Privacy Policy

1. What Xquantum Does

Xquantum provides software and analytics services that help businesses monitor, analyse and manage their Amazon operations. Our Services may include:

• Sales and revenue analytics
• Inventory monitoring
• Profit and loss reporting
• Advertising analytics
• Advertising campaign management and automation
• Business alerts and notifications
• Reporting and data visualisation
• Other analytics, optimisation and automation features introduced from time to time

2. Information We Collect

We follow a principle of data minimisation and seek to collect only information reasonably necessary for operating and improving our Services.

2.1 Information You Provide Directly

• Name
• Email address
• Business or billing address
• Company or organisation information
• Account and subscription information
• Communications you send to us
• Information you voluntarily provide when requesting support

We do not require you to provide more personal information than is reasonably necessary for the relevant purpose.

2.2 Amazon and Business Data

When you authorise an Amazon or other supported integration, Xquantum may receive business and account information through authorised APIs. Depending on the Services and permissions granted, this may include:

• Sales and revenue information
• Orders and transaction information
• Inventory information
• Product, ASIN and SKU information
• Advertising campaign information
• Advertising spend and performance metrics
• Keywords and related advertising information
• Pricing and product performance information
• Refund and return information
• Other business information made available through the authorised integration

The specific information accessible to Xquantum depends on the permissions you grant and the functionality you use.

Where an authorised Amazon or other platform integration makes personal information relating to your customers available to Xquantum (for example, buyer names or shipping addresses contained in order data), Xquantum accesses and retains that information only to the extent necessary to provide the Services and in accordance with the applicable platform's data protection policy, and deletes it within the period that policy requires.

2.3 Account Access and Authentication

Xquantum uses authorised API integrations to connect to supported third-party platforms. We do not ask you to provide or store your Amazon account password. Authentication and authorisation are handled through the applicable third-party platform's authorised mechanisms.

2.4 Payment Information

Xquantum does not collect or store your full credit card or debit card details on our systems. Payments and payment-card information are processed by third-party payment service providers. Examples may include Razorpay, Stripe or other providers we may use from time to time. Those providers process payment information in accordance with their own terms and privacy policies.

2.5 Technical and Usage Information

When you visit our website or use the platform, we automatically receive certain technical information, including IP address, approximate location derived from IP address, browser and device type, operating system and language settings, referring and exit pages, the pages and features you access, session identifiers, date and time stamps, diagnostic and crash data, and server and access logs. We use this information to operate, secure, troubleshoot and improve the Services.

3. How We Collect Information

• When you create an Xquantum account
• When you request a demo or contact us
• When you subscribe to or use our Services
• When you connect an Amazon or other supported account
• When you communicate with our support team
• Through essential technical and session technologies
• Through authorised third-party integrations
• When information is provided to us by your organisation or an authorised administrator

Where information is provided to us by a customer organisation, that organisation may be responsible for informing the relevant individuals about the processing of their information.

4. How We Use Your Information

• Create and manage your Xquantum account
• Provide and operate our Services
• Connect with authorised Amazon and other third-party platforms
• Generate analytics, reports and business insights
• Monitor sales, revenue, inventory and advertising performance
• Support advertising campaign management and automation
• Generate profit and loss reports
• Send operational alerts and notifications
• Provide customer support
• Process subscriptions and payments through payment providers
• Maintain the security and integrity of our Services
• Detect and prevent fraud, misuse and security incidents
• Troubleshoot and improve the performance of our platform
• Communicate important service, security and account information
• Comply with applicable legal and regulatory requirements
• Develop, train, test, benchmark and improve our analytics models, algorithms, forecasting and automation features
• Create aggregated, statistical or de-identified data that does not identify you, your organisation, your users or your customers, which Xquantum may use and retain for benchmarking, research, product development and reporting

5. Legal Bases for Processing

Where laws such as the EU GDPR or UK GDPR apply, we process personal data using an appropriate lawful basis. Depending on the circumstances, these may include:

• Contractual necessity – to provide the Services, manage your account or perform our contractual obligations.
• Legitimate interests – to maintain security, prevent misuse, improve our Services, communicate with business customers and operate our business, where those interests are not overridden by applicable rights.
• Consent – where applicable law requires consent, including for certain marketing activities or cookies and similar technologies.
• Legal obligations – where processing is necessary to comply with applicable laws, regulations, legal processes or lawful governmental requests.

