2. Scope of this Privacy Policy2. Scope of this Privacy Policy

This Privacy Policy applies to the personal data collected by Xneuronz AI through the use of our website, services, and interactions.

It includes data collected from:

• Visitors to our website.
• Clients and users who engage with our services.
• Partners and affiliates in the AEC industry.
• Individuals who contact us for inquiries or support.

3. Data We Collect

We may collect various types of personal data depending on your interaction with our services.

The categories of data we collect include:

A. Personal Identification Information

• Full name
• Email address
• Phone number
• Mailing
• address
• Company name and job title
• Nationality and other demographic information.

B. Technical and Usage

• Data
• IP address
• Browser type and version
• Device information
• Operating system
• Interaction data: Pages viewed, clicks, browsing behavior, and time spent on our site.
  Cookies and tracking technologies (see our Cookie Policy for more details).

C. Transactional Data

• Payment information (for services purchased).
• Billing address and transaction history.

D. Marketing Data

• Preferences for receiving marketing communications.
• Responses to surveys and feedback forms.

E. Professional Data

• Architectural, engineering, and construction-related data for the purposes of delivering our services in the AEC industry.
• We collect only the data that is necessary to provide our services, ensure compliance with legal obligations, or improve your experience with our platforms.

4. Purpose of Data Processing

We process personal data for the following purposes, ensuring we do so lawfully and fairly:

A. Service Provision

• To create and manage your account on our platform.
• To deliver customized AEC solutions, including real-time architectural and engineering data.
• To provide technical support and customer service.

B. Communication

• To send important updates regarding services, terms, and policies.
• To respond to your inquiries and support requests.

C. Marketing and Personalization

• To send newsletters, promotional materials, and industry updates (with your consent).
• To tailor content and suggestions based on your usage patterns and preferences.

D. Transaction Management

• To process payments, invoices, and related transactional services.

E. Legal Compliance and Security

• To comply with legal obligations, including tax and regulatory requirements.
• To detect and prevent fraud or security breaches.

F. Research and Development

• To improve our services by analyzing usage data and industry trends.
• We ensure that the processing of your data is based on a legal basis, such as contractual necessity, legitimate interests, legal obligations, or your consent where required by GDPR and DPDP.

5. Legal Basis for Processing (GDPR)

Under GDPR, the legal bases for processing your personal data include:

• Consent: When you provide explicit consent for certain types of processing, such as receiving marketing materials.
• Contractual Necessity: When data processing is essential to fulfill a contract with you.
• Legal Obligation: To comply with applicable laws and regulations.
• Legitimate Interest: When processing is necessary for our legitimate business interests (e.g., improving services), provided it does not override your rights.

6. Consent Management

A. Obtaining Consent

• For certain activities, such as marketing, we rely on your consent before processing your personal data. Consent will always be obtained in a clear and specific manner, and you have the option to grant or refuse consent.

B. Withdrawing Consent

• You can withdraw your consent at any time by contacting us at privacy@xneuronz.com. Upon withdrawal, we will cease processing your personal data for the purposes based on consent.

C. Opting Out

• If you wish to stop receiving marketing communications, you can opt-out by following the unsubscribe link in our emails or by contacting us directly.

7. User Rights

A. GDPR User Rights

Under GDPR, individuals in the European Economic Area (EEA) have the following rights:
Right to Access: Request access to the personal data we hold about you.
Right to Rectification: Request the correction of inaccurate or incomplete personal data.
Right to Erasure: Request the deletion of personal data when it is no longer needed for the purposes for which it was collected.
Right to Restrict Processing: Request that we limit the processing of your data in specific cases.
Right to Data Portability: Request that your personal data be transferred to another service provider.
Right to Object: Object to the processing of your personal data for direct marketing or based on legitimate interests.

B. DPDP User Rights

Under the DPDP Act, individuals in India have similar rights, including:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Correction: You have the right to correct inaccurate or outdated data.
• Right to Erasure: Under specific circumstances, you may request the deletion of your data.
• Right to Grievance Redressal: You can file a grievance if you believe your data rights have been violated.
  To exercise any of these rights, please contact our Data Protection Officer at privacy@xneuronz.com.

8. Data Security Measures

We employ robust technical and organizational measures to protect your personal data, ensuring its confidentiality, integrity, and availability.

These measures include:

• Encryption of sensitive data.
• Access Control: Limiting access to personal data to authorized personnel only.
• Data Backups: Regular backups to protect against data loss.
• Firewalls and Monitoring: Continuous monitoring of our systems to detect potential breaches.
• In the event of a data breach, we will notify the affected individuals and the relevant authorities as required by law.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, or contractual obligations.

• Account Data: Retained for the duration of your account with us.
• Transactional Data: Retained for the duration required for tax and legal purposes.
• Marketing Data: Retained until you withdraw consent or opt out of communications.
• Once the retention period expires, personal data will be securely deleted or anonymized.

10. Third-Party Sharing

We do not sell or trade your personal data. However, we may share your data with the following third parties under strict conditions:

• Service Providers: We share data with third-party vendors who assist us in delivering services, such as payment processors and cloud hosting providers. These parties are bound by data protection agreements.
• Legal Obligations: We may disclose data to comply with a court order or legal obligation.
• Business Transfers: In case of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.
  We ensure that any third parties who process personal data on our behalf adhere to data protection standards and comply with GDPR and DPDP requirements.

11. Cross-Border Data Transfers

A. GDPR

• For individuals within the EEA, we ensure that personal data transferred outside the EEA is protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) or Binding Corporate Rules (BCRs), ensuring an adequate level of data protection.

B. DPDP

• For individuals in India, if personal data is transferred outside of India, we ensure that the recipient country offers adequate data protection as recognized by the Indian government, or we use contractual clauses to protect the data.

12. Grievance Redressal

If you have any complaints, concerns, or questions about this Privacy Policy or the way we handle your data, please contact our Data Protection Officer:
Email: privacy@xneuronz.com
Address: NO 9, 2nd Floor, 27th Main, 100 Feet Ring Rd, Motors, BTM 1st Stage, Bengaluru, Karnataka 560068
You also have the right to lodge a complaint with the Data Protection Authority (in case of GDPR) or the Data Protection Board of India (in case of DPDP) if you believe your data rights have been violated.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time in response to legal, technical, or business developments. We will notify you of any changes by updating the “Last Updated” date at the top of this policy and, if necessary, providing more prominent notice (e.g., via email or pop-up notifications on our website).