• SaaS CRM platforms — TargetCRM (targetcrm.cloud) and EngiFlow360 (engiflow360.com)
• Technology consulting, implementation, and solution architecture
• Business process automation and digital transformation
• Social media management, content marketing, and brand strategy
• Data protection advisory and compliance consulting

This Privacy Policy explains how ECS collects, uses, stores, shares, and protects personal data when you visit xexcellence.com, engage our consulting services, attend our events, or communicate with us through any channel.

2.1 Information You Provide Directly

• Contact details: name, email address, phone number, designation, company name
• Inquiry and project details submitted via contact forms or email
• Business documents, briefs, or proposals shared during engagements
• Billing and payment information (processed via third-party payment gateways)
• Feedback, testimonials, and survey responses

2.2 Information Collected Automatically

• IP address, browser type, device type, and operating system
• Pages visited, time spent, referral URLs, and click paths on xexcellence.com
• Cookies and similar tracking technologies (see Section 8)
• Social media interactions on our official profiles on X (Twitter), LinkedIn, and other platforms

2.3 Information from Third Parties

• Business contact data from LinkedIn, professional directories, or referral partners — for B2B outreach only
• Lead information from Meta Lead Ads, LinkedIn Lead Gen Forms, IndiaMart, or Trade India — only for clients who have authorised ECS to manage their campaigns
• Public information from your company website for proposal preparation

2.4 Information from Our SaaS Products

When ECS provides TargetCRM or EngiFlow360 implementation or management services, we may process client CRM data on your behalf as a data processor. The client remains the data controller and our processing is governed by a separate Data Processing Agreement (DPA). 

3.1 Service Delivery

• Responding to inquiries, preparing proposals, and delivering consulting engagements
• Managing client projects, timelines, and deliverables
• Processing payments and issuing invoices

3.2 Business Communications

• Sending service updates, project status reports, and meeting summaries
• Newsletters and thought leadership content (with consent)
• Event invitations, webinars, and product launches
• Auto-posting to our social media accounts via X API integration for brand content

3.3 Legal and Compliance

• Complying with Indian law including the IT Act 2000 and DPDP Act 2023
• Fulfilling GDPR obligations for contacts in the European Economic Area
• Responding to lawful requests from government authorities

3.4 Analytics and Improvement

• Understanding how visitors use xexcellence.com to improve content and user experience
• Measuring the effectiveness of our marketing campaigns
• Conducting internal business analytics and forecasting

For individuals in the European Economic Area (EEA), we process personal data on the following legal bases:

• Contract performance: to fulfil our obligations under consulting agreements
• Legitimate interests: for direct B2B marketing, security, and fraud prevention
• Legal obligation: to comply with applicable laws and regulations
• Consent: for optional newsletters, marketing emails, and non-essential cookies

ECS does not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party vendors who process data on our behalf:

• Cloud infrastructure: CloudPanel VPS and hosting providers
• CRM platforms: TargetCRM, EngiFlow360 (vTiger-based)
• Email and communication: Brevo (Sendinblue), Mailchimp, Microsoft 365, Google Workspace
• Social media APIs: Meta (Facebook/Instagram), X (Twitter) API, LinkedIn API
• Lead platforms: IndiaMart API, Trade India API
• WhatsApp Business API for client communication
• AI services: Anthropic API for AI-powered features within our SaaS products

All vendors are bound by contractual data protection obligations and are prohibited from using your data for their own purposes.

5.2 Business Transfers

If ECS undergoes a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. We will notify you in advance of any such transfer.

5.3 Legal Requirements

We may disclose your data where required by law, court order, or government authority, or where necessary to protect the rights, property, or safety of ECS, our clients, or the public.

ECS is based in India. When we transfer personal data outside India, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Binding corporate rules or equivalent mechanisms

For data transfers under the DPDP Act 2023, we comply with cross-border transfer restrictions as notified by the Government of India.

xexcellence.com uses cookies and similar technologies to enhance your experience. Categories of cookies we use:

• Essential cookies: required for the website to function — cannot be disabled
• Analytics cookies: help us understand how visitors use the site (Google Analytics or equivalent)
• Marketing cookies: used to measure campaign effectiveness — enabled only with consent

You can manage cookie preferences through your browser settings or our cookie consent banner. Disabling non-essential cookies will not affect your ability to use the website.

ECS uses the X Developer API under our developer account (Excellence Consultancy Services) to schedule and publish brand content to our official accounts: @ChinmayGoswami1, @targetcrm_cloud, and @EngiFlow360.

Our X API usage is strictly limited to:

• Publishing original marketing content created by our team
• Reading engagement metrics for our own accounts (impressions, follower growth)
• Internal analytics dashboards within TargetCRM and EngiFlow360

To exercise any of these rights, contact us at legal@xexcellence.com. We will respond within 30 days (or such shorter period as required by applicable law).

ECS implements appropriate technical and organisational measures to protect your personal data:

• Encrypted data transmission (HTTPS/TLS) across all our platforms
• Secure API key management and JWT-based authentication on our servers
• Role-based access controls within our CRM platforms
• Regular security assessments of our CloudPanel VPS infrastructure
• Staff training on data protection obligations

In the event of a personal data breach likely to result in high risk to your rights, we will notify you and relevant supervisory authorities as required by applicable law.

Our services are intended for business professionals and are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly.

xexcellence.com may contain links to third-party websites including partner platforms, client sites, and social media profiles. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by:

• Posting the updated policy at xexcellence.com/privacy-policy with a revised effective date
• Sending an email notification to active clients and subscribers

Your continued use of our services after the effective date constitutes acceptance of the updated policy.