Privacy Policy

1. Introduction

XamForge ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy applies to our websites (xamforge.com and xamforge.in) and all related services (collectively, "Services").

2. Information We Collect

We collect only minimal information required to provide our Services effectively:

2.1 Account Information (Google Sign-In)

When you sign up via Google Sign-In, we receive:

• Name (as provided by Google)
• Email address (your Google account email)
• Profile image URL (publicly accessible Google profile picture)

We do NOT collect: mobile numbers, physical addresses, age, location data, or any other personal information from Google or elsewhere.

2.2 Usage Data

Automatically collected (non-personal):

• IP address (anonymized)
• Browser type and device information
• Pages visited and time spent
• Progress data (assessments completed, features used)

3. How We Use Your Information

We use collected data solely for:

• Account authentication and management
• Personalizing your dashboard and progress tracking
• Service improvement and analytics
• Security and fraud prevention
• Service-related communications (e.g., password resets)

4. Data Storage & Security

All personal data is stored securely in Google Cloud Platform, leveraging:

• End-to-end encryption (at rest and in transit)
• ISO 27001, SOC 2/3 certified infrastructure
• 24/7 monitoring and threat detection
• Regular security audits and compliance checks

Data retention: Account info kept as long as your account is active + 30 days post-deletion for backups.

5. Data Sharing

We do NOT sell or share your personal data.

Data may be accessed by:

• Authorized XamForge staff (limited access)
• Google Cloud (infrastructure provider)
• Law enforcement (legal requirement only)

6. Your Rights

Under Indian DPDP Act 2023 and applicable laws, you can:

• Access your data anytime via account settings
• Delete your account (data erased within 30 days)
• Correct inaccurate information
• Withdraw consent (limits service functionality)

To exercise rights: Email nkhpin@gmail.com

7. Cookies & Tracking

We use essential cookies for functionality and optional analytics cookies. You can manage preferences via browser settings.

8. Children's Privacy

Our Services are not directed to children under 13. We do not knowingly collect data from children.

9. International Data Transfers

Data stored in Google Cloud (India region) may be processed globally by Google. We ensure adequate protection via Google's Data Processing Addendum.

10. Changes to This Policy

We may update this policy. Changes posted here with "Last Updated" date. Continued use constitutes acceptance.

11. Contact Us

Privacy concerns? Contact our Data Protection Officer:
Email: nkhpin@gmail.com
Support: aquila-lab@googlegroups.com