1. Who this policy covers
This policy applies to the XOR Labs website and communications initiated through it. In this policy, “XOR Labs”, “we”, “us” and “our” refer to XOR Labs, operating from SCO 2923–24, Sector 22 C, Chandigarh 160022, India.
2. Personal data we may collect
We collect only the information reasonably needed for the interaction you initiate.
- Growth enquiries: name, work email, phone number, job role, website or app, selected objective, and—where relevant—advertising-spend or organic-traffic range.
- Career enquiries: information you choose to send, such as your name, contact details, résumé, portfolio, professional profile and message.
- Communications: correspondence and information you provide when you email or otherwise contact us.
- Technical information: hosting and security systems may process IP address, browser or device type, request time, referring page and similar server-log information needed to operate and protect the website.
When you submit the enquiry form, the website sends your details securely to a Google Sheets workbook managed by XOR Labs. We also include available campaign parameters (UTM source, medium, campaign, content, term and ID) to understand how you found us. These parameters are saved in your browser’s local storage from your most recent tagged visit; a visit without campaign parameters preserves the saved values until you clear your browser’s site data or a new tagged visit replaces them.
We use Google Tag Manager to load measurement and marketing tags, including the Meta Pixel. Saved enquiries generate a CC - Contact Us event, and qualifying enquiries may also generate SQL or SEO Lead events. We send these events through both the browser Pixel and our server-side Meta integration, using matching event identifiers to prevent double counting. Server events include hashed contact identifiers and available browser identifiers, user agent and client IP address for matching and campaign measurement.
3. Why we use personal data
- To respond to enquiries and understand whether our services fit your requirements.
- To communicate about a proposal, engagement, event or opportunity you asked about.
- To review career enquiries and maintain recruitment records.
- To operate, secure, troubleshoot and improve the website.
- To keep business records, protect legal rights and comply with applicable law.
Where consent is the basis for processing, it should be free, specific, informed and unambiguous. You may withdraw it by contacting us. We may also process information for a lawful purpose or a legitimate use permitted by applicable law.
4. Data minimisation and retention
We aim to collect only data that is necessary for a stated purpose. We retain personal data only for as long as reasonably required for that purpose, an ongoing business relationship, recruitment follow-up, dispute resolution, security, record-keeping or a legal obligation. When retention is no longer necessary, we take reasonable steps to delete or de-identify the data.
5. When information may be shared
We do not sell personal data. We may share limited information with service providers that support hosting, email, communications, security, professional advice or business operations; with a client or partner where you have asked us to facilitate an interaction; with authorities where required by law; or in connection with a genuine corporate transaction. Providers are expected to use the information only for the relevant service and apply appropriate safeguards.
6. Processing outside India
Some technology providers may process or store information outside India. Where this occurs, we take reasonable steps to use providers and arrangements consistent with applicable Indian law and any notified restrictions on cross-border transfers.
7. Security
We use reasonable technical and organisational safeguards appropriate to the nature of the information and the website. No internet transmission or storage system can be guaranteed to be completely secure. If we become aware of a personal-data breach, we will take steps required by applicable law, including notifications where those obligations apply.
8. Your choices and rights
Subject to applicable law and the relevant provisions being in force, you may ask for a summary of personal data being processed, request correction, completion, updating or erasure, withdraw consent, and raise a grievance. You may also have a right to nominate another individual to exercise rights in specified circumstances.
Send requests to marketing@xorlabs.in. We may need to verify your identity before acting on a request. If you are dissatisfied with our response, you may pursue the grievance mechanism available under applicable law.
9. Children’s data
This website is intended for business audiences and is not directed to children under 18. We do not knowingly seek personal data from children through the website. If you believe a child has provided personal data, contact us so that we can review and take appropriate action.
10. Cookies and third-party links
Our current cookie practices are described in the Cookie Policy. The website may link to third-party websites. Their privacy practices are governed by their own notices, and we encourage you to review them.
11. Updates and contact
We may update this policy as the website, our practices or applicable law changes. The latest version will appear on this page with its updated date.
12. Legal framework
This notice is designed around applicable Indian data-protection requirements, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as their provisions come into force. It should be read with our Terms of Use and Cookie Policy.
Official references: Digital Personal Data Protection Act, 2023 and Government notification summary for the DPDP Rules, 2025.