Privacy Policy

Metaxu One Private Limited

Effective Date: 06/07/2026 Last Updated: 06/07/2026

Metaxu One Private Limited ("Metaxu One", "Company", "we", "us", or "our"), a company incorporated under the laws of India and having its registered office in Mumbai, Maharashtra, India, is committed to protecting the privacy and personal data of individuals who interact with our website, products, services, applications, platforms, and business operations.

This Privacy Policy explains how we collect, use, process, store, disclose, transfer, and protect personal data in compliance with applicable laws, including:

India's Digital Personal Data Protection Act, 2023 (DPDP Act)
The General Data Protection Regulation (GDPR) of the European Union, where applicable
The UK GDPR and Data Protection Act 2018, where applicable
Other applicable international privacy and data protection requirements relevant to our operations

Although Metaxu One Private Limited is established and operated from Mumbai, India, this Privacy Policy is designed to provide a high standard of privacy protection to all users globally.

1. Identity of the Data Fiduciary / Data Controller

For purposes of applicable privacy laws:

Metaxu One Private Limited Mumbai, Maharashtra, India

Email: privacy@metaxuone.com

Where required under applicable law, Metaxu One Private Limited acts as the "Data Fiduciary" under the DPDP Act and the "Data Controller" under GDPR and similar laws.

2. Scope of this Privacy Policy

This Privacy Policy applies to:

Visitors to our website
Customers and prospective customers
Business partners and vendors
Users of our applications and services
Individuals communicating with us
Individuals whose information is provided to us in connection with our business operations

This Privacy Policy does not apply to third-party websites, products, or services that may be linked from our website.

3. Personal Data We Collect

We may collect the following categories of personal data:

A. Identity Information

Full name
Username
Profile information
Government-issued identifiers (only when legally required)

B. Contact Information

Email address
Phone number
Postal address
Business contact details

C. Account Information

Login credentials
User preferences
Authentication information

D. Transaction Information

Purchase records
Billing information
Subscription details
Payment status

Note: Payment card information is generally processed by authorized payment service providers and is not stored by Metaxu One unless specifically required.

E. Technical Information

IP address
Browser type and version
Device identifiers
Operating system
Network information
Log files

F. Usage Information

Website interactions
Service usage patterns
Session data
Clickstream information
Feature engagement data

G. Marketing Information

Communication preferences
Newsletter subscriptions
Consent records
Marketing engagement data

H. Customer Support Information

Support requests
Correspondence records
Feedback
Complaint details

4. Sensitive Personal Data

Metaxu One does not intentionally collect sensitive personal data unless:

Required by law
Necessary for providing requested services
Explicitly provided with valid consent
Permitted under applicable legal requirements

Where sensitive personal data is processed, we implement enhanced safeguards and process such data only for legitimate and lawful purposes.

5. How We Collect Personal Data

We collect personal data through:

Direct Collection

When you register an account, contact us, purchase products or services, submit forms, subscribe to communications, or participate in surveys or events.

Automated Collection

Through cookies, analytics technologies, server logs, website monitoring tools, and similar technologies.

Third-Party Sources

We may receive information from business partners, service providers, payment processors, publicly available sources, and social media platforms where legally permitted.

6. Purposes of Processing

We process personal data for service delivery, business operations, security, communications, legal compliance, and analytics and improvement.

7. Legal Basis for Processing

Where GDPR or similar laws apply, we process personal data based on one or more of the following legal grounds: consent, contractual necessity, legal obligation, and legitimate interests.

Such processing is balanced against individual rights and freedoms.

8. Consent Management

Where consent is required:

Consent will be obtained through clear and affirmative action
Consent may be withdrawn at any time
Withdrawal of consent does not affect prior lawful processing

To withdraw consent, contact: privacy@metaxuone.com

9. Children's Privacy

Our services are not directed toward children unless specifically stated. Where processing involves children and applicable law requires parental or guardian consent, we will obtain verifiable consent before processing such data.

10. Cookies and Tracking Technologies

We use cookies and similar technologies for website functionality, security, analytics, performance optimization, and user preferences.

Users may manage cookie preferences through browser settings or consent management tools provided on the website.

11. Disclosure of Personal Data

We may disclose personal data to service providers, professional advisors, regulatory authorities, and in connection with corporate transactions. Recipients are contractually required to maintain appropriate confidentiality and security standards.

12. International Data Transfers

Metaxu One Private Limited is based in Mumbai, India. Personal data may be processed or stored in India or other jurisdictions where our service providers operate. Where international transfers occur, we implement appropriate safeguards including contractual protections, data processing agreements, security controls, and lawful transfer mechanisms recognized under applicable regulations.

13. Data Security

We implement reasonable technical, organizational, and administrative safeguards, including encryption, access controls, authentication mechanisms, network security measures, monitoring and logging, secure development practices, and vendor security assessments.

While we strive to protect personal data, no method of transmission or storage can be guaranteed to be completely secure.

14. Data Retention

We retain personal data only for as long as necessary to provide services, fulfill contractual obligations, meet legal requirements, resolve disputes, enforce agreements, and protect legitimate business interests. Upon expiration of retention requirements, data will be securely deleted, anonymized, or irreversibly de-identified where feasible.

15. Rights of Individuals

Subject to applicable law, individuals may have the right to access, correction, erasure, restriction, objection, data portability, withdraw consent, and grievance redressal. We may require identity verification before responding to requests.

16. Rights under the Digital Personal Data Protection Act, 2023

Where applicable under Indian law, Data Principals may exercise rights including the right to access information about personal data processing, right to correction and erasure, right to grievance redressal, and the right to nominate another person to exercise rights in accordance with applicable law.

17. Grievance Redressal Officer

In accordance with applicable Indian laws, including the DPDP Act, users may contact our Grievance Officer:

Grievance Officer Metaxu One Private Limited Mumbai, Maharashtra, India

Email: grievance@metaxuone.com

We will make reasonable efforts to acknowledge and address grievances within applicable legal timelines.

18. Automated Decision-Making and Profiling

Metaxu One does not make decisions producing legal or similarly significant effects solely through automated processing unless authorized by law, necessary for service delivery, or supported by appropriate safeguards. Where applicable, individuals may request human review.

19. Third-Party Services

Our website and services may integrate with third-party providers. Such providers may have independent privacy policies and data processing practices. Metaxu One is not responsible for the privacy practices of independent third parties.

20. Data Breach Response

In the event of a personal data breach, we will assess the nature and impact of the incident, implement containment and remediation measures, notify affected individuals where required by law, and notify relevant regulatory authorities where legally required.

21. Do Not Track Signals

Some web browsers may transmit "Do Not Track" signals. Because no uniform industry standard currently exists for such signals, our systems may not respond to all Do Not Track requests. Users may manage privacy preferences through browser settings and cookie controls.

22. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through website notices, account notifications, and email communications where appropriate.

23. Contact Us

For privacy-related questions, requests, or complaints, please contact:

Metaxu One Private Limited Mumbai, Maharashtra, India

Privacy Contact: privacy@metaxuone.com Grievance Officer: grievance@metaxuone.com

Jurisdiction and Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising from or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts located in Mumbai, Maharashtra, India, except where mandatory consumer or data protection laws of another jurisdiction provide otherwise.