PRIVACY POLICY

1. INTRODUCTION

This Privacy Policy (“Policy”) describes how QX137, a proprietary technology platform owned and operated by its founder(s) (“Company,” “we,” “us,” or “our”), with its registered office in New Delhi, India, collects, uses, stores, processes, and protects your personal information when you use our website (www.qx137.com), platform, services, or interact with us in any manner.

By accessing or using the QX137 Platform, you expressly consent to the collection, use, and disclosure of your information as described in this Policy. If you do not agree with the terms of this Policy, please do not access or use our services.

This Policy is governed by and compliant with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, as applicable.

2. DEFINITIONS

• “Platform” means the QX137 website, web application, APIs, admin dashboard, client portal, and all associated services and tools.
• “User” / “Client” means any individual, business, or entity that accesses, registers on, or uses the Platform.
• “Personal Data” means any information relating to an identified or identifiable natural person, including name, email, phone number, business details, and usage data.
• “Services” means website design, development, deployment, AI content generation, SEO optimization, social media automation, and all related services offered by QX137.

3. INFORMATION WE COLLECT

3.1 Information You Provide Directly

• Full name, business name, email address, phone number, WhatsApp number
• Business address, city, GST number, business registration number
• Business description, industry, services offered, USP, tagline, target audience
• Domain name, logo, brand colors, design preferences
• Social media handles (Instagram, Facebook, LinkedIn)
• Competitor URLs, reference websites, target keywords
• Payment information and transaction records
• Content you provide for your website (text, images, testimonials)
• Communications with us (emails, messages, support requests)

3.2 Information Collected Automatically

• IP address, browser type, device information, operating system
• Pages visited, time spent on pages, referral URLs, click data
• Login timestamps, session data, activity logs
• Cookies and similar tracking technologies (see Section 7)

3.3 Information from Third-Party Sources

• Instagram API data (usernames, message content, comment data) when you integrate social media services
• WhatsApp Business API data for automated communications
• Payment processor data (Razorpay, bank transfers)
• Analytics data from Google Analytics and similar services

4. HOW WE USE YOUR INFORMATION

We use your information for the following purposes:

• To provide, maintain, and improve our Services
• To design, develop, and deploy your website
• To generate AI-powered content, SEO structures, and marketing materials
• To communicate with you regarding your project, updates, and support
• To process payments and maintain transaction records
• To send promotional communications, newsletters, offers, and marketing materials about QX137 and its services (you may opt out at any time)
• To use your business name, website, logo, and project details as portfolio showcases and case studies for QX137's marketing and business development purposes
• To use your phone number, email address, and WhatsApp number for service communications and promotional purposes
• To automate Instagram and WhatsApp interactions on your behalf when you opt in
• To analyze usage patterns and improve platform performance
• To ensure security, prevent fraud, and enforce our Terms of Service
• To comply with legal obligations under Indian law
• To train and improve our AI models and content generation systems using anonymized data

5. DATA SHARING & DISCLOSURE

We may share your information with:

• Service Providers: Hosting providers (Vercel, Supabase), payment processors, analytics services, AI service providers (Anthropic), social media platforms (Meta), and email/SMS providers that assist in delivering our Services.
• Portfolio & Marketing: We may publicly display your business name, website URL, project screenshots, and testimonials on our website portfolio, marketing materials, social media, and promotional content. By using our Services, you grant us an irrevocable, perpetual, worldwide license to use your business information for marketing purposes.
• Legal Requirements: When required by law, subpoena, court order, or government request under the jurisdiction of courts in New Delhi, India.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets.
• Protection of Rights: To protect the rights, property, or safety of QX137, our users, or the public.

We do NOT sell your personal data to third parties for their independent marketing purposes.

6. DATA SECURITY

We implement industry-standard security measures to protect your information, including:

• SSL/TLS encryption for all data in transit
• Row-Level Security (RLS) on all database tables
• Role-based access control (RBAC) for admin operations
• Secure password hashing and authentication via Supabase Auth
• Regular security audits and vulnerability assessments
• Secure API key management and environment variable protection

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but will notify you of any data breach as required by applicable law.

7. COOKIES & TRACKING TECHNOLOGIES

We use cookies and similar technologies for:

• Essential Cookies: Authentication, session management, security tokens
• Analytics Cookies: Understanding usage patterns, page views, feature usage
• Functional Cookies: Remembering preferences, settings, and customizations

You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality.

8. DATA RETENTION

We retain your personal data for as long as your account is active or as needed to provide Services. We may retain certain data indefinitely for legitimate business purposes including:

• Portfolio showcase data (perpetual, as per marketing license granted)
• Transaction and billing records (minimum 8 years as per Indian tax laws)
• Communication logs (for dispute resolution and service improvement)
• Anonymized and aggregated data (indefinite, for analytics and AI training)

9. YOUR RIGHTS

Under the DPDP Act, 2023 and applicable Indian law, you have the right to:

• Access a summary of your personal data held by us
• Request correction of inaccurate personal data
• Request erasure of personal data (subject to legal retention requirements and contractual obligations)
• Withdraw consent for specific processing activities (this does not affect the lawfulness of processing prior to withdrawal)
• Nominate an individual to exercise rights on your behalf
• Lodge a grievance with the Data Protection Board of India

Note: Withdrawal of consent or data deletion may result in termination of Services. The marketing license granted for portfolio use survives account deletion, as per the Terms of Service.

10. THIRD-PARTY SERVICES

Our Platform integrates with third-party services including but not limited to:

• Supabase (database, authentication, storage)
• Vercel (hosting, deployment, serverless functions)
• Anthropic / Claude AI (content generation, AI responses)
• Meta / Instagram Graph API (social media automation)
• WhatsApp Business API (messaging automation)
• Cloudinary (media storage and delivery)
• Google Analytics (website analytics)

Each third-party service has its own privacy policy governing their collection and use of data. We are not responsible for the privacy practices of these third parties.

11. CHILDREN'S PRIVACY

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us immediately and we will take steps to delete such information.

12. INTERNATIONAL DATA TRANSFERS

Your data may be processed and stored on servers located outside India (including but not limited to the United States and Singapore) through our third-party service providers. By using our Services, you consent to such transfers. We ensure that appropriate safeguards are in place as required by applicable Indian data protection laws.

13. GOVERNING LAW & JURISDICTION

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts in New Delhi, India.

14. CHANGES TO THIS POLICY

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the Platform after changes constitutes acceptance of the revised Policy. For material changes, we may notify you via email or through the Platform.

15. CONTACT US

For any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us: