Privacy Policy

The purpose of this Privacy Policy (“Policy”) is to inform the customers, suppliers and other users (“Users”) of the personal information and data being collected, and to protect the personal information of the Users, provided by them to Spacempact Consulting Pvt Ltd(“Xuriti” or “we” or “us”) through our website www.xuriti.com and mobile application (“Platform”)

Xuriti through this Policy aims to demonstrate its commitment towards the Information Technology Act, 2000 and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information), Rules, 2011 (“Rules”).

This Policy is applicable to all the information collected, received, possessed, owned, controlled, stored, dealt with or handled by Xuriti in respect of a User.

PART I – Information Xuriti Collects and Controls

What information Xuriti collects

1. We collect information about you only if we need the information for some legitimate purpose. Xuriti will have information about you only if (a) you have provided the information yourself, (b) Xuriti has automatically collected the information, or (c) Xuriti has obtained the information from a third party. Below we describe the various scenarios that fall under each of those three categories and the information collected in each one.

Information that you provide us

1. Account signup : When you sign up for an account to access one or more of our services, we ask for information like your name, company name, permanent account number (PAN). GST registration details, contact number, email address and country to complete the account signup process. You’ll also be required to choose a unique username and a password for accessing the created account. You may also provide us with more information such as your photo, time zone and language, but we don’t require that information to sign up for an account. 
2. Payment processing : When you buy something from us, we ask you to provide your name, contact information, and credit card information or other payment account information. When you submit your card information, we store the name and address of the cardholder, the expiry date and the last four digits of the credit card number. We do not store the actual credit card number. For quick processing of future payments, if you have given us your approval, we may store your credit card information or other payment information in an encrypted format in the secured servers of our Payment Gateway Service Providers 
3. Interactions with Xuriti : We may record, analyze and use your interactions with us, including email, telephone, and chat conversations with our sales and customer support professionals, for improving our interactions with you and other customers.
4. Testimonials : When you authorize us to post testimonials about our platform on websites, we may include your name and other personal information in the testimonial. You will be given an opportunity to review and approve the testimonial before we post it. If you wish to update or delete your testimonial, you can contact us at hello@xuriti.com

Information that we collect automatically

1. Information from browsers, devices and servers : When you visit our websites, we collect information that web browsers, mobile devices and servers make available, such as the internet protocol address, browser type, language preference, time zone, referring URL, date and time of access, operating system, mobile device manufacturer and mobile network information. We include these in our log files to understand more about visitors to our websites.
2. Information from first party cookies and tracking technologies : We use temporary and permanent cookies to identify users of our services and to enhance user experience. We embed unique identifiers in our downloadable products to track usage of the products. We also use cookies, beacons, tags, scripts, and other similar technologies to identify visitors, track website navigation, gather demographic information about visitors and users, understand email campaign effectiveness and for targeted visitor and user engagement by tracking your activities on our websites. We only use first-party cookies and do not use third-party cookies or other third-party tracking technologies on our websites. We also use first-party Local Storage Objects (LSOs) such as HTML5 to store content information and preferences to provide certain features.
3. Information from application logs and mobile analytics : We collect information about your use of our products, services and mobile applications from application logs and in-house usage analytics tools, and use it to understand how your business use and needs can improve our products. This information includes clicks, scrolls, features accessed, access time and frequency, errors generated, performance data, storage utilized, user settings and configurations, and devices used to access and their locations.

Purposes for using information

In addition to the purposes mentioned above, we may use your information for the following purposes:

• To communicate with you (such as through email) about products that you have downloaded and services that you have signed up for, changes to this Privacy Policy, changes to the Terms of Service, or important notices;
•  To keep you posted on new products and services, upcoming events, offers, promotions and other information that we think will be of interest to you;
•  To ask you to participate in surveys, or to solicit feedback on our products and services;
•  To set up and maintain your account, and to do all other things required for providing our services, such as enabling collaboration, providing website and mail hosting, and backing up and restoring your data;
•  To understand how users use our products and services, to monitor and prevent problems, and to improve our products and services;
•  To provide customer support, and to analyze and improve our interactions with customers;
•  To detect and prevent fraudulent transactions and other illegal activities, to report spam, and to protect the rights and interests of Xuriti, Xuriti’s users, third parties and the public;
•  To update, expand and analyze our records, identify new customers, and provide products and services that may be of interest to you;
•  To analyze trends, administer our websites, and track visitor navigations on our websites to understand what visitors are looking for and to better help them;
•  To monitor and improve marketing campaigns and make suggestions relevant to the user.

Who we share your information with

1. Only Spacempact Consulting Pvt Ltd shall have access to the information covered in Part I. We do not sell any personal information. We share your information only in the ways that are described in this Privacy Policy, and only with parties who adopt appropriate confidentiality and security measures.
2. Employees and independent contractors : Employees and independent contractors of all Xuriti have access to the information covered in Part I on a need-to-know basis. We require all employees and independent contractors of Xuriti to follow this Privacy Policy for personal information that we share with them.
3. Third-party service providers : We may need to share your personal information and aggregated or de-identified information with third-party service providers that we engage, such as marketing and advertising partners, event organizers, web analytics providers and payment processors. These service providers are authorized to use your personal information only as necessary to provide these services to us.

Retention of information

1. We retain your personal information for as long as it is required for the purposes stated in this Privacy Policy. Sometimes, we may retain your information for longer periods as permitted or required by law, such as to maintain suppression lists, prevent abuse, if required in connection with a legal claim or proceeding, to enforce our agreements, for tax, accounting, or to comply with other legal obligations. When we no longer have a legitimate need to process your information, we will delete or anonymize your information from our active databases. We will also securely store the information and isolate it from further processing on backup discs until deletion is possible.

