← Back to Home
DPDP ACT 2023 & GOOGLE PLAY STORE COMPLIANT • v2.1.0

Privacy Policy

Last Updated & Effective Date: 1 October 2026 | Version: 2.1.0

XIndia — Comprehensive Platform Privacy Policy

Compliant with the Digital Personal Data Protection (DPDP) Act, 2023, Information Technology Act, 2000, and Google Play Developer Policies

  • Platform Name: XIndia (B2B Industrial Marketplace & Launchpad)
  • Operating Entity: XIndia Technologies Private Limited
  • Website: https://xindia.live
  • Effective Date: October 1, 2026 | Version: 2.1 (Production Release)
  • Multilingual Accessibility: As required under Section 5(3) of the DPDP Act 2023, you have the option to access this Privacy Policy in English or Hindi (accessible via our dynamic in-app language toggle or support portal).

1. Overview & Data Fiduciary Details

This Privacy Policy governs the collection, processing, storage, transfer, and erasure of personal data by XIndia Technologies Private Limited (“XIndia”, “we”, “us”, or “our”) when you use our web portal (https://xindia.live) and mobile applications.

Under Section 2(i) of the Digital Personal Data Protection Act, 2023 (DPDP Act), XIndia acts as the Data Fiduciary responsible for determining the purpose and means of processing personal data on the Platform.

2. Personal & Commercial Data We Collect

We collect personal data strictly necessary to deliver verified B2B discovery, trade facilitation, and statutory tax compliance:

  1. Identity & Contact Data: Legal name, verified mobile phone number (OTP verified), corporate email address, enterprise designation, and hashed authentication credentials.
  2. KYC & Enterprise Verification Data: Goods and Services Tax Identification Number (GSTIN), Permanent Account Number (PAN), Udyam Registration, factory addresses, and industrial premises verification media.
  3. Commercial & Transaction Data: Sourcing requirements, Requests for Quotations (RFQs), technical specifications, quotation messages, and Razorpay/Google Play billing transaction IDs (SAC 998439). XIndia never collects or stores credit/debit card numbers, CVVs, or UPI PINs.
  4. Technical & Telemetry Data: IP address, device hardware model, OS version, app version, network state, approximate city-level location (for regional supplier discovery), and Firebase Cloud Messaging (FCM) tokens.

3. Purpose of Processing & Lawful Basis (Sections 4 & 7, DPDP Act 2023)

Personal data is processed strictly for specified, lawful commercial purposes:

  1. Facilitating commercial matchmaking between industrial buyers and verified manufacturers.
  2. Routing RFQs and delivering real-time lead alerts via push notifications and email.
  3. Performing enterprise KYC to prevent commercial fraud, impersonation, and unauthorized broker listings.
  4. Generating statutory B2B GST tax invoices and accounting records.
  5. Maintaining platform integrity, thwarting automated scraping, and debugging crash telemetry.

4. Third-Party Technical Processors & Sub-Processors

We do not sell, rent, or trade your personal data. Data is transferred strictly to secure infrastructure processors necessary to deliver the service under valid contracts (Section 8(2), DPDP Act):

  • Google Firebase (Google LLC): Authentication tokens, session security, and FCM push notifications.
  • Razorpay Software Private Limited: RBI-authorized payment processing for subscriptions and SmartCredits.
  • Firebase Crashlytics & Sentry: Real-time application stability and error diagnostics.
  • Brevo (Sendinblue): Transactional email dispatch for Proforma and GST tax invoices.
  • Cloudflare R2 & AWS S3: Encrypted cloud storage for product catalogs, factory photos, and RFQ documents.
  • YouTube API Services (Google LLC): For embedding manufacturer factory walkthrough videos. By viewing video content, users agree to the YouTube Terms of Service and Google Privacy Policy. You can revoke access at any time via Google Security Settings.

5. Data Principal Rights (Chapter III, DPDP Act 2023)

Every user holds the following statutory rights under the DPDP Act 2023:

  1. Right to Access Information (Section 11): Obtain a summary of personal data collected, processing activities undertaken, and identities of data recipients.
  2. Right to Correction & Erasure (Section 12): Correct inaccurate or misleading data, update business records, or request complete account erasure.
  3. Right of Grievance Redressal (Section 13): Register grievances with our designated Grievance Officer and receive resolution within statutory timelines.
  4. Right to Nominate (Section 14): Nominate any individual who, in the event of your death or incapacity, shall exercise your rights under the DPDP Act.
  5. Right to Complain to the Data Protection Board of India: If you are dissatisfied with our grievance redressal or if a grievance remains unresolved, you have the statutory right under Section 18 to file a formal complaint with the Data Protection Board of India (DPBI).

6. Account Deletion & Data Retention Schedule

In compliance with Google Play Store Policies and Section 8(7) of the DPDP Act 2023:

  • How to Delete: Users can delete their account in-app (Profile → Settings → Privacy → Delete Account) or via our public web portal: https://xindia.live/delete-account (no login required; verified via mobile OTP).
  • Purge vs. Retention: Upon initiating deletion, public profile listings and contact visibility are immediately delisted. Following a 15-day cooling-off period, all personal identifiers, chats, and active tokens are permanently purged.
  • Statutory CGST Retention: In accordance with Section 36 of the Central Goods and Services Tax (CGST) Act, 2017, completed B2B GST tax invoices and accounting ledger entries are retained in an isolated, read-only compliance vault for 8 years (72 months).

7. Protection of Children’s Data (Section 9, DPDP Act 2023)

XIndia is strictly a B2B commercial platform intended exclusively for corporate enterprises, business owners, and individuals aged 18 years or older. In strict compliance with Section 9, we do not knowingly solicit, collect, or process personal data of children under 18 years. Accounts registered by minors will be immediately terminated and purged upon discovery.

8. Statutory Grievance Redressal Officer & Legal Notice

In compliance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (as amended) and Section 8(9) of the DPDP Act 2023, the full details of our designated Grievance Redressal Officer, registered corporate office address, statutory 24-hour acknowledgment and 15-day resolution timelines, and appellate escalation paths are dynamically maintained and displayed in the live Statutory Grievance Redressal Officer & Legal Notice section at the bottom of this page.

RULE 3(2) IT RULES & DPDP ACT 2023

Statutory Grievance Redressal Officer & Legal Notice

In compliance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (as amended) and Section 8(9) of the Digital Personal Data Protection (DPDP) Act, 2023, the details of the designated Grievance Officer and corporate nodal channels for XIndia are published below:

Operating Entity

XIndia Technologies Private Limited

Designated Grievance Officer

Abhishek Raj

Grievance Redressal Email

support@xindia.live

General Customer Support

support@xindia.live

Registered Corporate Office

New Delhi, India

Statutory Resolution Timelines:

  • Acknowledgment: All privacy grievances, content notices, and support inquiries are acknowledged within 24 hours of receipt.
  • Resolution: All grievances are formally investigated and resolved within 15 days of receipt (or 72 hours for specific unlawful content removal notices under Rule 3(1)(b)).
  • Appellate Escalation: If you are dissatisfied with our Grievance Officer’s order or if your grievance is unresolved within the timeline, you may appeal to the central Grievance Appellate Committee (GAC) at https://gac.gov.in or submit a complaint to the Data Protection Board of India (DPBI) under Section 18 of the DPDP Act 2023.
Open Support & Grievance Desk →DPDP Account & Data Deletion Portal →