Privacy Policy

Last updated: 2026-08-05

We take your privacy seriously. In one sentence: we do not sell or rent your personal data to third parties, ever. This Privacy Policy explains what information we collect when you use this website and buy our Apps, how we use it, and the rights you have under the Digital Personal Data Protection Act, 2023 (India) and other applicable law.

1. Who is responsible for your data

Xyzzy Apps LLP ("we", "us") is the Data Fiduciary for the personal data we collect through this website. We are located at Flat 301, Malani Icon, Hyderabad, Telangana - 500080, India, and can be reached at support@xyzzyapps.link.

2. What we collect

When you make a purchase we collect the information needed to complete and deliver your order:

- Your name and email address (provided at checkout);

- Your billing address and country;

- A record of what you purchased, the amount, and the currency;

- The Payment Gateway Checkout Session identifier for your order.

We do not collect or store your full payment card details. Card numbers, CVV, and related payment data are collected and processed directly by our payment gateway, Payment Gateway, on their PCI DSS-compliant infrastructure.

We also collect basic technical information such as your IP address, browser type, device, and the pages you visit, to operate, secure and improve the website. Some of this is collected through Google Analytics (see Cookies below).

3. How we use your data

We use your personal data to:

- Process your order and deliver your licences and download links;

- Send you order confirmations and respond to support requests;

- Operate, secure, and improve the website;

- Comply with legal and regulatory obligations, including tax record-keeping;

- With your consent, send you product news and offers (you can opt out at any time).

4. Legal basis

We process your data for the performance of the contract with you (delivering what you bought), to comply with legal obligations (such as tax and accounting records), and on the basis of our legitimate interest in operating and securing our website. Where consent is required by law, we will ask for it separately.

5. Sharing with third parties

We share personal data only as necessary to run the store:

- Payment Gateway processes payments and sends payment receipts. Their privacy practices are governed by Payment Gateway's Privacy Policy;

- Google Analytics processes usage data (pages viewed, device, browser and approximate location) on our behalf; Google's practices are governed by Google's Privacy Policy;

- Our hosting provider and, if applicable, our email provider, process data on our behalf under confidentiality obligations.

We never sell or rent your personal data, and we never share it for advertising purposes.

6. International transfers

Payments are processed by Payment Gateway, which may transfer payment data outside India in accordance with applicable law and Payment Gateway's data protection safeguards. By purchasing, you consent to such processing as needed to complete your payment.

Analytics data may also be processed outside India by Google in accordance with Google's data protection safeguards.

7. Cookies

We use an essential session cookie to keep your shopping cart and to protect forms from cross-site request forgery. We also use Google Analytics, which sets cookies (for example _ga, _ga_*) to measure how the site is used. We do not use advertising cookies. See our Cookie Policy for details.

8. Retention

We retain order records for as long as needed to provide support, honour refunds, and comply with tax and accounting law (typically at least the period required by Indian tax law). Session data is retained only for the life of your browsing session.

9. Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

- Access your personal data and obtain a summary of processing;

- Request correction of inaccurate or incomplete data;

- Request erasure of your data, subject to legal retention obligations;

- Withdraw consent where processing is based on consent;

- Grieve and seek redress in respect of any breach.

To exercise any of these rights, contact our Grievance Officer at support@xyzzyapps.link. We will respond within the time frames required by law.

10. Security

We use industry-standard measures, including HTTPS encryption, to protect data in transit, and we restrict access to personal data to those who need it to perform their duties. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities if a breach occurs and the law requires it.

11. Children

Our website and Apps are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available at https://xyzzyapps.link/policies/privacy-policy. Material changes will be highlighted on the website.

13. Contact and grievance

For privacy questions or to exercise your rights, contact our Grievance Officer: Harsha M, support@xyzzyapps.link. Full details are on the Grievance Redressal page.