Privacy Policy

We collect information you provide directly to us, along with limited data collected automatically when you use our website.

• Contact & project details — name, email, phone number, WhatsApp number, company name, project requirements, budget range, and timeline submitted through our "Start a Project" form or by email.
• Communications — records of emails, calls, and WhatsApp messages exchanged with our team during project discussions and delivery.
• Technical data — IP address, browser type, device information, pages visited, and referral source, collected automatically through standard web logs and analytics.
• Payment-related information — billing name, address, and transaction references for invoicing, handled via our payment processors. We do not store full card or bank details on our own servers.

We use the information we collect to operate our business and deliver the services you request from us.

• Respond to project inquiries and prepare proposals or quotes.
• Design, develop, test, and deliver websites, apps, LMS platforms, software, and games we've been engaged to build.
• Send project updates, invoices, and support communications.
• Improve our website, services, and internal processes.
• Meet legal, accounting, and tax obligations.

Our website may use cookies and similar technologies to remember your preferences and understand how visitors use our site.

• Essential cookies — required for basic site functionality, such as the project request form.
• Analytics cookies — help us understand traffic and usage patterns so we can improve the site.

You can control or disable cookies through your browser settings. Disabling cookies may affect how parts of the site function.

We work with trusted third-party providers to run our business and deliver client projects. These may include:

• Website hosting and infrastructure providers
• Analytics providers (for anonymized traffic insights)
• Payment gateways for invoicing and transactions
• Communication tools such as WhatsApp Business, email, and video-call platforms
• Third-party APIs integrated into client projects at the client's request (e.g., maps, payments, SMS)

These providers only receive the information necessary to perform their function and are expected to handle it responsibly. We are not responsible for the independent privacy practices of third-party platforms you choose to interact with.

Where a project involves us building or managing systems that hold end-user data on a client's behalf — such as an LMS, school management system, or SaaS product — we act as a service provider to that client.

• The client remains responsible for the lawful collection and use of their own end users' data.
• We process such data only as needed to build, test, and maintain the system, and in line with the client's instructions.
• Any content, credentials, or datasets shared with us for development purposes are treated as confidential and used solely for the agreed project.

We apply reasonable technical and organizational measures to protect the information we hold, including access controls, secure development practices, and restricted internal access to client data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to minimize risk at every stage of a project.

We retain personal and project information for as long as necessary to fulfil the purposes described in this policy, including ongoing support obligations, legal requirements, and accounting records. When information is no longer needed, we take steps to delete or anonymize it.

Depending on your location, you may have rights regarding your personal information, including the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate information
• Request deletion of your data, subject to legal and contractual obligations
• Withdraw consent for marketing communications at any time
• Object to certain processing of your information

To exercise any of these rights, contact us using the details below and we will respond within a reasonable timeframe.

Our website and services are intended for businesses, institutions, and individuals over the age of 18. We do not knowingly collect personal information directly from children. Where our client projects (such as school or LMS platforms) involve student data, that data is collected and controlled by the client institution, not by Xerour directly.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal and regulatory reasons. The "Effective date" at the top of this page will be updated whenever changes are made. We encourage you to review this page periodically.

If you have questions about this Privacy Policy or how we handle your information, reach out to us: