Privacy Policy

1. Who we are

Hoxe Technologies Pvt. Ltd. is a company incorporated in India (CIN: TODO[CIN]), with its registered office at TODO[Registered office address, City, State, PIN, India]. For the personal data described in this policy, we act as a Data Fiduciary — we decide why and how your data is processed. Where we process data on behalf of a business customer (for example, end-user conversations handled through Convo or leads processed in CEST), that customer is the Data Fiduciary and we act as a Data Processor under a separate Data Processing Agreement.

2. The personal data we collect

• Enquiry & contact data — your name, work email, phone number, company and the message you send us through our forms.
• Purchase data — for paid downloads (such as the Playbook), your name, email and billing details. Card details are handled by our payment provider; we do not store them.
• Account data — if you sign up for a HOXE product, the details you provide to create and manage your account.
• Usage & technical data — IP address, device/browser type, pages viewed and similar information collected through essential cookies and server logs. See our Cookie Policy.

We do not knowingly collect special or sensitive categories of data through this website, and we ask you not to send them to us through our forms.

3. Why we use your data, and our lawful basis

Under the DPDP Act we process personal data either with your consent or for a recognised legitimate use (such as data you have voluntarily provided to us for a specified purpose). Specifically:

• To respond to your enquiry and contact you about your request — on the basis of the data you voluntarily provide for that purpose.
• To deliver a product or paid download you have requested, and to process payment — to perform our contract with you.
• To send you product updates, offers or newsletters — only where you have separately opted in. You can withdraw this at any time.
• To operate, secure and improve our websites and services, prevent fraud and abuse, and meet legal obligations.

4. Marketing & your choices

We send marketing communications only with your consent, and every email includes an unsubscribe link. Withdrawing consent is as easy as giving it — email us at privacy@hoxe.net or use the unsubscribe link. Withdrawal does not affect processing already carried out.

5. Who we share your data with

We do not sell your personal data. We share it only with service providers (“sub-processors”) who help us run our services, under contracts that require them to protect it:

• Vercel — Website hosting & delivery (USA / global edge).
• Supabase — Database for enquiry & lead records (Cloud (confirm region)).
• Resend — Transactional & enquiry emails (USA).
• Razorpay — Payment processing for paid downloads (e.g. the Playbook) (India).
• Google (Analytics 4, Tag Manager) — Website analytics — only where enabled and after you accept cookies (USA / global).
• Microsoft Clarity — Usage analytics & heatmaps — only where enabled and after you accept cookies (USA).

We may also disclose data where required by law, to a court, or to a government or regulatory authority acting under lawful authority, and to advisors or in connection with a business transfer.

6. International transfers

Some of our sub-processors operate outside India. Where your data is transferred abroad, we do so in accordance with the DPDP Act and only to destinations not restricted by the Government of India. If you are in the EEA or UK, additional safeguards (such as Standard Contractual Clauses) apply to transfers of your data, and you have rights under the GDPR/UK GDPR — contact us to exercise them.

7. How long we keep your data

We keep personal data only as long as needed for the purpose it was collected for, to provide our services, or to meet legal, tax and accounting obligations — after which we delete or anonymise it. You can ask us to erase your data sooner (see Your rights).

8. How we protect your data

We use reasonable technical and organisational measures — encryption in transit, access controls, hosting with reputable providers, and logging — to protect personal data. No method of transmission or storage is perfectly secure, but we work to safeguard your information and to notify you and the Data Protection Board of India of a personal-data breach where the law requires.

9. Your rights as a Data Principal

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we process it.
• Correct, complete or update inaccurate or incomplete data.
• Erase your personal data where it is no longer needed or you withdraw consent.
• Nominate another person to exercise your rights in the event of death or incapacity.
• Grievance redressal — raise a concern with our Grievance Officer (below) and, if unresolved, complain to the Data Protection Board of India.

To exercise any of these, email privacy@hoxe.net. We will verify your identity and respond within the period required by law.

10. Children

Our websites and services are intended for businesses and are not directed at children under 18. We do not knowingly process the personal data of a child without verifiable parental or guardian consent, and we do not track or target advertising at children.

11. Grievance Officer

12. Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, take reasonable steps to notify you.

13. Contact us

Questions about this policy or your data? Email privacy@hoxe.net or write to Hoxe Technologies Pvt. Ltd., TODO[Registered office address, City, State, PIN, India].