Privacy Policy

This policy explains what personal information Xeflux Creative Studios (OPC) Private Limited ("Xeflux", "we", "us") collects when you use xeflux.com or place an order, how we use it, and the choices you have. We follow India's applicable data-protection law, including the Digital Personal Data Protection Act, 2023.

1. What we collect

• Order & contact details — your name, delivery address, phone number, and email, so we can fulfil and deliver your order.
• Your uploaded designs — artwork or files you send us to print.
• Payment information — processed securely by our payment provider. We do not store your full card number or UPI PIN on our servers.
• Account details — if you create an account, your login email and order history.
• Messages — what you write to us through the enquiry form, the website chat assistant, WhatsApp or Instagram, along with your phone number or profile name on those apps.
• Packing and claim evidence — video and photos of your parcel being packed and sealed, your design approval record, courier delivery records, and any unboxing video or photos you send us when you raise a claim.
• Usage data — basic technical information (like device and pages visited) to keep the site working and secure.

2. How we use it

• To process, print, and deliver your orders.
• To send order updates and respond to your questions (including on WhatsApp).
• To handle returns, refunds, and grievances — including checking claims against our packing and delivery records, preventing fraud, and defending payment disputes.
• To improve our products and website, and to keep the site secure.
• To meet legal, tax, and accounting obligations.

How long we keep evidence: packing videos and photos for 180 days after delivery; the evidence for any claim or payment dispute until it is closed and for up to 3 years afterwards. We use these only for your order, claims, disputes and legal requirements.

We only send marketing messages if you've agreed to them, and you can opt out at any time.

3. Your uploaded designs

We use the designs you upload solely to produce your order. We do not sell your artwork or use it for our own marketing without your permission. We keep order files for up to 12 months after your last order in case you reorder, after which they are deleted. You can ask us to delete them sooner (see section 7).

4. Chat assistant and messaging

Our website chat assistant ("XI") and our WhatsApp and Instagram messages are answered by an automated AI assistant, with our team stepping in when needed. The messages you send there, and your phone number or profile name on those apps, are stored so we can answer you and follow up on your order. We keep chat history for up to 12 months. To produce a reply, the text of your message is sent to our AI provider, DeepSeek, whose servers are outside India. Please don't share card numbers, UPI PINs, OTPs or passwords in any chat. WhatsApp and Instagram are run by Meta Platforms and have their own privacy policies.

5. Who we share it with

We share only what's necessary, only with:

• Courier partners — your name, address, and phone number, to deliver your order.
• Payment providers — to process your payment securely.
• Service providers — hosting, IT, messaging, analytics (Google Analytics) and AI-assistant providers (DeepSeek) who help us run the site and answer your messages, under confidentiality obligations.
• Creative World — our gifting partner, for hamper, bouquet and wedding orders only: the details needed to prepare your order.
• Authorities — where required by law.

We never sell your personal information to third parties.

6. How we protect it

We use reasonable security measures to protect your information, including secure connections (HTTPS) and restricted access. No method is 100% secure, but we take protection seriously and act quickly if an issue arises.

7. Your rights

You can ask us to:

• See what personal information we hold about you.
• Correct information that's wrong or out of date.
• Delete your information, where we're not required to keep it by law.
• Withdraw consent for marketing at any time.

To make a request, email support@xeflux.com. We'll respond within the timelines required by law.

8. Cookies

We use essential cookies to keep the site working (like remembering your cart and session). We also use analytics to understand how the site is used: Google Analytics (provided by Google), and our own first-party visitor cookie that records which pages and products are viewed and which buttons are clicked. This data is used to improve the site and does not identify you by name. We don't run advertising or cross-site tracking cookies.

You can block or delete cookies in your browser settings, or install Google's Analytics opt-out add-on. The site still works without analytics.

9. Children

Our services are intended for adults. We don't knowingly collect personal information from children without appropriate consent.

10. Contact & grievances

For any privacy question or complaint, contact: