Legal
Privacy Policy
How we collect, use, retain, and protect personal data — and the rights you hold over it.
1. Who we are
Laxora Software Private Limited (“Laxora”, “we”, “us”) is a company incorporated in India and based in Agra, Uttar Pradesh. We are the data fiduciary for personal data collected through this website. Our full registered address is available on request.
2. What we collect
- Enquiry data — name, business email, phone number, company name and website, role, and the content of your message, when you submit the contact form.
- Application data — anything you send us when applying for a role, including your CV.
- Technical data — IP address, browser type, device type, and pages visited, collected through analytics only where you have consented.
- Communications — correspondence between you and us, retained so we can service the relationship.
We do not knowingly collect special category data, and we ask that you do not include it in enquiry messages.
3. Why we process it, and on what basis
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry | Your consent, given at submission |
| Performing a contract with you | Contractual necessity |
| Considering your job application | Your consent, and steps prior to a contract |
| Marketing communications | Your separate, explicit opt-in |
| Site security and abuse prevention | Legitimate interest |
| Meeting statutory and tax obligations | Legal obligation |
4. How long we keep it
- Enquiries that do not lead to an engagement — 24 months from last contact.
- Client records — for the duration of the engagement and 8 years afterwards, to meet statutory retention requirements.
- Job applications — 12 months, unless you ask us to keep them on file for longer.
- Analytics data — 14 months.
5. Who we share it with
We share personal data only with processors who need it to deliver a service to us, under written terms that restrict their use of it. We do not sell personal data, and we do not share it for third-party advertising.
We use Google Analytics 4 (Google LLC) for aggregate site measurement, which runs only after you consent. Our hosting, email, and CRM providers are itemised on request, and will be listed here by name once the production stack is fixed.
6. International transfers
Where a processor stores data outside India, we rely on contractual safeguards including standard contractual clauses. You may ask us which processors this applies to.
7. Your rights
Under the DPDP Act 2023 and, where it applies to you, the GDPR, you may:
- Request access to the personal data we hold about you
- Ask us to correct data that is inaccurate or incomplete
- Ask us to erase data we no longer have a basis to keep
- Withdraw consent at any time, without affecting processing already carried out
- Nominate another person to exercise these rights on your behalf
- Raise a complaint with us, and escalate to the Data Protection Board of India
To exercise any of these, write to connect@laxorasoftware.com. We respond within 30 days.
8. Cookies
We use strictly necessary cookies to operate the site. Analytics and marketing cookies are set only after you consent. See our cookie policy for the full inventory.
9. Security
We describe our technical and organisational measures on our security page. No system is perfectly secure, and we do not claim otherwise; we do commit to notifying affected people and the Board promptly if a reportable breach occurs.
10. Changes to this policy
We version this policy and record the date of each change. Material changes will be notified to clients directly rather than only posted here.
Last updated: 21 August 2026 · Version 1.0