Privacy Policy

Effective date: 17 October 2026

In short

• We collect what you give us — enquiries, orders and support requests — and the basic technical data needed to run the Website securely.
• We use it to answer you, to deliver and support your licence, and to meet our legal obligations.
• We do not sell your data, we do not use advertising trackers, and we never ask for your trading password.
• You can ask to see, correct or delete your data, or withdraw your consent, at any time.

1. Who we are

X-STOX Technologies (“X-STOX”, “we”, “us”) of Pune, Maharashtra, India operates x-stox.com and decides how the personal data described here is used. Under India’s Digital Personal Data Protection Act, 2023, we are the “Data Fiduciary” for that data. This policy explains what we collect, why, who we share it with, how long we keep it, and your rights.

For any question about your personal data, contact us at support@x-stox.com or +91 9373001963 (phone) or WhatsApp.

2. The personal data we collect

2.1 When you contact us or send a project brief

• your name, email address, phone and WhatsApp number, company and country;
• what you need, your budget band and timeline, and anything you write in your message or brief;
• the page you sent it from, the page that referred you, and any campaign tags in the link you followed (for example “utm_source”);
• your IP address and browser type, which we use to stop spam and abuse.

2.2 When you subscribe to updates

Your email address, your name if you give it, and a record of when you confirmed your subscription.

2.3 When you buy and use a licence

• your name, email address and billing details, including a GST number for business purchases in India;
• order and payment references from our payment provider — we do not receive or store your full card details; if you pay in a digital asset, the transaction ID and the paying wallet address;
• your licence key, the product, and the trading account number or numbers the licence is activated on;
• where a product checks its licence online: the licence key and trading account number it sends, and the time of the check.

2.4 When we install or support software

The broker name, server and trading account number you give us, and the messages, screenshots and log files you send. We never ask for your trading or investor password. Please do not send them.

2.5 When you browse the Website

Our hosting provider records technical logs — IP address, browser, pages requested and time — for security and operations. The light or dark theme you choose is stored in your own browser and is not sent to us.

2.6 From brokers we introduce you to

If you open an account with a broker through our introducing-broker link, the broker may share with us details of that account — such as the account number, name, country and trading volume — so that our commission can be calculated. The broker’s own privacy policy governs what it collects from you.

We do not intentionally collect passwords, financial account credentials, government ID numbers or health data. Please do not send them to us.

3. Why we use it

• to answer your enquiries, prepare quotes and specifications, and follow up on them;
• to process orders, issue invoices and licence keys, deliver downloads and activate licences;
• to provide installation, support and software updates, and to send service messages about your licence, such as security or compatibility notices;
• to detect and prevent fraud, spam, licence misuse and attacks on the Website;
• to send newsletters and product news — only if you subscribed, and you can unsubscribe at any time;
• to understand, in aggregate, how the Website is used, and to improve it;
• to meet our legal, tax and accounting obligations, and to establish or defend legal claims.

We use your data with your consent — for example when you submit a form or subscribe — or where the law allows us to without separate consent, such as completing a purchase you asked for or complying with the law. You can withdraw your consent at any time (see section 8); withdrawal does not affect what was done before it.

4. What we do not do

• We do not sell or rent your personal data.
• We do not use advertising or tracking cookies, and we do not build marketing profiles of visitors.
• We have no access to your trading account or your funds. Our software runs on your terminal, under your control.
• We do not share your personal data with brokers.

5. Who we share it with

Only as needed for the purposes above, with:

• our service providers — website hosting (Vercel), database and file storage (Supabase), our email delivery service, and payment providers or gateways when you pay — each of which handles data on our instructions;
• WhatsApp (Meta), when you choose to message us on WhatsApp — WhatsApp’s own privacy policy applies to that service;
• professional advisers such as accountants and lawyers, under duties of confidentiality;
• authorities, courts or regulators where the law requires it, or where needed to protect our rights or the safety of others;
• a buyer of or successor to our business, under the same protections.

6. Transfers outside India

Some of our service providers store or process data outside India, for example in the United States or the European Union. We use established providers bound by security and confidentiality obligations, and transfer data only as Indian law permits.

7. How long we keep it

• Enquiries and project briefs: for as long as we are in contact with you about them; then deleted or anonymised once no longer needed. We review stored enquiries at least once a year.
• Licence, order and support records: for as long as your licence is active, and afterwards for as long as we need them to support you or to meet legal obligations.
• Invoices and accounting records: for the period Indian tax and accounting law requires — generally six to eight years.
• Newsletter: until you unsubscribe.
• Security logs: kept by our hosting provider for a limited period, and longer only where needed to investigate an incident or where the law requires it.

8. Your rights

Under the Digital Personal Data Protection Act, 2023, you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to erase it, where we are not required by law to keep it;
• withdraw your consent, as easily as you gave it;
• nominate another person to exercise these rights for you if you die or become unable to;
• raise a grievance with us — and, if you are not satisfied with our answer, complain to the Data Protection Board of India.

To use any of these rights, write to support@x-stox.com or message +91 9373001963 (phone) or WhatsApp. We may need to confirm your identity first. We respond within 30 days, and in any case within the time Indian law allows. To stop newsletters, use the unsubscribe link in any of them, or tell us.

9. Security

We protect your data with reasonable security safeguards, including encrypted connections (HTTPS), access limited to the people who need it, secured administrator sign-in, and licence keys that cannot be forged without our server’s secret. No system is perfectly secure. If a personal-data breach affects you, we will tell you, and the Data Protection Board of India, as the law requires.

10. Children

Our products and the Website are for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

11. Cookies and similar technology

The public Website does not use advertising or analytics cookies. It stores your light or dark theme choice in your browser’s local storage, and administrators who sign in receive a session cookie that the sign-in needs. If we add analytics in future, we will update this policy first and ask for your consent where the law requires it.

12. Messages from us

We send the service emails needed to deliver and support what you bought. We send newsletters and product news only if you subscribed. If you contact us on WhatsApp or by phone, we reply on the same channel; we do not add you to broadcast lists without your agreement.

13. Changes to this policy

We will update this policy when our practices change; the effective date at the top shows the latest version. If a change materially affects how we use your data, we will tell you by email where we have your address.

14. Grievance Officer and contact

Grievance Officer, X-STOX Technologies, Pune, Maharashtra, India
Email: support@x-stox.com
Phone / WhatsApp: +91 9373001963 (phone) or WhatsApp