COMPLIANT WITH DIGITAL PERSONAL DATA PROTECTION ACT, 2023 (DPDPA)

Privacy Policy

XAVIRGIN (OPC) PRIVATE LIMITED

Effective Date: November 17, 2025 • Last Updated: November 21, 2025

DATA FIDUCIARY (DPDPA 2023)

XAVIRGIN (OPC) PRIVATE LIMITED

CIN: U62090KL2025OPC098558 • PAN: AAACX6007D

Registered Office: 8/372, Ground Floor, Valiyaparambil, Edathala, Aluva, Ernakulam, Kerala, India - 683561. We act as the Data Fiduciary for all personal data collected across our websites, internships, courses, and client services.

STATUTORY GRIEVANCE OFFICER

Savio Babu (Managing Director)

Email: contact@xavirgin.com
Phone: +91 73560 25907

We acknowledge all data protection grievances within 24 hours and resolve them within statutory timelines prescribed under Indian law.

1. Information We Collect

Personal Data You Provide: Full name, email address, phone number, resume/CV, academic and portfolio details (for internship and cohort applications), and billing details (for commercial or paid programs).
Automatically Collected Telemetry: IP address, browser type, device metadata, session cookies, and anonymized interaction analytics.
Communication Records: Inquiries submitted via our AI assistant, web forms, WhatsApp Business desk, or official email channels.

2. How We Use Your Data

To deliver software engineering services, manage remote internship cohorts, issue verifiable certificates, and execute client projects.
To communicate technical updates, cohort schedules, newsletters (with explicit consent), and respond to service inquiries.
To improve our web architecture, security posture, and AI models using strictly anonymized metadata.
To comply with statutory tax, audit, and regulatory obligations under Indian law.

3. Data Sharing & Disclosure

We never sell or rent your personal data to third-party data brokers or advertisers.
Data is shared strictly with essential infrastructure processors (such as AWS, Google Cloud, and authorized payment gateways) bound by data processing agreements.
Disclosed only when mandated by a lawful order from a competent regulatory or judicial authority in India.

4. Your Rights as a Data Principal (DPDPA 2023)

Right to Access Request a summary of personal data processed by us and the processing activities undertaken.

Right to Correction & Erasure Request correction of inaccurate records or erasure of personal data no longer required for its specified purpose.

Right to Withdraw Consent Withdraw your consent for optional communications or processing at any time with ease.

Right to Nominate & Redressal Nominate an individual to exercise your rights in the event of incapacity, and seek swift grievance redressal.

5. Infrastructure & Data Security

We utilize industry-standard TLS/SSL encryption in transit, hardened Linux/PostgreSQL cloud servers (preferring Indian data centers such as AWS Mumbai Region), strict role-based access controls, and regular security audits to protect your data against unauthorized access or alteration.

6. Cookies & Session Management

We use essential HTTP-Only session cookies (`client_auth_id`) to secure form submissions against cross-site abuse, alongside anonymized Google Analytics (`G-N54HD40NR3`) to measure site performance. You may manage cookie preferences through your browser settings.

7. Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of the Republic of India. Any dispute shall fall under the exclusive jurisdiction of the courts in Ernakulam, Kerala, India.