Part II – Information that Xuriti processes on your behalf

Information entrusted to Xuriti and purpose

1. Information provided in connection with services : You may entrust information that you or your organization (“you”) control, to Xuriti in connection with use of our services or for requesting technical support for our products. This includes information regarding your customers and your employees (if you are a controller) or data that you hold and use on behalf of another person for a specific purpose, such as a customer to whom you provide services (if you are a processor). The data may either be stored on our / our partner’s servers when you use our services, or transferred or shared to us as part of a request for technical support or other services.
2. Information from mobile devices : When you elect to allow it, some of our mobile applications have access to the camera, call history, contact information, photo library, and other information stored on your mobile device. Our applications require such access to provide their services. Similarly, when you elect to provide access, location-based information is also collected for purposes including, but not limited to, locating nearby contacts or setting location-based reminders. This information will be exclusively shared with our mapping providers and will be used only for mapping user locations. You may disable the mobile applications’ access to this information at any time by editing the settings on your mobile device. The data stored on your mobile device and their location information to which the mobile applications have access will be used in the context of the mobile application, and transferred to and associated with your account in the corresponding services (in which case the data will be stored on our servers) or products (in which case the data will remain with you unless you share it with us).

(All the information entrusted to Xuriti is collectively termed “service data”)

Ownership and control of your service data

1. We recognize that you own your service data. We provide you complete control of your service data by providing you the ability to (i) access your service data, (ii) share your service data through supported third-party integrations, and (iii) request export or deletion of your service data.

How we use service data

1. We process your service data when you provide us instructions through the various modules of our services. For example, when you generate an invoice, information such as the name and address of your customer will be used to generate the invoice; and when you use our campaign management service for email marketing, the email addresses of the persons on your mailing list will be used for sending the emails.

Push notifications

1. If you have enabled notification on our desktop and mobile applications, we will push notifications through a push notification provider such as Apple Push Notification Service, Google Cloud Messaging or Windows Push Notification Services. You can manage your push notification preferences or deactivate these notifications by turning off notifications in the application or device settings.

Who we share service data with

1. Xuriti and third party sub-processors : In order to provide services and technical support for our products, Xuriti may engage third parties, as appropriate.
2. Employees and independent contractors : We may provide access to your service data to our employees and individuals who are independent contractors of Xuriti involved in providing the services (collectively our “employees”) so that they can (i) identify, analyze and resolve errors, (ii) manually verify emails reported as spam to improve spam detection, or (iii) manually verify scanned images that you submit to us to verify the accuracy of optical character recognition. We ensure that access by our employees to your service data is restricted to specific individuals, and is logged and audited. Our employees will also have access to data that you knowingly share with us for technical support or to import data into our products or services. We communicate our privacy and security guidelines to our employees and strictly enforce privacy safeguards within Xuriti.

1. Collaborators and other users : Some of our products or services allow you to collaborate with other users or third parties. Initiating collaboration may enable other collaborators to view some or all of your profile information. For example, when you edit a document that you have shared with other persons for collaboration, your name and profile picture will be displayed next to your edits to allow your collaborators to know that you made those edits.

1. Third-party integrations you have enabled : Most of our products and services support integrations with third-party products and services. If you choose to enable any third-party integrations, you may be allowing the third party to access your service information and personal information about you. We encourage you to review the privacy practices of the third-party services and products before you enable integrations with them.

Retention of information

1. We hold the data in your account as long as you choose to use Xuriti Services. Once you terminate your Xuriti user account, your data will eventually get deleted from active database during the next clean-up that occurs once in 6 months. The data deleted from active database will be deleted from backups after 3 months.

Part III – General

External links on our websites

1. Some pages of our websites may contain links to websites that are not linked to this Privacy Policy. If you submit your personal information to any of these third-party sites, your personal information is governed by their privacy policies. As a safety measure, we recommend that you not share any personal information with these third parties unless you’ve checked their privacy policies and assured yourself of their privacy practices.

Disclosures in compliance with legal obligations

1. We may be required by law to preserve or disclose your personal information and service data to comply with any applicable law, regulation, legal process or governmental request, including to meet national security requirements.

Enforcement of our rights

1. We may disclose personal information and service data to a third party if we believe that such disclosure is necessary for preventing fraud, investigating any suspected illegal activity, enforcing our agreements or policies, or protecting the safety of our users.

Business Transfers

1. We do not intend to sell our business. However, in the unlikely event that we sell our business or get acquired or merged, we will ensure that the acquiring entity is legally bound to honor our commitments to you. We will notify you via email or through a prominent notice on our website of any change in ownership or in the uses of your personal information and service data. We will also notify you about any choices you may have regarding your personal information and service data.

Compliance with this Privacy Policy

1. We make every effort, including periodic reviews, to ensure that personal information you provide is used in conformity with this Privacy Policy. If you have any concerns about our adherence to this Privacy Policy or the manner in which your personal information is used, kindly write to us hi@xuriti.com. We’ll contact you, and if required, coordinate with the appropriate regulatory authorities to effectively address your concerns.

Notification of changes

1. We may modify the Privacy Policy at any time, upon notifying you through a service announcement or by sending an email to your primary email address. If we make significant changes to the Privacy Policy that affect your rights, you will be provided with at least 30 days’ advance notice of the changes by email to your primary email address. If you think that the updated Privacy Policy affects your rights with respect to your use of our products or services, you may terminate your use by sending us an email within 30 days. Your continued use after the effective date of changes to the Privacy Policy will be deemed to be your agreement to the modified Privacy Policy. You will not receive email notification of minor changes to the Privacy Policy. If you are concerned about how your personal information is used, you should check back at www.xuriti.com/privacy.html periodically.