You may withdraw consent where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Marketing Communications

We may occasionally send information about Xquantum products, features, events or offers that we believe may be relevant to you. Where applicable law requires consent, we will obtain that consent before sending marketing communications.

• Use the unsubscribe option in the relevant communication
• Contact support@xquantum.io

Opting out of marketing communications will not prevent us from sending essential service, security, billing or account-related communications.

7. Amazon and Third-Party Platform Data

Xquantum accesses Amazon data only through authorised integrations and permissions. We use such data to provide the Services requested by you or your organisation, including analytics, reporting, advertising management and automation.

Xquantum does not sell or rent your Amazon business data.

Xquantum does not request or store your Amazon account password.

Xquantum does not use your Amazon data for purposes unrelated to providing or operating the Services, other than to create aggregated, statistical or de-identified data as described in section 4, or where otherwise permitted by applicable law and disclosed to you.

Your use of Amazon's services remains subject to Amazon's own terms, policies and applicable agreements. Xquantum does not control Amazon's systems, APIs, policies, availability or decisions.

8. Customer Data and Our Role

Depending on the nature of the information and the Services involved, Xquantum may act as a data controller/business or as a data processor/service provider.

Information you provide directly to Xquantum to create and manage your own account may generally be processed by Xquantum for its own business and contractual purposes.

Business or personal information contained within customer data that Xquantum processes on behalf of an organisation may be processed according to that organisation's instructions and applicable contractual arrangements.

Where Xquantum acts as a processor, we will process personal data in accordance with the applicable customer agreement, data processing terms and applicable data protection law.

9. Sharing of Information

We do not sell or rent your personal information or Amazon business data. We may share information with trusted third parties where reasonably necessary to operate our Services, including:

• Cloud hosting and infrastructure providers
• Payment processors
• Security and authentication providers
• Customer support and communication providers
• Analytics or technical service providers
• Professional advisers such as lawyers, accountants and auditors
• Government authorities or law-enforcement bodies where legally required
• Other service providers acting on our behalf and subject to appropriate contractual or legal protections
• Our affiliates and group companies, where they assist in providing, supporting or operating the Services

We require service providers handling personal data on our behalf to maintain appropriate confidentiality and security obligations.

A current list of the sub-processors Xquantum uses to process customer personal data, and Xquantum's standard data processing agreement, are available on request from support@xquantum.io.

10. Business Transfers

If Xquantum undergoes a merger, acquisition, restructuring, financing, sale of assets or other corporate transaction, information may be transferred as part of that transaction, subject to applicable law and appropriate confidentiality and data protection safeguards.

11. Data Security

We take reasonable and appropriate technical and organisational measures to protect information against unauthorised access, alteration, disclosure, loss, misuse or destruction.

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of data at rest using AES-256 or an equivalent industry-standard algorithm
• Secure API authentication and authorisation
• Access controls and role-based permissions
• Authentication and account security measures
• Monitoring and logging
• Security controls for infrastructure and third-party services
• Employee confidentiality obligations
• Appropriate backup and recovery procedures
• A documented security incident response plan, including notification of affected customers and connected platforms within the timeframes required by applicable law and applicable platform policies

No internet-based service can guarantee absolute security. However, we continually work to improve the security and resilience of our Services.

12. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business and financial records, meet contractual obligations, resolve disputes, enforce agreements, meet legal or regulatory requirements, and protect the security and integrity of our Services.

