1. Introduction & Overview
Modern X Webs ("Agency", "we", "us", or "our") is a specialized brand growth partner headquartered in India, serving ambitious founders, digital enterprises, and next-generation brands worldwide. We engineer high-performance web development, hyper-targeted performance advertising, brand identity systems, and technical search engine optimization (SEO).
This Privacy Policy delineates how we gather, process, store, disclose, and protect information when you navigate our primary domain (modernxwebs.com), book a discovery session, access our client portals, or enter into a commercial services contract with us.
By accessing our website or submitting information to us, you acknowledge that you have read, understood, and consented to the data practices described in this document.
2. Information We Collect
We collect information strictly necessary to provide elite design and engineering services, evaluate prospective agency-client partnerships, and communicate effectively. The data collected falls into three categories:
A. Information Provided Voluntarily by You
- Consultation & Discovery Call Data: When you schedule a strategy session via our interactive booking interface or communicate with us, we collect your full name, work email address, company name, brand website URL, project brief details, estimated investment budget, and target launch timeline.
- Direct Inquiries & Project Briefs: Any specifications, wireframes, copy, design assets, API credentials, or feedback provided directly via email ([email protected]), instant messaging, or project management boards.
- Billing & Commercial Information: For contracted client engagements, corporate registration details, tax identification numbers (such as GSTIN for Indian clients, or corporate VAT/EIN for international clients), invoicing contact names, and billing addresses. Payment card numbers are processed directly via secure payment gateways and are never stored on our servers.
B. Information Collected Automatically
- Device & Telemetry Details: Browser type, operating system version, screen resolution, preferred language settings, device hardware classification (desktop, tablet, mobile), and network identifiers.
- Log & Usage Metrics: Internet Protocol (IP) address, approximate geographic location (city and country level), referring URLs, request timestamps, pages viewed, time spent per section, and navigation pathways.
4. How We Use Your Data
We collect and process your information exclusively for legitimate agency and commercial objectives:
- Fulfilling Discovery Sessions: Preparing for scheduled consultation calls, reviewing your digital presence, and assessing fit for brand growth partnerships.
- Executing Client Engagements: Engineering bespoke web applications, configuring digital advertising accounts, formulating brand design collateral, and optimizing SEO architecture.
- Commercial Administration: Issuing formal proposals, contracts, Statements of Work (SOW), milestone updates, invoices, and payment receipts.
- Performance & Infrastructure Security: Monitoring website speed, diagnosing errors, preventing automated scraping attacks, and maintaining cyber defense.
- Legal & Tax Compliance: Maintaining accounting books and complying with applicable Indian commercial, tax, and reporting mandates.
5. Legal Grounds for Processing
Under the DPDP Act (India), the GDPR (EU/UK), and international data regulations, we only process personal information where a valid legal basis exists:
- Contractual Necessity: Processing required to initiate, manage, or perform a contract with you or your enterprise (e.g., scoping projects, delivering code, hosting deliverables).
- Legitimate Business Interests: Operating and protecting our agency infrastructure, communicating relevant service enhancements, and demonstrating our capabilities.
- Explicit Consent: Where you have intentionally submitted an inquiry, booked a strategy session, or authorized us to review confidential brand assets.
- Statutory Compliance: Satisfying statutory audit, corporate records, and tax disclosure requirements in India.
6. Third-Party Disclosures
We do not sell, rent, monetize, or trade client or visitor data to third parties. Data is shared only with vetted enterprise subprocessors essential to operating our digital infrastructure:
- Meeting Scheduling Infrastructure: Cal.com handles appointment scheduling and availability management for our strategy sessions.
- Cloud Hosting & Content Delivery: Enterprise cloud networks (including Cloudflare and edge delivery CDNs) provide global edge caching, SSL encryption, and DDoS defense.
- Corporate Communications: Secure email infrastructure and productivity suites (e.g., Google Workspace) for internal project communications.
- Code Repositories: Private GitHub repositories utilized for secure version control and code deployment of client software.
- Legal & Law Enforcement: Only when strictly required by a binding court order, regulatory warrant, or applicable Indian law.
7. Cross-Border Data Transfers
Modern X Webs is based in India, while serving corporate clients across North America, the United Kingdom, Europe, the Middle East, and the Asia-Pacific region. Consequently, information collected through modernxwebs.com may be processed on secure servers located outside your jurisdiction.
When transferring data across international boundaries, we ensure that adequate technical and contractual safeguards are in place (such as Standard Contractual Clauses, encrypted data transit via TLS 1.3, and restricted access controls) consistent with the DPDP Act and GDPR adequacy requirements.
8. Data Retention & Safeguards
We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered:
- Consultation Inquiries: Inquiries and project briefs that do not materialize into active client contracts are securely purged or anonymized within 24 months.
- Client Project Records: Source code repositories, architectural diagrams, and project assets are maintained for the duration of the engagement and for an agreed maintenance archive period.
- Invoicing & Tax Records: Retained for 7 to 8 years in strict accordance with statutory Indian tax and corporate compliance obligations.
All data in transit is encrypted using 256-bit TLS/SSL encryption. Agency production accounts, cloud instances, and code repositories are guarded by mandatory Multi-Factor Authentication (MFA), hardware security keys, and least-privilege role segregation.
9. Your Privacy Rights
Depending on your geographic residency, you are entitled to exercise statutory privacy rights regarding your personal information:
- Indian DPDP Act Rights: The right to obtain summaries of personal data processed, the right to correction and erasure of inaccurate or obsolete data, the right to grievance redressal, and the right to nominate an authorized representative in case of incapacity.
- GDPR / UK GDPR Rights: The right to access (Data Subject Access Request), rectify, restrict processing, object to processing on legitimate interest grounds, request data portability in a structured format, and exercise the "Right to be Forgotten" (erasure).
- California (CCPA/CPRA) Rights: The right to know what personal categories are collected, request deletion, and receive equal service without discrimination. (Modern X Webs does not sell or share your personal data for cross-context behavioral advertising).
To submit a formal rights request, email [email protected]. We verify your identity before fulfilling requests and respond within thirty (30) days without charge.
10. Direct Communications
We do not engage in automated spam or unsolicited bulk email campaigns. When you submit your contact information to Modern X Webs, we contact you solely regarding your project inquiry, discovery session confirmation, or project deliverable updates.
You may opt out of any non-transactional agency updates at any time by replying directly to any email with "Unsubscribe" or by notifying us at [email protected].
11. Children’s Data
Our services are engineered strictly for commercial organizations, enterprise operators, founders, and professionals aged 18 and older. We do not intentionally solicit or collect personal information from individuals under the age of 18. If we discover that personal data of a minor has been inadvertently submitted, we will immediately remove it from our systems.
12. Updates to this Policy
We review and update this Privacy Policy periodically to reflect technological changes, new service capabilities, and evolving legal frameworks. When updates occur, we revise the "Last Updated" timestamp at the apex of this document. Continued engagement with Modern X Webs following posted revisions constitutes acceptance of the modified terms.
13. Contact & Grievance Redressal
In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 of India, queries, concerns, or grievances concerning data handling may be escalated directly to our Data Protection Lead:
Entity: Modern X Webs
Attention: Privacy & Grievance Officer
Email: [email protected]
Operating Headquarters: India (Serving clients globally)
Response Timeline: Within 48 hours for acknowledgment; resolution within 30 days.