Last Updated: December 2025
1. Introduction
This Privacy Policy explains how Xenith Innovations (“we,” “us,” or “our”) collects, uses, stores, processes, discloses, and protects personal data and business information when you visit our website, use our applications or platforms, or engage with any of our services globally, including in India, the United Kingdom, the Middle East, and the United States. We are committed to safeguarding your privacy and ensuring that all data is handled lawfully, transparently, and securely in accordance with applicable data protection and privacy laws across these regions.
2. Scope of This Privacy Policy
This Privacy Policy applies to all visitors, clients, prospects, partners, vendors, and users who interact with us digitally, contractually, or operationally. It covers all services offered by us, including enterprise application development such as EMS, HMS, ERP and similar systems, mobile application development, website development, Agentic AI and chatbot solutions, digital marketing and AI-driven SEO services, and IT consulting and cost optimization services.
3. Information We Collect
We may collect personal information such as your name, email address, phone number, company name, job title, business address, country, and other contact details voluntarily shared through inquiry forms, emails, calls, contracts, or service engagements. Where applicable, we may also collect login credentials or user identifiers for applications, dashboards, or client portals developed or managed by us.
In the course of providing IT and consulting services, we may collect and process business and professional information including project requirements, technical specifications, contracts, proposals, invoices, system documentation, credentials, internal reports, intellectual property, and other business records strictly for service delivery purposes.
We may also collect and process media and content such as images, videos, logos, brand assets, creative materials, design references, and marketing content shared by clients for development, automation, AI, branding, or promotional activities.
Additionally, we automatically collect certain technical and usage information when users access our website or digital platforms. This may include IP address, browser type, device information, operating system, referring URLs, pages visited, session duration, and interaction patterns, which help us improve performance, security, and user experience.
We do not intentionally collect sensitive personal data such as health, biometric, religious, or political information. If such information is inadvertently shared, it will be processed only as necessary and protected using enhanced safeguards.
4. How We Use the Information
The information collected is used to provide, operate, manage, and improve our services; communicate with clients and respond to inquiries; design, develop, test, deploy, and maintain software solutions; deliver AI, chatbot, automation, digital marketing, SEO, and consulting services; comply with legal and regulatory obligations; manage billing and contractual relationships; prevent fraud or misuse; and protect systems, data, and intellectual property.
5. Legal Basis for Processing
Where applicable under GDPR, UK GDPR, and similar regulations, we process personal data based on lawful grounds such as user consent, contractual necessity, compliance with legal obligations, and our legitimate business interests, provided such interests do not override individual rights and freedoms.
6. AI, Agentic AI & Chatbot Data Processing
For Agentic AI and chatbot solutions, data is processed strictly in accordance with client instructions and contractual terms. Client data is not used to train public or generalized AI models unless explicitly authorized in writing. AI interaction logs, prompts, and outputs may be retained temporarily for quality assurance, debugging, optimization, audit, and security purposes and are protected through strict access controls and confidentiality measures.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to ensure proper website functionality, analyze traffic and usage patterns, enhance user experience, and support marketing and SEO analytics. Users may manage or disable cookies through browser settings, though doing so may affect website functionality.
8. Data Sharing and Disclosure
We do not sell personal data. Information may be shared only with trusted third-party service providers such as cloud hosting providers, analytics platforms, communication tools, payment gateways, and CRM systems on a need-to-know basis. All third parties are contractually bound by confidentiality and data protection obligations. Data may also be disclosed where required by law, court order, or regulatory authority, or in connection with a merger, acquisition, or business restructuring, subject to lawful safeguards.
9. International Data Transfers
As a global IT services provider, data may be transferred and processed across borders, including between India, the United Kingdom, the Middle East, and the United States. We ensure appropriate technical, contractual, and organizational safeguards are in place, including data transfer agreements and standard contractual clauses where required.
10. Data Retention
We retain personal and business data only for as long as necessary to fulfill the purposes for which it was collected, comply with contractual and legal obligations, resolve disputes, and enforce agreements. Upon termination of services or upon valid request, data may be securely deleted, anonymized, or returned unless retention is legally required.
11. Data Security
We implement industry-standard technical and organizational security measures, including encryption of data in transit and at rest, role-based access controls, system monitoring, regular security audits, firewalls, intrusion detection systems, and confidentiality obligations for employees and partners. While we strive to protect data, no system can be guaranteed to be completely secure.
12. Your Rights
Depending on your jurisdiction, you may have rights to access your personal data, request correction, deletion, or restriction of processing, object to processing, withdraw consent, request data portability, and lodge a complaint with a relevant data protection authority. Requests may be submitted using the contact details below.
13. Children’s Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children and will delete such data if identified.
14. Third-Party Links
Our websites and applications may contain links to third-party websites or services. We are not responsible for their privacy practices, content, or security, and users are encouraged to review their policies independently.
15. Regional Legal Compliance
This Privacy Policy is designed to comply with major privacy regulations, including the Information Technology Act, 2000 and Digital Personal Data Protection Act of India, the UK GDPR and Data Protection Act 2018, applicable Middle Eastern data protection and cybersecurity laws, and relevant United States federal and state privacy laws, including the CCPA where applicable.
16. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. Any changes will be effective upon posting the revised policy with an updated effective date. Continued use of our services constitutes acceptance of the updated policy.
17. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact:
Xenith Innovations
Email: business@xenithinnovations.com
By accessing our website or using our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.