For active customer accounts, relevant business data is generally retained while the account remains active.

Following account termination, Xquantum may retain relevant information for a limited period to support account recovery, fulfil contractual obligations, resolve disputes, meet legal requirements or provide requested exports.

Unless a longer period is required by law or agreed contractually, customer data may generally be deleted or anonymised within 90 days after termination, subject to technical backups and legal or regulatory retention requirements, and subject to any shorter deletion period required by Amazon's Data Protection Policy or another applicable platform policy. Where backup copies remain, they will be protected and securely deleted or overwritten in accordance with our applicable backup procedures.

Aggregated, statistical or de-identified data that does not identify you, your organisation or any individual may be retained and used by Xquantum indefinitely.

13. International Data Transfers

Xquantum is based in India and may use service providers and infrastructure located in India and other countries. Personal data may therefore be transferred to, stored in or accessed from countries outside your country of residence.

Where applicable law requires specific safeguards for international transfers, we will use an appropriate legally recognised transfer mechanism, which may include an adequacy decision, Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, where applicable, or another legally recognised safeguard.

Transfers of personal data out of India will be made in accordance with the Digital Personal Data Protection Act, 2023 and any restrictions on transfers to particular countries or territories notified by the Central Government from time to time.

14. Your Privacy Rights

• The right to know what personal information we process
• The right to access your personal information
• The right to correct inaccurate or incomplete information
• The right to request deletion of personal information
• The right to restrict certain processing
• The right to object to certain processing
• The right to data portability, where applicable
• The right to withdraw consent where processing is based on consent
• The right to opt out of certain marketing activities
• Rights relating to automated decision-making and profiling where applicable

These rights are not absolute and may be subject to legal exceptions.

Xquantum does not make decisions producing legal or similarly significant effects concerning you based solely on automated processing. Where you enable advertising automation or rule-based features, the Services act on the settings, rules and instructions that you configure and authorise.

To exercise your rights, contact support@xquantum.io. We may need to verify your identity before completing certain requests. We will respond to valid requests within the time period required by applicable law.

Where applicable law permits, you may use an authorised agent to submit a request on your behalf, provided we can verify the agent's authority. If we decline a request we will explain why, and where applicable law provides a right of appeal you may appeal by writing to support@xquantum.io with the subject line “Privacy Appeal – Xquantum”.

15. European Economic Area and UK Users

If the EU GDPR or UK GDPR applies to you, you may have additional rights including access, rectification, erasure, restriction, objection, data portability, withdrawal of consent and rights relating to certain automated decision-making and profiling.

You may also have the right to lodge a complaint with the relevant data protection supervisory authority in your country.

Where required by Article 27 of the EU GDPR or the UK GDPR, Xquantum will appoint a representative in the European Union and/or the United Kingdom and will publish that representative's contact details in this Privacy Policy.

Where Xquantum processes personal data on behalf of a business customer, requests relating to that data may need to be directed first to the relevant customer or organisation that controls the data.

16. California and Other U.S. State Privacy Rights

Certain U.S. states provide additional privacy rights. Where applicable, California residents may have rights under the California Consumer Privacy Act, as amended, including rights to know, delete, correct, opt out of the sale or sharing of personal information, limit certain uses and disclosures of sensitive personal information where applicable, and receive equal treatment for exercising applicable privacy rights.

Xquantum does not sell personal information and does not share personal information for cross-context behavioural advertising.

If these practices change, we will update this Privacy Policy and provide any notices or opt-out mechanisms required by applicable law. We will not discriminate against individuals for exercising rights provided by applicable privacy laws.

17. India – Digital Personal Data Protection

For individuals in India, Xquantum seeks to comply with applicable requirements under the Digital Personal Data Protection Act, 2023 and applicable rules and regulations. We seek to process personal data in a lawful, transparent and purpose-specific manner and maintain appropriate safeguards.

Depending on the circumstances, individuals may have rights relating to access to information about their personal data, correction and updating, erasure subject to applicable legal requirements, withdrawal of consent where consent is the basis for processing, and grievance redressal.

Requests and grievances may be submitted to support@xquantum.io. Where applicable, Xquantum will designate and publish the details of the appropriate grievance or privacy contact in accordance with applicable Indian law.

Grievance Officer / Data Protection Contact: Muneeb Kazi, Datarun Technologies Private Limited, 14& 18, FLOOR-1, PLOT-313, LATIF NAIK HOUSE, PAI MARG, Mazgaon, Mumbai, Mumbai- 400010, Maharashtra. Email: support@xquantum.io. We will acknowledge grievances promptly and respond within the period prescribed by applicable law.

18. Cookies and Similar Technologies

Xquantum uses essential cookies, session technologies and similar technologies where necessary to operate and secure the Services. These technologies may be used to:

• Keep you signed in
• Maintain secure sessions
• Remember necessary account settings
• Protect the platform against misuse
• Support core platform functionality

We do not use cookies for cross-site behavioural advertising. If we introduce non-essential analytics, advertising or similar tracking technologies in the future, we will provide notices and consent mechanisms required by applicable law.

19. Children's Privacy

Xquantum is a business-focused SaaS platform and is not intended for and is not offered to individuals under the age of 18. We do not knowingly collect personal information from children where prohibited by applicable law. If you believe that a child has provided personal information to us, please contact support@xquantum.io.

By creating an account or using the Services you confirm that you are at least 18 years old. Xquantum does not knowingly process the personal data of a child and does not undertake tracking, behavioural monitoring or targeted advertising directed at children.

20. Third-Party Websites and Services

Our website or Services may contain links to third-party websites, applications or services. This Privacy Policy does not govern those third parties. We encourage you to review the privacy policies of third-party services you use, including Amazon and payment providers.

21. Data Breaches and Security Incidents

If we become aware of a personal data breach affecting information processed by Xquantum, we will assess and respond to the incident in accordance with applicable law and our internal incident-response procedures. Where notification is legally required, we will notify the relevant customers, individuals, regulators or other parties within the timeframes and manner required by applicable law.

Where Xquantum acts as a processor on behalf of a customer organisation, Xquantum will notify that organisation without undue delay after becoming aware of a personal data breach affecting its data, and that organisation remains responsible for any notification it is required to make to regulators or affected individuals. Where a security incident affects data obtained through a third-party platform integration, Xquantum will also notify that platform within the timeframe required by its policies.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, data processing practices, applicable laws or regulations, or third-party service providers. When we make material changes, we may provide additional notice where required by law. The latest version will always be published on this page with the revised Effective Date / Last Updated date.

23. Contact Us

If you have questions about this Privacy Policy, our data practices, or your privacy rights, please contact:

Datarun Technologies Private Limited

Brand: Xquantum

Email: support@xquantum.io

Registered office: 14& 18, FLOOR-1, PLOT-313, LATIF NAIK HOUSE, PAI MARG, Mazgaon, Mumbai, Mumbai- 400010, Maharashtra. CIN: U62099MH2025PTC460946. Grievance Officer / Data Protection Contact: Muneeb Kazi, support@xquantum.io.

For privacy or data protection requests, please use the subject line: “Privacy Request – Xquantum”.

24. Important Notice for Business Customers

If you use Xquantum on behalf of a company, agency, brand or other organisation, that organisation may control the personal data and business information submitted to Xquantum.

• Your organisation may determine what information is provided to Xquantum.
• Your organisation may be responsible for ensuring that it has the necessary rights and permissions to provide such information to us.
• Your organisation may be the appropriate party to contact regarding access, correction or deletion requests concerning data it controls.

Xquantum will process such data in accordance with the applicable customer agreement and data protection requirements.

Your data. Your business. Our responsibility.

We are committed to protecting the information entrusted to Xquantum and to maintaining transparency about how it is used.