The short version
This website does not set cookies, does not run analytics, and does not track you across sites. The only personal data we hold is what you choose to type into the contact form, plus the standard server logs our hosting provider keeps to operate the site. We do not sell personal data, and we do not use it to send marketing you did not ask for.
Who we are
Xyravon Studios LLP is a limited liability partnership registered in India, trading as Xyravon Studios. It operates this website and decides how the personal data described here is used. In data-protection terms we are the data fiduciary under India's Digital Personal Data Protection Act, 2023, and the data controller under the EU and UK GDPR where those apply.
You can reach us at company@xyravon.com or +91 77360 27140 (Mon–Fri, 10am–6pm IST). A postal address is available on request.
What we collect
We collect two things, and nothing else.
- What you submit through the contact form
- Your name, email address, and message are required. Company name, budget range, and the services you are interested in are optional. Anything else you choose to include in the message field is up to you — please do not send confidential material, credentials, or sensitive personal data through this form.
- Standard server logs
- Our hosting provider records ordinary request data — IP address, timestamp, page requested, browser user-agent, and referring page — to serve the site, prevent abuse, and diagnose faults. This happens for every visitor and is not linked to any identity by us.
The contact form also includes a hidden field that automated submission bots tend to fill in and people never see. It exists only to discard spam and collects nothing about you.
Why we use it, and on what basis
- To reply to your enquiry
- We read what you send and respond. Under the GDPR this rests on taking steps at your request before entering a contract, and on our legitimate interest in answering business enquiries. Under the DPDP Act it rests on the consent you give by submitting the form for that purpose.
- To keep the site working and secure
- Server logs are used to operate the service, investigate errors, and block abusive traffic. This rests on our legitimate interest in running a functioning, secure website.
- To meet legal and accounting obligations
- If your enquiry becomes an engagement, related correspondence may be retained where law requires it.
We do not use your data for automated decision-making or profiling, and we do not build advertising audiences from it.
Where your data goes
We are based in India and our hosting provider operates infrastructure internationally, so data may be processed outside your country of residence. Where personal data covered by the EU or UK GDPR is transferred abroad, it is protected by Standard Contractual Clauses or an equivalent approved safeguard in our provider agreements.
How long we keep it
- Enquiries that do not lead to an engagement: kept for up to 24 months, then deleted.
- Enquiries that become an engagement: kept for the life of the engagement and for as long afterwards as contractual, tax, or accounting law requires.
- Server logs: retained on a short rolling window by our hosting provider and then overwritten.
You can ask us to delete your enquiry sooner. We will, unless we are legally required to keep it.
Your rights
Depending on where you live, you have some or all of the following rights over your personal data:
- Access — ask what we hold about you and get a copy.
- Correction — have inaccurate or incomplete data fixed.
- Erasure — ask us to delete it, subject to legal retention duties.
- Restriction and objection — ask us to pause or stop a particular use, including any use resting on legitimate interests.
- Portability — receive the data you gave us in a structured, machine-readable form.
- Withdraw consent — where our use rests on consent, withdraw it at any time without affecting what happened before.
- Nominate — under the DPDP Act, nominate someone to exercise these rights on your behalf if you die or become incapacitated.
- Complain — to your local supervisory authority, or to the Data Protection Board of India.
To exercise any of these, email company@xyravon.com. We will respond within 30 days. We may need to confirm who you are before acting, so that we do not disclose your data to somebody else.
How we protect it
The site is served over TLS. Access to enquiry data is limited to the people who need it to reply to you, and our hosting accounts require multi-factor authentication. No system is perfectly secure, and we will not pretend otherwise — but if a breach affects your personal data and creates a meaningful risk to you, we will notify you and the relevant regulator as the law requires.
Children
This is a business-to-business site and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, write to us and we will delete it.
Changes to this policy
If we change how we handle personal data, we will update this page and move the date at the top. Where a change materially affects your rights, we will make that clear rather than quietly editing the text.
Contact and grievances
Questions, requests, or complaints about privacy go to company@xyravon.com. This is also the grievance redressal contact for the purposes of the DPDP Act. If you are not satisfied with our response, you may complain to the Data Protection Board of India, or to your local data protection authority if you are in the EU or UK.