Privacy Policy

Last updated: June 7, 2026

1. Who We Are

Xaonic is a web development company that builds MVPs, SaaS platforms, Shopify apps, and custom APIs for startups and businesses. Our website is xaonic.com. For any privacy-related questions, contact us at info@xaonic.com.

2. What Data We Collect

We collect only the minimum data necessary to operate our website and deliver our services:

  • Contact form submissions — name, email address, and message content when you reach out to us.
  • Email correspondence — emails you send us and our replies.
  • Usage data — anonymised analytics (page views, referral source, device type) via Google Analytics. No personally identifiable information is sent to Google Analytics without your consent.

We do not collect payment card details directly — payments are handled by third-party processors subject to their own privacy policies.

3. How We Use Your Data

We use the data we collect to:

  • Respond to your enquiries and provide the services you requested.
  • Manage ongoing project communication and deliverables.
  • Understand how our website is used so we can improve it (anonymised analytics only).
  • Comply with legal obligations.

We do not use your data for automated decision-making or profiling, and we do not sell your data to any third party.

4. Legal Basis for Processing (GDPR)

For individuals in the European Union and European Economic Area, we process personal data on the following legal bases:

  • Legitimate interests — responding to enquiries and operating our business.
  • Contract performance — processing data necessary to deliver services under a client agreement.
  • Consent — for analytics cookies, where required.
  • Legal obligation — where we are required to retain records by law.

5. Cookies

Our website uses cookies for analytics purposes (Google Analytics). These cookies collect anonymised information about how visitors use the site. No personally identifiable information is stored in cookies.

You can disable cookies at any time through your browser settings. Doing so will not affect your ability to view or use the website.

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with trusted third-party service providers strictly to operate our business:

  • Google Analytics — anonymised website usage statistics.
  • Cloudflare — infrastructure and security for our API and website.
  • Email providers — to send and receive project-related communications.

Each provider is bound by their own privacy policy and, where applicable, by data processing agreements that comply with GDPR requirements.

7. Data Retention

We retain personal data only for as long as necessary. Contact enquiries are kept for up to 2 years. Client project data (emails, contracts, deliverables) is retained for up to 5 years for legal and accounting purposes, after which it is securely deleted.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — request deletion of your data where there is no legal reason to retain it.
  • Portability — receive your data in a machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email us at info@xaonic.com. We will respond within 30 days. EU/EEA residents also have the right to lodge a complaint with their local data protection authority.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data in transit is encrypted via HTTPS. Access to client data is restricted to team members who need it to deliver the project.

10. International Transfers

Xaonic is based in India. If you are located in the EU/EEA, your data may be transferred to and processed in India. Where required by GDPR, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect your data during any such transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at info@xaonic.com.