Table of Contents

Privacy Policy

Last updated: July 16, 2026

This policy explains how Xplore New Technologies Private Limited (“XplorNew,” “we,” “us,” “our”) collects, uses, and protects information across our website and our product family — SpotLet, Prachin, and Pragnya — including their web platforms and mobile apps. This policy should be read alongside our Terms and Conditions.

Draft notice: This is a working template. Text in red needs to be filled in with exact company details, and the full document should be reviewed by qualified legal counsel before publishing — particularly the GDPR/CCPA/DPDP references.

1. Scope & Who We Are

XplorNew (Xplore New Technologies Private Limited) is a technology company registered in India, with its registered office at Hyderabad, Telangana, India. This Privacy Policy applies to:

• The XplorNew corporate website (xplorenew.com) and any subdomains
• Our product brands — SpotLet, Prachin, and Pragnya — including their respective websites, web applications, and customer dashboards
• The official mobile applications for SpotLet, Prachin, and Pragnya distributed on the Apple App Store and Google Play Store

Where a product has its own dedicated privacy notice inside its app (for example, an in-app permissions screen), that notice supplements — and does not replace — this policy. If there is a direct conflict specific to a product, the product-specific notice governs for that product only.

2. Information We Collect

2.1 Information you provide directly

• Contact details submitted via forms (name, business email, company, job title, phone number)
• Account registration details for SpotLet, Prachin, or Pragnya (username, email, password hash, business/profile information)
• Content you submit — messages, support tickets, uploaded files, listings, or reviews, depending on the product
• Payment and billing details for paid plans (processed by our payment processor; we do not store full card numbers)

2.2 Information collected automatically

• Usage data — pages visited, features used, session duration, click and scroll behavior
• Device data — device model, OS version, browser type, unique device identifiers, IP address, general network information
• Log data — timestamps, crash logs, diagnostic and performance data
• Approximate location derived from IP address, and precise location only where a mobile app explicitly requests and you grant location permission

2.3 Information from third parties

• Analytics providers (Google Analytics 4, Google Search Console)
• Login/identity providers if you choose to sign in via a third-party account (e.g. Google Sign-In)
• Payment processors, confirming successful transactions

3. Mobile App Data & Permissions

Each XplorNew mobile app requests only the device permissions it needs to function. You can review and change these at any time in your device settings. Below is a starting template — update per product once each app’s final permission set is confirmed.

SpotLet App

Typical permissions: [Location — to show nearby listings; Camera/Photos — to upload listing images; Push Notifications — for booking/alert updates]

Data collected in-app: [listing details, booking history, in-app messages]

Prachin App

Typical permissions: [Camera/Photos, Storage — for content uploads; Push Notifications]

Data collected in-app: [content submissions, usage analytics]

Pragnya App

Typical permissions: [Push Notifications; Storage — for exporting reports]

Data collected in-app: [learning/usage progress, account activity]

We do not access your device’s contacts, microphone, or camera roll unless the specific feature you’re using requires it and you’ve granted that permission. Push notification tokens are used solely to deliver service-related alerts you can opt out of at any time.

4. How We Use Information

• To provide, operate, and maintain the website, products, and mobile apps
• To process transactions, subscriptions, and billing
• To personalize content, recommendations, and in-app experiences
• To send transactional communications (account activity, security alerts, service updates) and, with consent, marketing communications
• To monitor performance, fix bugs, and improve reliability across web and mobile
• To detect, investigate, and prevent fraud, abuse, or security incidents
• To comply with legal obligations and enforce our Terms and Conditions

5. Legal Basis for Processing

Where applicable law requires a specified legal basis (e.g. under the GDPR for EU/UK users), we rely on:

• Consent — for optional cookies, marketing communications, and certain device permissions
• Contractual necessity — to deliver the services you’ve signed up for
• Legitimate interests — for security, fraud prevention, and product improvement, balanced against your rights
• Legal obligation — where we must retain or disclose data to comply with law

For users in India, we process personal data consistent with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules issued thereunder.

6. Cookies & Tracking Technologies

Our website and web platforms use cookies and similar technologies, including:

You can control cookies through your browser settings. Disabling non-essential cookies will not affect core functionality but may reduce personalization.

7. Sharing & Third Parties

We do not sell your personal data. We may share information with:

• Service providers — hosting (Hostinger), analytics (Google), payment processing, customer support tools — bound by confidentiality and data processing agreements
• Business transfers — in connection with a merger, acquisition, or asset sale, with notice provided to you
• Legal requirements — where required to comply with law, regulation, legal process, or governmental request
• With your consent — for any other purpose you explicitly approve

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, to comply with legal/tax/accounting obligations, or to resolve disputes. Account data is generally retained for the life of your account plus [X] months after closure, unless a longer period is required by law. You may request earlier deletion — see Section 10.

9. Data Security

We apply industry-standard technical and organizational safeguards — encryption in transit, access controls, and regular security reviews — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to promptly investigate and address any incident.

10. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict certain processing
• Request data portability
• Withdraw consent at any time where processing is based on consent
• Opt out of marketing communications via the unsubscribe link or in-app settings

To exercise any of these rights, contact us using the details in Section 14. We will respond within the timeframe required by applicable law.

11. Children’s Privacy

Our website, products, and apps are not directed at children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take steps to delete it.

12. International Data Transfers

As we serve clients across multiple countries, your information may be processed in India or in other countries where our service providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers of personal data.

13. Changes to This Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. Material changes will be notified via the website, in-app notice, or email where appropriate. The “Last updated” date at the top reflects the most recent revision.

14. Contact Us

For privacy questions, requests, or complaints, reach out to: