Privacy policy

Draft — legal review pending. The final version will appear here.

Draft — legal review pending. This draft follows the Digital Personal Data Protection Act, 2023 (DPDP). It is not final until reviewed by counsel.

Who we are

xivobooks is operated by VSQUARE TechSolutions Pvt Ltd, 3524/2, Narang Colony, Tri Nagar, Delhi 110035 (the Data Fiduciary). Grievance Officer: grievance@xivobooks.com.

What we collect and why

  • Website enquiries. When you fill a form on this website we store your name, mobile number, and anything else you choose to give (email, shop name, city, type of shop, message), the page and campaign you came from, the consent sentence version you agreed to, the time, and a one-way keyed hash of your IP address. We use this only to contact you about xivobooks.
  • Website usage. We count page views and button clicks per day and page. We do not set cookies for this and store no IP address or visitor id with these counts.
  • App account. If you create an account in the app: your mobile number, name, password (stored as a one-way hash) and shop name, so you can sign in and recover your account.
  • Shop data you sync. With an account, the records you keep in the app (bills, items, customers, stock) are synced to our servers so you have a backup and several phones can work together. For your customers' data in those records, you are the Data Fiduciary and we process it on your behalf.

What we do not do

We do not sell personal data. We do not use your shop data to train AI models. We do not show advertising.

How long we keep it

  • Website enquiries: while we are in touch, and at most 24 months after the last contact, unless you become a customer.
  • App accounts and shop data: until you delete your shop from the app, then removed from active systems.

Your rights

You can ask to see, correct or erase your data, withdraw consent, and nominate someone to act for you. Write to grievance@xivobooks.com from the number or email you gave us. Withdrawing consent stops further contact; erasure removes your name, number, email and notes, and keeps only anonymous counts (for example, how many enquiries came from a campaign). We reply within 30 days. If you are not satisfied you may complain to the Data Protection Board of India.

Security

Data travels over HTTPS. Passwords are stored as one-way hashes. Console access is limited by role, and every staff action on your data is logged.

Changes

We will post changes here with a new date.