Privacy Policy & Cookie Policy

2 Categories of Information We Collect

We collect only the minimum personal and operational data necessary to deliver high-speed graphic design services:

• Direct Contact & Identity Identifiers: Name, phone number, WhatsApp contact number, email address, company or business name, and billing city.
• Project & Creative Brief Assets: Text copy, brand logos, vector files, high-resolution product photography, color palette specifications, font preferences, dimensional requirements, and creative guidance provided by you.
• Financial & Invoicing Data: Payment transaction reference numbers, payment mode (UPI, card, net banking), billing addresses, and GSTIN (where GST invoicing is requested). Note: Design Quixo does NOT store credit/debit card numbers, CVV codes, or banking PINs on its servers. All payments are processed through PCI-DSS certified, RBI-approved Indian payment aggregators.
• Technical & Telemetry Data: IP address, device hardware model, browser type, operating system, approximate geographic city-level location, referrer URLs, and interaction timestamps.

3 Lawful Basis & Purposes of Data Processing

Your data is processed strictly based on your consent and contractual necessity for the following purposes:

• Fulfilling Design Orders: Dispatching your design requirements to verified human graphic designers, generating proofs, and delivering high-res print and source files.
• Official WhatsApp Notifications: Transmitting order confirmations, milestone updates, revision previews, and delivery links exclusively via our verified official WhatsApp Business desk (+91 86299 27995).
• Invoicing & Compliance: Issuing tax invoices, accounting records, and maintaining statutory audit trails under Indian commercial law.
• Platform Security & Anti-Fraud: Protecting clients against unauthorized off-platform solicitation, impersonation fraud, cyber threats, and intellectual property infringement.

4 Strict "No-Sale" Guarantee for Personal Data

5 Data Sharing & Third-Party Processors

We disclose your information only to trusted service partners operating under strict confidentiality and data processing agreements:

• Cloud Infrastructure Providers: Secure database and hosting providers (Supabase, Firebase, Cloudflare, Google Cloud Platform) enforcing enterprise-grade encryption.
• Communication Gateways: Official WhatsApp Business API / Meta infrastructure for transmitting order alerts and proofs.
• Payment Gateways: Authorized RBI-regulated payment aggregators for processing digital payments securely.
• Legal & Regulatory Mandates: We may disclose data if strictly required by a court order, government investigation, or statutory authority under Indian law.

6 Data Security & Reasonable Safeguards

In compliance with Rule 8 of the SPDI Rules and global ISO/IEC 27001 security principles, we maintain robust physical, electronic, and managerial safeguards:

• End-to-end 256-bit SSL/TLS cryptographic transport encryption for all website communications.
• Row-level database security policies preventing unauthorized cross-tenant data access.
• Strict role-based administrative access controls with multi-factor authentication.
• Regular digital vulnerability scanning and encrypted backup routines.

A cookie is a small alphanumeric text file placed on your device by your web browser when you visit Design Quixo. Cookies allow our platform to recognize your browser, maintain active sessions, remember your design draft inputs, and ensure smooth, responsive website performance.

8 Your Rights Under the DPDPA 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you possess the following statutory rights:

• Right to Access: You have the right to request a summary of the personal data we hold about you and the processing activities undertaken.
• Right to Correction & Updating: You may request the correction of inaccurate or incomplete personal data.
• Right to Erasure (Right to Be Forgotten): You may request the permanent deletion of your personal data when it is no longer required for the purpose for which it was collected, subject to legal retention mandates under tax laws.
• Right of Grievance Redressal: You have the right to lodge a formal complaint with our designated Grievance Officer and escalate to the Data Protection Board of India if unresolved.
• Right to Nominate: You have the right to nominate an individual to exercise your data rights in the event of death or incapacity.

9 Data Retention & Deletion Schedule

We retain your design files and transaction details for as long as your account remains active or as needed to provide you with re-download access to previous deliverables. Billing records and GST invoices are preserved for a period of up to 7 years in compliance with Section 36 of the Central Goods and Services Tax Act, 2017.

Upon your formal written request to privacy@designquixo.com, all identifiable marketing and personal records not required for statutory compliance will be permanently purged within thirty (30) calendar days.

In accordance with the Information Technology Act, 2000, Rule 5(9) of the SPDI Rules, and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Redressal Officer are provided below:

11 Modifications to this Privacy Policy

We may revise this Privacy Policy periodically to reflect technological changes, new platform features, or updated statutory requirements. Any revisions will be published on this page with an updated "Last Revised" date. Continued use of Design Quixo after revisions signifies your acceptance of the modified policy.