for our team. It receives your chat messages and the page you are on, never the name or email address you enter in the chat's details form. Simple messages, such as greetings and common questions, are answered by the website itself and are not sent to any AI provider.
- Google Gemini: powers the AI parts of the Instant Estimate, helps us draft blog posts, and answers in the Uxory AI chat if OpenAI is unavailable (through Vercel AI Gateway, on the same no-training terms). For the Instant Estimate we send your project answers and notes, but not your name or contact details. Depending on the Google service tier we use for the Instant Estimate, Google may use that content to improve its services, so please do not include confidential or sensitive information in estimate notes.
- Razorpay: processes payments. Razorpay collects your card, UPI or bank details directly; we do not see or store them.
- WhatsApp (Meta Platforms): carries the messages you choose to send us on WhatsApp.
- Google Analytics and Google Tag Manager: measure how the Website is used, such as pages viewed, buttons clicked, forms started or sent, device and browser type, and approximate location. Analytics cookies are set only if you allow them in the cookie banner. If you do not, our pages still send Google limited signals without cookies (for example that a page was viewed, with your browser type and approximate location), which Google uses only in aggregate to estimate overall traffic. We never send Google your name, email address, phone number or message text, and we have not turned on advertising features.
We also work with our affiliated company under common ownership, based in the United States, which shares our team and internal systems. It may access your personal data only to help us respond to you and deliver our services, and it is bound to protect it in the same way we do.
We may also disclose personal data: to our professional advisers, such as lawyers, accountants and auditors, under a duty of confidentiality; to courts, regulators, government authorities or law enforcement when the law requires it; to protect the rights, property or safety of Uxory, our clients or others; and to a buyer or successor if our business is reorganised, merged or sold, who must continue to protect it in line with this policy.
We do not sell or rent your personal data, and we do not share it with advertisers.
6. Transfers outside India
Some of our service providers, and our affiliate described above, store or process personal data outside India, including in the United States and other countries where they or their sub-processors operate. We transfer personal data outside India only as the DPDP Act allows, and not to any country the Central Government has restricted. We choose providers that apply security safeguards appropriate to the data they handle.
7. How long we keep it
We keep personal data only for as long as we need it for the purpose we collected it for, or as long as the law requires:
- Enquiries, booked calls, estimates and referrals that do not lead to a project: up to 24 months after our last contact with you.
- Uxory AI chats: 90 days after the last message, or 12 months if you shared your details in the chat. A chat you shared your details in is also kept with your enquiry, as above.
- Client records, including contracts, invoices and payment records: for as long as Indian company and tax law requires, currently at least eight years.
- Newsletter: until you unsubscribe. We keep a record that you unsubscribed so we do not email you again.
- Reviews: for as long as the review is published. You can delete your review at any time.
- Job applications: up to 12 months after the role is filled, unless you ask us to delete yours sooner.
- Server logs and abuse-prevention records: for as long as needed to keep the Website secure and as the law requires.
When we no longer need personal data, or you withdraw consent and no law requires us to keep it, we delete it or make it anonymous.
8. How we protect it
We follow reasonable security practices to protect personal data against unauthorised access, loss, misuse or alteration. These include encrypted connections (HTTPS), access limited to people who need it, storing IP addresses only in hashed form, one-time codes to verify reviews, and using reputable providers with strong security programmes.
No system is completely secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the DPDP Act and its rules require.
9. Your rights
Under the DPDP Act you have the right to:
- Access information: get a summary of the personal data we process about you, how we process it, and the other Data Fiduciaries and Data Processors we have shared it with.
- Correction and completion: ask us to correct inaccurate or misleading data, complete incomplete data and update your data.
- Erasure: ask us to erase personal data we no longer need for the purpose it was collected for, unless the law requires us to keep it.
- Withdraw consent at any time, as described above.
- Grievance redressal: have your complaints about how we handle your personal data addressed by our Grievance Officer.
- Nominate: nominate another person to exercise your rights if you die or become unable to exercise them yourself.
To exercise any of these rights, email contact@uxory.in or our Grievance Officer (see the next section). We may ask you to confirm your identity before acting on a request, and we will respond within the time the law requires.
If you are not satisfied with how we resolve your grievance, you may complain to the Data Protection Board of India after first using our grievance process.
The DPDP Act also asks Data Principals not to give false information, impersonate others or file frivolous complaints.
10. Grievance Officer
In line with the DPDP Act and the SPDI Rules, you can contact our Grievance Officer about any concern with how we handle your personal data:
- Rajesh Chaudhari, Grievance Officer
- Email: contact@uxory.in
- Address: Uxory Technologies Private Limited, Belair Street, Pune, MH 411045, India
We will acknowledge your grievance promptly and aim to resolve it within 30 days of receiving it.
11. Cookies and similar technologies
We use cookies and browser storage that are strictly necessary to run the Website and protect our forms. Analytics and marketing cookies are used only if you agree to them in the cookie banner. You can change your choice at any time with Cookie settings at the bottom of every page; withdrawing consent is as easy as giving it.
Strictly necessary
- uxory_site (cookie, kept for one year): remembers the country site you chose, so we do not redirect you again.
- uxory_consent (local storage): remembers your cookie choice and when you made it.
- uxory_chat (cookie, kept for 7 days, set only when you open the Uxory AI chat): keeps your conversation so you can continue it on other pages and when you come back. Page scripts cannot read it.
- Google reCAPTCHA: protects our contact, newsletter, booking and careers forms, and the details form in the Uxory AI chat, from spam and abuse. It may set its own cookies and collects information about your device and how you use the page, which Google handles under its Privacy Policy and Terms of Service.
- uxory_review_tokens (local storage): remembers the reviews written in this browser, so you can delete them later.
- color-theme (local storage): remembers whether you chose light or dark mode.
- Session storage: keeps your Instant Estimate progress, whether the Uxory AI chat was open, and whether you have seen the country-site notice, until you close the browser tab.
Analytics (only with your consent)
- Google Analytics (cookies _ga and _ga_*, kept for up to two years): tell us how many people visit, which pages and buttons they use, where they came from and how our forms and Instant Estimate perform. We keep this data for 14 months.
- If you decline, no analytics cookies are set. Our pages still send Google limited signals without cookies, as described above, which Google uses only in aggregate to estimate overall traffic.
Marketing (only with your consent)
We do not currently use advertising or retargeting tools. If we add them, they will run only for visitors who allow marketing cookies, and we will update this policy first. If your browser sends a Global Privacy Control signal, we keep marketing cookies off unless you switch them on yourself.
You can also block or delete cookies and local storage in your browser settings. If you block reCAPTCHA, our forms may not work.
12. Children
Our Website and services are meant for businesses and adults. We do not knowingly process personal data of children (anyone under 18 under the DPDP Act), and we do not track, behaviourally monitor or direct targeted advertising at children. If you are under 18, please do not send us personal data. If you believe a child has given us personal data, contact us and we will delete it.
13. Links to other websites
The Website links to websites and services we do not control, such as our clients' websites and the providers named in this policy. Their own privacy policies apply when you use them, and we encourage you to read them.
14. Changes to this policy
We may update this policy when our services, providers or the law change. We will change the "Last updated" date at the top of this page and, if a change is significant, we will tell you by email or with a notice on the Website. Where the law requires it, we will ask for your consent again.
15. Contact us
For privacy questions, or to exercise your rights, contact our Grievance Officer (above) or reach us at:
- Uxory Technologies Private Limited
- Registered address: Belair Street, Pune, MH 411045, India
- Email: contact@uxory.in
- Phone: +91 73506 77916
We work remotely, so email is the fastest way to reach us.
