Last updated: March 24, 2026
Xlancr Infotech Private Limited ("Xlancr", "we", "us", or "our") is committed to protecting the privacy and personal data of all users of its platform. This Privacy Policy explains how we collect, use, store, share, and protect information when you access or use our website and services. By registering or using the platform, you acknowledge that you have read and understood this policy.
1. Information We Collect
We collect the following categories of personal information in the course of providing our services:
- Identity & Contact Information: Full name, email address, mobile number, date of birth, and profile photograph.
- Professional Information: Skills, portfolio, résumé, work history, and declared domain of expertise.
- Identity Documents: Government-issued identity documents submitted for KYC purposes (including Aadhaar card and/or PAN card). These are processed within a secure and access-restricted environment.
- Financial Information: Bank account details and GST registration number, collected for payment processing and verification, and handled by our authorised payment partners.
- Transaction Data: Payment history, invoice records, milestone data, escrow transaction records, and TDS certificates.
- Usage & Behavioural Data: Log files, IP addresses, browser type, pages visited, session duration, and interaction patterns on the platform.
- Communications: Messages, negotiation transcripts, chat records, dispute submissions, and other communications conducted through the platform.
- AI Interaction Data: Inputs and interactions with the platform's AI assistant, used to provide proposal suggestions and negotiation support.
2. How We Use Your Information
We use the information collected for the following purposes:
- Account creation, identity verification, and KYC compliance.
- Matching freelancers and clients on the platform.
- Processing payments, managing escrow accounts, and maintaining financial records.
- Providing and continuously improving our AI assistant, which processes negotiation and proposal data to generate context-aware suggestions.
- Generating invoices, GST documents, and TDS certificates.
- Conducting dispute resolution, including where necessary the review of submitted identity documents.
- Sending transactional notifications, platform updates, and support communications.
- Monitoring platform usage to detect fraud, policy violations, and suspicious activity.
- Complying with applicable legal obligations and responding to lawful requests from regulatory authorities.
3. Identity Documents & KYC Consent
As part of our mandatory KYC process, you are required to submit government-issued identity documents. By submitting these documents, you expressly consent to the following:
- Verification of your identity by Xlancr and its authorised third-party verification partners.
- Retention of your submitted documents for the duration required by applicable Indian law.
- Access to and use of your submitted documents in the event of a dispute, regulatory inquiry, or legal proceeding.
- Disclosure of a masked version of your identity details (e.g., a masked PAN number) in contracts generated on the platform.
4. Financial Data & Payment Partners
Financial information, including bank account details and payment credentials, is collected and processed exclusively through our third-party payment partners (Payment Aggregators and Payment Gateways) in accordance with applicable RBI guidelines and data security standards. Xlancr does not store your full bank account credentials on its own servers. Penny-drop verification processes are conducted with your express consent, as required during initial account setup or upon any subsequent bank account change.
5. AI Processing & Platform Interactions
Xlancr's invisible AI assistant processes negotiation transcripts, proposal content, and user interactions to provide real-time suggestions and analysis. All such data is processed within the platform's secure environment and used to improve the AI model and enhance platform functionality. We do not use your personal communications to train third-party AI models without your express consent.
6. Data Sharing & Disclosure
We do not sell your personal data to any third party. We may share your information only in the following limited circumstances:
- With third-party service providers (such as payment processors, KYC verification providers, cloud infrastructure partners, and email delivery services) who are contractually bound to protect your data and use it solely for the purposes of providing services to us.
- With law enforcement, regulatory bodies, or courts where required by applicable law or in response to a valid legal order.
- With other platform users, to the extent strictly necessary for the execution of a contract (e.g., sharing a masked PAN number).
- In connection with a business merger, acquisition, or restructuring, subject to appropriate confidentiality obligations and user notification.
7. Data Retention
We retain your personal data for as long as your account remains active and for such additional period as may be required by applicable law. In particular:
- KYC documents are retained for the minimum period prescribed under applicable Indian law.
- Financial and transactional records are retained for a period of seven (7) years in accordance with applicable accounting and tax requirements.
- Upon account deletion, personal data that is no longer required for legal or operational purposes will be deleted or anonymised within a reasonable period.
8. Data Security
We employ appropriate technical and organisational security measures — including encryption, access controls, and secure data transfer protocols — to safeguard your personal information against unauthorised access, disclosure, or misuse. However, no system is entirely impenetrable, and we cannot guarantee the absolute security of data transmitted over the internet. Users are responsible for maintaining the confidentiality of their own account credentials.
9. Your Rights
Subject to applicable law, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us through our Contact page or at support@xlancr.com.
- Right to access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request that we correct inaccurate or incomplete information.
- Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations.
- Right to data portability: You may request that your personal data be provided in a structured, machine-readable format.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
10. Cookies & Tracking Technologies
Xlancr uses cookies and similar tracking technologies to enhance user experience, analyse platform usage, and support our marketing activities. Cookies may include session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period). You may manage or disable cookies through your browser settings; however, doing so may affect the functionality of certain features of the platform.
11. Third-Party Links & Services
Our platform may integrate with or contain links to third-party websites or services (such as Google Meet for project calls). Xlancr is not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.
12. Changes to This Policy
We reserve the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users via email or in-platform notification. Continued use of the platform following the publication of an updated policy constitutes your acceptance of the revised terms. The date of the most recent revision is indicated at the top of this page.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at support@xlancr.com or through our Contact page at xlancr.com/contact. Our registered entity is Xlancr Infotech Private Limited.