Privacy Policy
Lexcore Dev is committed to protecting your personal data. This policy explains what we collect, why we collect it, how we protect it, and what rights you have. We do not sell your data. We do not share it with marketers. We collect only what is necessary to deliver our services and fulfil legal obligations.
Data We Collect
Inquiry and Contact Data
| Data Type | What We Collect | Purpose |
|---|---|---|
| Identity | Full name, company name | Project scoping, invoicing, communication |
| Contact | Email address, phone/WhatsApp number | Project communication and support |
| Project Info | Requirements, budget range, timeline, industry | Preparing accurate proposals |
| Business Details | Company registration, GST number (if applicable) | GST-compliant invoicing |
Financial Data
| Data Type | Retention |
|---|---|
| Transaction IDs and payment metadata | 7 years (statutory requirement) |
| Invoice records | 7 years |
We do not store card numbers or bank account details. Payments via Razorpay are processed on Razorpay's PCI-DSS compliant infrastructure — their privacy policy governs data collected during payment.
Technical Data
| Data | Retention |
|---|---|
| IP address (at inquiry submission) | 90 days |
| Browser / OS metadata | 90 days |
| Website usage analytics (aggregate, non-identifying) | 90 days |
How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Responding to inquiries and preparing proposals | Pre-contractual steps |
| Delivering the agreed software project | Contract performance |
| Processing payments and issuing GST invoices | Contract performance + legal obligation |
| Providing post-delivery support and warranty service | Contract performance |
| Sending project updates and status communications | Contract performance |
| Detecting and preventing fraud or abuse | Legitimate interest |
| Complying with legal, tax, and regulatory obligations | Legal obligation |
| Improving our services and processes (aggregate, anonymised) | Legitimate interest |
We will not use your data for any purpose not listed above without first obtaining your explicit consent.
Data Storage and Security
Where Data Is Stored
Project-related data is stored on password-protected, encrypted storage controlled by Lexcore Dev. Communication data resides in Google Workspace (lexcoredev.com domain), which is hosted on Google's infrastructure with AES-256 encryption at rest and TLS 1.3 in transit.
| Layer | Standard |
|---|---|
| Data at rest | AES-256 encryption |
| Data in transit | TLS 1.3 (HTTPS enforced) |
| Access control | Role-based; minimum-necessary principle |
| Payment data | Handled by Razorpay (PCI-DSS compliant) — not stored by us |
Data Retention
| Data Category | Retention Period |
|---|---|
| Inquiry data (non-converted) | 6 months from last communication |
| Client contact data | Duration of engagement + 2 years |
| Project files and deliverables | 1 year post-delivery (then archived or deleted on request) |
| Financial / invoice records | 7 years (statutory — Income Tax Act & GST) |
| Support correspondence | 2 years from last interaction |
| Technical logs (IP, browser) | 90 days |
After applicable retention periods, data is securely deleted or anonymised. You may request early deletion — see Section 11.
Third-Party Data Sharing
We share data only with the following, under strict necessity:
| Recipient | Data Shared | Reason |
|---|---|---|
| Razorpay | Payment metadata (name, email, amount) | Payment processing |
| Google Workspace | Email and communication data | Business communication infrastructure |
| Law enforcement / courts | Legally required minimum | Court orders or statutory obligations |
No other third-party sharing occurs. All recipients are contractually bound to use data only for the specified purpose.
Your Rights — EU / EEA / UK (GDPR)
Request a copy of all personal data we hold about you
Correct inaccurate or incomplete personal data
Request deletion of your data ("right to be forgotten")
Receive your data in a structured, machine-readable format
Object to processing based on legitimate interests
Limit processing while a dispute is pending
Withdraw consent at any time where processing is consent-based
File a complaint with your local data protection authority (DPA)
To exercise GDPR rights, email care@lexcoredev.com. We respond within 30 days.
Your Rights — India (DPDP Act 2023)
Know what personal data we process and for what purpose
Correct inaccurate or outdated personal data
Request deletion of data no longer necessary for stated purpose
File a complaint with our Grievance Officer — acknowledged within 24 hours
Nominate someone to exercise your rights in case of death or incapacity
Withdraw consent for processing; some service continuity may be affected
Designation: Founder & Data Protection Officer · Lexcore Enterprises Private Limited
Email: care@lexcoredev.com
Address: Gaya, Bihar — 824211, India
Acknowledgement: Within 24 hours · Resolution: Within 30 days per DPDPA Section 13
Unresolved complaints may be escalated to the Data Protection Board of India once notified by the Government.
Cookies and Tracking
| Cookie Type | Purpose | Opt Out? |
|---|---|---|
| Essential | Form submission, CSRF protection, session management | No — required for site function |
| Analytics | Aggregate, anonymised usage statistics (Google Analytics, if active) | Yes — browser settings |
| Marketing / Advertising | Not used on lexcoredev.com | N/A |
You can manage or block cookies via your browser settings. Blocking essential cookies may affect form submission.
Children's Privacy
International Data Transfers
Lexcore Dev is incorporated in India. Communication data may pass through Google Workspace infrastructure which operates globally under Standard Contractual Clauses (SCCs) approved by the European Commission for EU/EEA transfers.
For Indian users, all primary processing occurs within India. Third-party data transfers are governed by Data Processing Agreements mandating equivalent protection standards.
Data Deletion Requests
You may request deletion of your personal data at any time by emailing care@lexcoredev.com with the subject: "Data Deletion Request — [your name/email]".
| What Happens | Timeline |
|---|---|
| Acknowledgement of request | Within 24 hours |
| Personal data deleted from active systems | Within 30 days |
| Backup copies purged | Within 90 days |
| Financial records retained | 7 years (statutory — cannot be deleted) |
Some anonymised, aggregate data may be retained indefinitely for statistical purposes — it cannot be linked back to you.
Changes to This Policy
We may update this Policy from time to time. Material changes will be communicated by email at least 14 days before taking effect. The "Last Updated" date reflects the most recent revision. Continued engagement after the effective date constitutes acceptance of the updated Policy.
Contact and Grievance
GDPR requests, data access, erasure, corrections
Response within 24 hours · Resolution within 30 days
Lexcore Enterprises Private Limited · CIN: U70109BR2022PTC059548