Privacy policy

Last updated: Draft, 29 September 2026

1. Who we are

WebXSentry is a division of Aarav Infotech India Pvt. Ltd. ("we", "us"), a company registered in India, with offices in Mumbai and Bhubaneswar. We are responsible for the personal information described in this policy. Registered office: 120, The Summit Business Bay, Andheri (East), Mumbai, Maharashtra 400093, India. CIN: U74120MH2015PTC264432.

Questions about privacy, or requests about your information: hello@webxsentry.com.

2. What this policy covers

This policy covers people who visit webxsentry.com, people who contact us, and the people we deal with at our clients. When we look after a client's website, we may also handle personal information that belongs to the client's own customers (for example, contact form entries or orders). We handle that information only on the client's instructions and to provide the service, under our agreement and any confidentiality agreement with the client; the client remains responsible for it.

3. What we collect

When you send us a request. What you type into our form: what you need, your name, your work email, your phone number with its country code, your website address, the plan you are interested in and your message. If you email or call us, we keep that correspondence.

Automatically, when you use the site.

• Your IP address, browser type and the page you sent the form from, which we use to stop spam and abuse.
• Your approximate country, provided by our security and delivery provider Cloudflare.
• How you first found us (for example, an ad campaign, search engine or referring website), only if you allow optional cookies where consent is required. See our cookie policy.
• How visitors use the site (pages viewed, time on site), only if we enable analytics and, where consent is required, you accept it.

When you become a client. Your account and billing contact details in our client portal, your invoices and payment history, and the requests and messages you send us. Card and PayPal payments are handled by Stripe or PayPal at checkout; we do not see or store your full card number.

Access to your website. To look after your site we need logins for it and, often, for your hosting, domain and related services. You share these through the secure vault in your client area, never by email or chat, and we use them only to provide the service.

4. How we use it

• To reply to your request by email or phone and tell you which plan fits.
• To provide our services: onboarding, maintenance, requests, monitoring, backups, reports and support.
• To bill you and keep accounting records.
• To keep the site and our systems secure, including spam and fraud prevention.
• To understand which pages and ads bring us enquiries, where you have allowed it.
• To meet legal obligations, such as tax and accounting rules.

We do not sell your personal information. We do not use it for automated decisions that have legal or similarly significant effects on you.

5. Legal bases (UK and European visitors)

Where UK or EU data protection law applies, we rely on: taking steps at your request before a contract, and performing our contract with you; our legitimate interests in replying to enquiries, running and securing our business and measuring it in ways that need no cookies; your consent for optional cookies, which you can withdraw at any time; and legal obligations.

6. Who we share it with

Our team, which is based in India, uses your information to provide the service. Our client records and lead system are operated by us on our own servers. We also use service providers who process information on our behalf, under contract:

• Website hosting, and email delivery for our messages to you.
• Cloudflare, for security, spam protection and fast delivery of the site.
• Google, for site analytics and ad measurement, only where enabled and, where required, with your consent.
• Stripe and PayPal, when you pay through the client portal.
• Professional advisers, such as accountants and lawyers, where needed.

We may also disclose information when the law requires it, to protect our rights or the safety of others, or as part of a sale or restructuring of our business, in which case this policy continues to apply.

7. International transfers

We are based in India, so information you send us is processed there, under the protections described in this policy. Some of our service providers process information in other countries, including the United States. Where we pass UK or European personal information to them, we rely on the safeguards in their data processing terms, such as the European Commission's standard contractual clauses and the UK International Data Transfer Addendum.

8. How long we keep it

• Enquiries: kept so we can follow up with you and keep a record of our conversations. If you would like yours deleted, email us and we will delete it.
• Client account records and reports: for the life of your plan plus 24 months.
• Your website data and backups held by us: deleted 30 days after you cancel. Your latest backup and report history are yours on request before then.
• Invoices and payment records: as long as tax and accounting law requires.

9. How we protect it

You share and manage credentials through a secure vault in your client area, never by email, chat or spreadsheet. Every staff member with access to client systems is under a signed confidentiality agreement. Backups are encrypted and stored separately from your hosting. The site uses encrypted connections (HTTPS). No system is perfectly secure, but we work to the standard we describe on our security page.

10. Your rights

Wherever you are, you can ask us for a copy of the personal information we hold about you, and ask us to correct it or delete it. Email hello@webxsentry.com. We reply within 30 days and may need to confirm your identity first.

• UK and EU: you also have rights to object to or restrict our use, to data portability, and to withdraw consent at any time. You can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority, though we would appreciate the chance to help first.
• California: you have the right to know what we collect, to delete it, to correct it, and not to be treated differently for using these rights. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
• Canada and Australia: you can access and correct your information, and complain to the Office of the Privacy Commissioner of Canada or the Office of the Australian Information Commissioner.

11. Children

Our services are for businesses. The site is not aimed at children, and we do not knowingly collect information from anyone under 16.

12. Changes to this policy

We will update this page when our practices change and show the date at the top. If a change is significant, we will tell clients by email.

13. Contact

Aarav Infotech India Pvt. Ltd. (WebXSentry). Email hello@webxsentry.com. Offices: 120, The Summit Business Bay, Andheri (East), Mumbai, Maharashtra 400093, India; 311, 3rd Floor, Utkal Signature, Pahal, Bhubaneswar, Odisha 752101, India.