Privacy Policy – OxonShieldX

    OxonShieldX respects your privacy. This policy explains what data we collect, why we collect it, how it is used, and your rights regarding your data. We are committed to complying with applicable Indian data protection laws.
  

1. Who We Are

OxonShieldX is operated by Oxon Technology, Plot No. 1007, Huda Sector 13-17, Panipat, Haryana – 132103, India. We provide a Mobile Device Management (MDM) platform for EMI-based device financing.

Data Controller: Oxon Technology
Contact: admin@oxonshieldx.com | +91 98090 40007

2. Data We Collect

We collect two categories of data:

A. Dealer / Retailer Data

Business name, contact person name, phone number, email
Business address and GST/registration details
Login credentials (password stored in encrypted form)
Transaction and activity logs on the platform

B. Customer / End-User Data (collected by dealers and processed by us)

Full name, phone number, address
Aadhaar number (last 4 digits for verification only)
PAN number (for KYC purposes)
Photo ID documents (Aadhaar front/back, PAN card image)
Device IMEI number, device model, enrolled device details
EMI loan amount, installment schedule, payment status
Location data of enrolled device (if location tracking is enabled by dealer)

3. How We Use Your Data

Purpose	Data Used	Legal Basis
Account creation & authentication	Name, email, phone, password	Contract
Device enrollment & MDM control	IMEI, device info, customer details	Contract / Consent
EMI tracking & reminders	Loan data, phone number	Contract
Device location tracking	GPS location data	Consent (customer must be informed)
Customer KYC verification	Aadhaar, PAN, photo	Legal obligation
Platform security & fraud prevention	Login logs, IP address	Legitimate interest
Customer support	Account & device info	Contract

4. Data Sharing

We do not sell your data to third parties. Data may be shared only in the following cases:

Service Providers: Cloud hosting, SMS gateway, email delivery providers who process data on our behalf under confidentiality agreements.
Legal Compliance: When required by Indian law, court order, or government authority.
Business Transfer: In the event of a merger or acquisition, data may be transferred with prior notice to users.

5. Device Location Data

OxonShieldX provides device location tracking as an optional feature. Dealers must:

Inform customers in writing that location tracking may be enabled.
Use location data only for recovery of defaulted devices.
Not use location data to surveil customers for non-EMI purposes.

Location data is stored securely and is accessible only to the enrolled dealer. OxonShieldX does not use location data for advertising or profiling.

6. Document & Photo Storage

Customer KYC documents (Aadhaar, PAN, photos) uploaded by dealers are stored in encrypted form on secure servers. Access is restricted to the uploading dealer and OxonShieldX administrators. Documents are retained for the duration of the loan and up to 2 years after loan closure for compliance purposes, after which they are securely deleted.

7. Data Retention

Active accounts: Data retained as long as the account is active.
Closed loans: Customer data retained for 2 years post-closure.
Deleted accounts: Data deleted within 30 days of account closure request, except where legally required to retain.
Device logs: Retained for 90 days for security audit purposes.

8. Data Security

We implement industry-standard security measures including:

SSL/TLS encryption for all data in transit
Encrypted storage for sensitive documents and credentials
Role-based access control (dealers can only see their own customers' data)
Regular security audits and server monitoring
Automatic session timeouts and login activity logs

In the event of a data breach affecting your data, we will notify affected users within 72 hours of discovery.

9. Your Rights

As a dealer or customer whose data is processed, you have the following rights:

Access: Request a copy of the data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your data (subject to legal retention requirements).
Portability: Request your data in a structured, machine-readable format.
Objection: Object to processing of your data for specific purposes.

To exercise any of these rights, contact us at admin@oxonshieldx.com. We will respond within 30 days.

10. Cookies

The OxonShieldX website (oxonshieldx.com) uses minimal cookies for:

Session management (login state)
Security (CSRF protection)

We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect platform functionality.

11. Children's Privacy

OxonShieldX is a B2B platform intended for registered businesses. We do not knowingly collect data from individuals under 18 years of age. If you believe we have inadvertently collected such data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify registered dealers via email and update the "Last updated" date at the top of this page. Continued use of OxonShieldX after changes constitutes acceptance of the updated policy.

13. Contact & Grievance

For any privacy concerns or data requests, contact our Data Protection Officer:

Email: admin@oxonshieldx.com
Phone / WhatsApp: +91 98090 40007
Address: Plot No. 1007, Huda Sector 13-17, Panipat, Haryana – 132103

We aim to resolve all grievances within 30 days of receipt.