Privacy Policy

Last updated: August 19, 2026

This Privacy Policy explains how XpertXYZ ("Company", "we", "us") collects, uses, and protects information in connection with the XpertAR platform and the companion XpertAR Android application (together, the "Service"). By using the Service, you agree to the practices described below.

1. Information We Collect

• Account information: name, email address, phone number, and address provided by Editors when their account is created.
• Uploaded content: image targets and overlay videos that Editors upload to create AR experiences.
• AR view analytics: aggregate view counts, visitor IP addresses, and user agent strings recorded when an AR link or QR code is opened.
• Website usage analytics: we use Google Analytics on our public home page and on the signed-in dashboard to record which pages are viewed, which links are clicked, and which actions are taken (for example contacting us on WhatsApp, creating an AR item, or purchasing credits). See section 4 below.
• We do not collect payment card details directly; credit purchases are handled through the platform administrator.

2. XpertAR Android Application & Camera Access

• The XpertAR App requests camera access solely to detect image targets and render AR video overlays in real time.
• The App does not collect, store, or transmit any personal data, photos, or camera footage. Camera frames are processed on-device for AR tracking only and are never uploaded or saved.
• The App requires an active internet connection to download AR target files (.mind files) and video content associated with a scanned link or QR code.

3. How We Use Information

• To provide, operate, and maintain the Service, including hosting and serving AR content.
• To manage Editor accounts, credits, and billing.
• To monitor view analytics for AR content so Editors can see engagement with their links.
• To understand how the dashboard is used in aggregate so we can fix problem areas and decide what to build next. We do not use this to make automated decisions about you, and we do not use it for advertising.
• To detect, prevent, and address technical issues, abuse, or violations of our Terms.

4. Cookies & Google Analytics

Essential cookies. We set a session cookie and a security (CSRF) token cookie when you sign in. These are required for the Service to work and cannot be turned off while you are logged in.

Analytics cookies. The signed-in dashboard uses Google Analytics 4, provided by Google, to help us understand how Editors use the platform and where they run into difficulty. It sets first-party cookies (named _ga and _ga_<id>) that hold a randomly generated identifier used to recognise a returning browser.

• What we send: the pages you visit, the actions you take (such as creating a single or album, upgrading an item, downloading a QR code, or completing a credit purchase and its rupee value), your approximate location, and general device and browser information. We attach your numeric account ID and your role (Editor or admin) so that activity can be linked across your own sessions.
• What we never send: we do not transmit your name, email address, phone number, address, customer names, or any uploaded image or video to Google. The numeric account ID is meaningless outside our own database.
• Where it runs: on our public home page (including visits arriving from advertisements or social media) and on the signed-in dashboard.
• Where it does not run: Google Analytics is not present on AR viewer pages, so people who simply scan a QR code or open an AR link shared by an Editor are not tracked by Google through us — only the aggregate view counts described in section 1 are recorded. It is also not present in the XpertAR Android App, which uses no analytics SDK at all.
• Advertising campaigns: when you reach our home page from an advertisement, the link may carry campaign tags in the web address (for example the platform and campaign name) so we can tell which campaign brought you. These tags describe the advertisement, not you.
• IP addresses: Google uses the IP address to derive an approximate location and does not log or store it as part of Google Analytics 4 data.
• Google's role: Google processes this data on our behalf as our analytics provider and may store and process it on servers outside India. Its handling of that data is governed by the Google Privacy Policy and Google's business data terms.
• How to opt out: you can block or delete these cookies in your browser settings, or install the Google Analytics Opt-out Browser Add-on. Blocking analytics cookies does not affect your ability to use the Service. You may also email us to request that we exclude your account from analytics.
• We do not use these cookies for advertising, we do not run ad networks on the Service, and we do not combine analytics data with any advertising profile.

5. How We Share Information

• We do not sell your personal data to third parties.
• We share dashboard usage data with Google as our analytics provider, on the limited terms described in section 4.
• Uploaded images, videos, and generated AR experiences are made accessible via unique public links and QR codes; anyone with the link can view that content.
• We use third-party infrastructure providers (such as cloud hosting and storage services) to store and deliver AR assets. These providers process data only on our behalf and under our instructions.
• We may disclose information if required by law or to protect the rights, property, or safety of XpertXYZ, our users, or the public.

6. Data Retention

• Account information and uploaded content are retained for as long as the account remains active.
• We may remove content that violates our Terms or remains inactive for an extended period.
• Upon account termination, uploaded content may be deleted and is not recoverable.
• Google Analytics data is retained for the period configured in our Google Analytics account, after which Google deletes the user-level records; aggregate reports may persist beyond that. The analytics cookies described in section 4 expire on their own, and you can delete them from your browser at any time.

7. Data Security

We take reasonable technical and organizational measures to protect information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Responsibilities

If you are an Editor uploading photos or videos of your customers, you are responsible for obtaining any necessary consent from those individuals before uploading their content to the Service.

9. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

10. Your Rights & Data Deletion

• You may request access to, correction of, or deletion of your account information and uploaded content by emailing admin@xpertxyz.in with the subject "Data Deletion Request".
• Editors can also delete their own uploaded content at any time directly from their dashboard.
• You may ask us to stop including your account in dashboard analytics, or to delete the analytics records associated with your account ID, using the same email address. You can also opt out yourself at any time using the browser controls described in section 4.
• We process deletion requests within 30 days, except for information we are required to retain for legal, security, or fraud-prevention purposes.

11. Reporting Objectionable Content

If you encounter AR content (accessed via a link, QR code, or the XpertAR App) that is illegal, abusive, or otherwise violates our Terms & Conditions, please report it to admin@xpertxyz.in with the content link and a description of the issue. We investigate reports and remove violating content within a reasonable timeframe.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after changes are posted constitutes acceptance of the updated policy. It is your responsibility to review this policy periodically.

13. Contact Us

For questions about this Privacy Policy, contact us at admin@xpertxyz.in.