Last updated: 30 October 2026
XtrazCon Technology Pvt. Ltd. (“XtrazCon”, “we”, “us”) respects your privacy. This policy explains what personal data we collect through our website, enquiry forms, chat assistant and careers pages, why we collect it, who we share it with and the rights you have under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).
Who we are
XtrazCon Technology Pvt. Ltd. is a technology company based in Pune, Maharashtra, India, providing AI, automation, software, digital marketing and related services. For the personal data described in this policy we are the Data Fiduciary under the DPDP Act.
This policy applies to personal data you share with us through this website — enquiry and consultation forms, website forms, the chat assistant, newsletter sign-ups and job applications. It does not cover the websites or services of other organisations that we link to.
Personal data we collect
We collect only what we need for the purpose you share it for:
- Contact details — your name, email address, phone or mobile number, organisation and country.
- Enquiry details — the service or solution you are interested in, company size, timeframe, current systems, requirements and the content of your message.
- Chat assistant data — your name, mobile number and email address, whether your email has been verified, the topics you choose and the messages you exchange with our assistant or team.
- Job applications — your CV and the details you submit, such as notice period, expected salary and a cover note. When you apply we also create a candidate portal account so you can follow your application.
- Technical data — IP address, browser and device type, pages visited, referring page and campaign tags, collected through server logs, spam protection (Google reCAPTCHA) and, only if you agree, analytics cookies.
We do not ask for sensitive information such as bank or card details, health information or government identity numbers through this website. Please do not include such information in free-text fields.
How we use your data
We process personal data on the basis of your consent, or for the legitimate uses permitted by Section 7 of the DPDP Act, to:
- respond to your enquiry, arrange a consultation, prepare a proposal or quotation and deliver the services you ask for;
- verify your email address and continue a chat conversation with you;
- assess job applications, contact candidates and manage recruitment;
- send service messages such as replies, confirmations, reminders and invoices;
- send newsletters or marketing emails only if you have opted in — every such email has an unsubscribe link;
- keep the website secure, prevent spam, fraud and abuse, and fix technical problems;
- understand in aggregate how visitors use the website so we can improve it (only with your consent to analytics cookies);
- comply with the law, respond to lawful requests from authorities and protect our legal rights.
We do not sell your personal data, and we do not use it to make automated decisions that have legal or similarly significant effects on you.
Who we share data with
We share personal data only with service providers (Data Processors) who help us run our business, under contracts that require them to protect it and use it only on our instructions. These include:
- hosting, cloud infrastructure and database providers;
- email delivery providers that send our replies, verification codes and newsletters;
- messaging providers such as WhatsApp Business, when you choose to contact us that way;
- payment gateways that process payments for our services — we do not store your card details;
- AI model providers that power our chat assistant, sent only the text needed to produce a reply;
- Google reCAPTCHA for spam protection and, with your consent, Google Analytics or Google Tag Manager.
Some of these providers may process data outside India. Where they do, we take reasonable steps to keep the data protected and we follow any restrictions notified by the Government of India under the DPDP Act.
We may also disclose personal data where the law, a court or a government authority requires it, or as part of a merger, acquisition or sale of our business, in which case this policy will continue to apply to your data.
Cookies and analytics
We use a small number of essential cookies to keep the website secure and working — for example, to protect forms against misuse and to remember your chat session. These cannot be switched off.
If website analytics is enabled, analytics and advertising cookies from Google Analytics or Google Tag Manager are set only after you choose “Accept” in the cookie banner. If you choose “Reject” or make no choice, Google tags run in a restricted mode without those cookies. To change your choice, clear this website’s data in your browser and the banner will appear again.
How long we keep data
We keep personal data only for as long as we need it for the purpose it was collected, or as long as the law requires:
- enquiries and chat conversations — up to 3 years after our last interaction with you;
- client records, contracts and invoices — for the periods required by tax, company and other applicable laws (generally 8 years);
- job applications — up to 2 years after the recruitment process ends, unless you ask us to delete them sooner;
- newsletter subscriptions — until you unsubscribe;
- security and server logs — generally up to 180 days.
When data is no longer needed, we delete it or make it anonymous.
How we protect your data
We use reasonable security safeguards, including encrypted (HTTPS) connections, access controls with role-based permissions, activity logs, regular backups and spam and abuse protection. Only people who need personal data for their work can access it.
No system is completely secure. If a personal data breach occurs, we will act promptly and inform the Data Protection Board of India and the people affected, as the law requires.
Your rights
As a Data Principal under the DPDP Act, you have the right to:
- get a summary of the personal data we hold about you and how we use it;
- correct, complete or update inaccurate or incomplete data;
- ask us to erase your data when it is no longer needed or when you withdraw consent, unless the law requires us to keep it;
- withdraw your consent at any time, as easily as you gave it — this does not affect processing that happened before;
- nominate another person to exercise your rights in the event of your death or incapacity;
- have your complaints addressed by us and, if needed, by the Data Protection Board of India.
To use any of these rights, email info@xtrazcon.com or call +91 95035 39447. We may need to confirm your identity before acting on a request. To stop marketing emails, use the unsubscribe link in any of them.
Children
This website and our services are meant for businesses and adults. We do not knowingly collect personal data of children (anyone under 18). If you believe a child has shared personal data with us, please contact us and we will delete it.
Grievance Officer
If you have a question or complaint about how we handle personal data, please contact our Grievance Officer:
XtrazCon Technology Pvt. Ltd.
Baner, Pune,, Maharashtra 411045, India
Email: info@xtrazcon.com
Phone: +91 95035 39447
We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.
Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top shows when it last changed, and significant changes will be highlighted on this page. Please also read our Terms of Use.