Privacy Policy

1. Overview:

This Privacy Policy explains how Xecreators IT Services Private Limited (“Xecreators”, “we”, “us”, or “our”) collects, uses, and shares information from you (“you”, “your”, “Client” or “Customer”) when you use our website, products, and services (“Services”). The data controller of your personal information is Xecreators IT Services Private Limited.

2. Information We Collect

We may collect the following types of information from you:

Registration and Account Data: When you register an account or purchase services/products, we collect the information you provide, such as your name, company name, address, telephone number, and email address.
Third-Party Account Data: If you link our Services with third-party accounts, we may collect authentication tokens and related data from those accounts.
Correspondence Data: If you contact us via support or other communication channels, we collect details of your correspondence.
Transaction Data: We collect information regarding your orders and transactions. Financial details are not stored by us but by our trusted third-party payment processors (e.g., 2Checkout, Verifone, local banks). We may retain relevant transactional information obtained via these processors.
Website Usage Data: When you visit our website, we may collect your IP address, the time and duration of your visit, and the pages you view. We may link this data to your personal information to improve your experience.

3. How We Use Your Information

Your personal data is used only for the following purposes:

To process transactions and fulfill orders.
To provide customer support and respond to your inquiries.
To operate, maintain, improve, and expand our Services.
To understand how you use our Services, helping us enhance your experience.
For fraud detection, prevention, and compliance with legal obligations, involving trusted third-party services where necessary.
To enforce our Terms of Service and investigate abuse or violations.
To comply with regulatory reporting obligations (e.g., ARIN, ICANN, PTA).
To communicate special offers or service updates, with your consent where required.
To place cookies or similar technologies on your device to identify repeat visits and personalize your experience.

4. Sharing of Your Information

We do not sell your personal data. We may share your information only as necessary:

To comply with legal processes, such as court orders, subpoenas, or law enforcement requests.
With potential business partners in cases of mergers, acquisitions, insolvency, or asset sales.
With trusted third-party service providers who support our operations (e.g., payment processors, hosting providers), under strict confidentiality agreements.
With fraud detection and prevention services.
When necessary to protect or enforce the rights of Xecreators, its users, or others.

5. Legal Basis for Processing

We process your personal data under the following legal grounds:

To fulfill contractual obligations with you (e.g., service delivery, billing).
To comply with legal and regulatory requirements.
Based on legitimate interests necessary for operating our business.
With your consent, for marketing communications or other optional purposes. You may withdraw consent at any time.

6. Data Storage and Transfers

Your data is stored securely at our offices in Pakistan and on servers located in multiple global locations, including the USA and Europe. Processing may occur outside Pakistan by our staff or third-party providers. By using our Services, you consent to such international data transfers.

7. Data Security

Xecreators employs industry-standard security measures to protect your personal data against unauthorized access, loss, or misuse. However, no internet-based system can be guaranteed 100% secure.

8. Data Retention

We retain your personal data only as long as necessary to meet legal, tax, and accounting obligations, or to resolve disputes and enforce agreements. After the retention period, your data will be deleted or anonymized, except where backups require isolation from processing.

9. Your Rights

You have the right to:

Access and update your personal information via your client area or by contacting support. Identification may be required for certain changes.
Request an export of your personal data by submitting a support ticket.
Request deletion of your data if you have no active services, with exceptions including fraud investigations, legal requirements, or policy enforcement cases where data retention is necessary.