Privacy Policy

We collect information in the following ways:

Information you provide directly:

• Contact form submissions — When you fill out our contact form, we collect your name, email address, and the message you send. If you select a service category, that is also collected.
• Email correspondence — If you email us directly at nitish@xelionlabs.com, we retain those communications.
• Workshop or service inquiries — Information you provide when inquiring about or registering for our AI training workshops or consulting services.

Information collected automatically:

• Log data — When you visit our website, our servers may record your IP address, browser type, operating system, referring URL, and pages viewed.
• Usage data — Aggregate information about how visitors interact with our site, such as pages visited and time spent.

We do not collect sensitive personal data such as financial information, government ID numbers, or health data through this website.

We use the information we collect to:

• Respond to your inquiries and contact form submissions
• Provide, deliver, and improve our consulting services and workshops
• Send you relevant updates about our services if you have opted in
• Understand how our website is used so we can improve it
• Comply with legal obligations
• Prevent fraud and protect the security of our website and services

We do not sell, rent, or use your personal data for automated decision-making or profiling.

We do not sell your personal information. We may share your information only in the following circumstances:

• Service providers — We use Web3Forms to process contact form submissions. They receive the data you submit through our contact form solely to deliver it to us. Their privacy policy governs their handling of that data.
• Legal requirements — We may disclose your information if required by law, court order, or governmental authority.
• Business transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a notice on our website.
• With your consent — We may share your information for any other purpose with your explicit consent.

Our website currently uses minimal tracking. Specifically:

• We do not use advertising cookies or third-party tracking pixels.
• We use Google Analytics 4 to measure site usage. IP addresses are anonymized before transmission. You can opt out by installing the Google Analytics opt-out browser add-on.
• External services we load (Google Fonts, Google Analytics 4 with anonymized IP) may set their own cookies or log access requests per their respective privacy policies.

If we introduce additional analytics tools or change how we use the existing one, we will update this policy and notify users where required by applicable law.

Our website uses the following third-party services. Each has its own privacy policy:

• Web3Forms — Contact form processing. Receives your name, email, and message when you submit the contact form.
• Google Fonts — Fonts loaded from Google's CDN. Google may log requests.
• Google Analytics 4 (analytics.google.com) — Used to measure site traffic with anonymized IPs.

We are not responsible for the privacy practices of these third-party services. We encourage you to review their respective privacy policies.

We retain your personal information only as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

• Contact form submissions — Retained for up to 2 years from the date of submission, or until the inquiry is resolved and no further business relationship exists.
• Client project records — Retained for up to 5 years to comply with contractual and accounting obligations.
• Email correspondence — Retained in accordance with our email provider's data retention practices, generally up to 3 years.

You may request deletion of your data at any time by contacting us (see Section 12).

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you.
• Correction — Request that we correct inaccurate or incomplete data.
• Deletion — Request that we delete your personal data ("right to be forgotten").
• Restriction — Request that we restrict processing of your data in certain circumstances.
• Portability — Request your data in a structured, commonly used, machine-readable format.
• Objection — Object to processing based on legitimate interests.
• Withdraw consent — Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at nitish@xelionlabs.com. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:

• HTTPS encryption for all data transmitted to and from our website
• Access controls limiting who within our organisation can access personal data
• Use of reputable third-party service providers with their own security programmes

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it promptly.

Xelionlabs is based in India. If you access our website or services from outside India, your information may be transferred to, stored, and processed in India or other countries where our service providers operate. By using our services, you consent to such transfers.

Where we transfer personal data outside your jurisdiction, we take steps to ensure appropriate safeguards are in place, consistent with applicable data protection laws.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our website or services after any changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out: