Privacy policy

1. Who we are

XKIT Labs (“XKIT Labs”, “we”, “us”) is an independent software and AI studio based in Bengaluru, India, working with teams worldwide. This policy explains what personal information we collect through this website, why we collect it, and what you can do about it. For any privacy question, email contact@xkitlabs.com.

2. What we collect

We try to collect as little as possible.

• Project enquiries. When you submit the project brief, we collect your name, email address, phone number if you choose to share it, project type, budget range if provided, and the message you write.
• Technical logs. Our hosting provider records standard request data such as IP address, browser type, pages requested, and timestamps. We use this for security, debugging, and reliability.
• Email and messaging. If you email us or message us directly, we keep the correspondence so that we can reply and keep a record of the conversation.

We do not buy contact lists, we do not sell personal data, and we do not run advertising trackers on this site.

3. Why we use it

• To reply to your enquiry and discuss a possible project, based on our legitimate interest in responding to business requests and on steps taken at your request before entering a contract.
• To deliver and support work under a client agreement, where processing is necessary to perform that contract.
• To keep the site secure and reliable, based on our legitimate interest in protecting the service and its visitors.
• To meet legal, tax, and accounting obligations, where processing is required by law.

4. How long we keep it

Enquiry details are kept for up to 24 months from our last exchange, so that we can pick up a conversation that paused. Client and financial records are kept for the period required by the applicable agreement and by law. When information is no longer needed, we delete it or anonymise it.

5. Who we share it with

We share only what is necessary with service providers that help us run the business, such as our hosting, email, CRM, and automation providers. They act on our instructions and are bound by appropriate data processing terms. We may also disclose information where required by law, a valid legal request, or to protect our rights. We do not sell personal data.

6. Cookies and analytics

This site does not set advertising or analytics cookies. Our hosting provider may use strictly necessary cookies or similar technology for security and load balancing. Because we do not use non essential cookies, you will not see a consent banner.

7. International transfers

Our providers may process information in the United States, the European Union, or other countries. Where required, international transfers rely on an adequacy decision or on appropriate safeguards such as the Standard Contractual Clauses.

8. Security

The site is served over HTTPS. We use access controls, least privilege, and reputable providers to protect information. No method of transmission or storage is completely secure, so we cannot promise absolute security.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal information, to object to certain processing, or to withdraw consent. To exercise a right, email contact@xkitlabs.com. We aim to respond within 30 days and may ask for information to confirm your identity. You also have the right to complain to your local data protection authority, or to the relevant authority in India.

10. Children

This site is aimed at businesses and is not directed at children under 16. We do not knowingly collect information from children.

11. Changes

We may update this policy as the business or the law changes. The date at the top of this page shows the latest version. Material changes will be made clear on the site.

12. Contact

Questions, requests, or concerns: contact@xkitlabs.com.