Privacy Policy

We collect several types of information from and about users of our website and services:

Personal Information You Provide

• Contact information: Name, email address, phone number, company name when you fill out our contact form or subscribe to our newsletter.
• Account information: Username, password, and profile details if you create an account with us.
• Payment information: Billing address and payment details (processed securely via Stripe, PayPal, or bank transfer — we do not store credit card numbers).
• Communications: Messages, feedback, and support requests you send to us.

Information Collected Automatically

• Usage data: Pages visited, time spent, referral source, browser type, and device information.
• IP address and location: General geographic location based on your IP address.
• Cookies and similar technologies: See our Cookie Policy for details.

We use the information we collect for the following purposes:

• To provide, operate, and maintain our services
• To process transactions and send related information (invoices, receipts, notifications)
• To respond to your inquiries and provide customer support
• To send administrative information (updates, security alerts, policy changes)
• To send marketing communications with your consent (which you can opt out of at any time)
• To improve our website, services, and user experience
• To detect, prevent, and address technical issues or fraudulent activity
• To comply with legal obligations

If you are located in the European Economic Area (EEA), we rely on the following legal bases to process your personal information:

• Consent: When you have given clear consent (e.g., newsletter subscription, cookie acceptance).
• Contract: When processing is necessary for a contract with you (e.g., providing services you purchased).
• Legal obligation: When we must comply with legal requirements (e.g., tax records).
• Legitimate interests: When we have a legitimate business interest that does not override your rights (e.g., analytics, security).

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

• Service providers: Trusted third-party services that help us operate (hosting, payment processing, email delivery, analytics). All are bound by confidentiality agreements.
• Legal requirements: When required by law, court order, or government request.
• Business transfers: In the event of a merger, acquisition, or sale of assets.
• With your consent: When you explicitly agree to share information.

Third-Party Services We Use

• Google Analytics: Website analytics (anonymized IPs)
• Google Ads: Advertising and remarketing
• Stripe / PayPal: Payment processing
• Cloudflare: Content delivery and security
• Email providers: Transactional and marketing emails

Under GDPR and similar data protection laws, you have the following rights:

• Right to access: Request a copy of personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data.
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Request your data in a machine-readable format.
• Right to object: Object to certain types of processing (e.g., direct marketing).
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at admin@xixasoft.com. We will respond within 30 days.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Contact form submissions: Retained for 2 years for support purposes.
• Customer/client records: Retained for 7 years to comply with tax and accounting laws.
• Newsletter subscribers: Retained until you unsubscribe.
• Website analytics: Anonymized data retained for 26 months.
• Marketing data: Retained until you withdraw consent.

You can request deletion of your data at any time by contacting us.

We implement appropriate technical and organizational measures to protect your personal information:

• SSL/TLS encryption for all data transmissions
• Secure hosting with regular security updates
• Access controls and authentication for staff
• Regular security audits and vulnerability testing
• Encrypted database storage for sensitive information
• Backup and disaster recovery procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Our services are operated from Pakistan, but we serve clients globally. If you access our services from outside Pakistan, please note that your information may be transferred, stored, and processed in Pakistan and other countries where our service providers operate.

When we transfer personal data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Your explicit consent for the transfer

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

We use cookies and similar tracking technologies to enhance your experience. For detailed information, please read our Cookie Policy.

You can control cookies through your browser settings and our cookie consent banner. However, disabling certain cookies may affect the functionality of our website.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email if you have provided one
• Post a prominent notice on our website

We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

For urgent data protection concerns, we aim to respond within 72 hours.