Privacy Policy
Last updated: 11 July 2026 · Applies to Xeta, Kevo and Vibzy
One policy for the whole Xeta family — your Xeta Account, Kevo and Vibzy. It explains what we collect, why, who sees it, and the controls you have. Short version: we collect only what the products need, we never sell your data, and you can delete your account any time.
1. What this covers
This policy applies to xeta.in, Kevo (kevo.in), Vibzy (vibzy.in) and the shared Xeta Account that signs you in across them. The data controller is Xeta (sole proprietorship of Pushpa Chaturvedi, Greater Noida, Uttar Pradesh, India).
2. What we collect
- Account data: name, email, phone number, and a securely hashed password (we can never read your actual password).
- Content you create: the websites, pages and store items you build on Kevo; the posts, stories, reels and messages you share on Vibzy.
- Transaction data: plan, amount, and payment status for Kevo purchases. Payments are processed by PayU — we never see or store your full card number, CVV or UPI PIN.
- Usage & device data: log data such as IP address, browser/device type, pages visited and actions taken — used for security, debugging and improving the products.
- Support messages you send us via forms or the Kevo AI assistant.
3. How we use it
- To provide and operate the services — including one sign-in across Kevo and Vibzy via your Xeta Account.
- To process payments, send receipts and renewal reminders.
- To keep the platforms safe: fraud prevention, spam control and content moderation on Vibzy.
- To improve features and fix problems, using aggregated or de-identified usage data where possible.
- To send service communications (security alerts, billing, important changes). Marketing emails are optional and have an unsubscribe link.
We do not sell your personal data. Ever.
6. Retention & deletion
- We keep data while your account is active or as needed to provide the services.
- Delete your Xeta Account any time from product settings or by contacting us — deletion covers Kevo and Vibzy together. Data is removed within 30 days (up to 90 days for encrypted backups).
- Transaction records are retained as required by Indian tax and accounting law.
7. Your rights & grievance redressal
You can access, correct, download or delete your data — most of it directly in product settings, the rest by writing to us. In line with India's IT Rules and the DPDP Act, our Grievance Officer (Pushpa Chaturvedi, Proprietor — reachable via the Contact page) acknowledges complaints within 48 hours and resolves them within statutory timelines.
8. Security
All traffic is encrypted in transit (TLS/SSL), passwords are hashed with modern algorithms, access to production systems is restricted and logged, and payment data stays with PCI-compliant PayU. No system is 100% secure — if a breach affects you, we'll notify you and the authorities as the law requires.
9. Children
Xeta services are for users 13 and older; purchases require you to be 18+ or have a guardian's consent. If we learn we've collected data from a child under 13, we delete it.
10. Changes
We'll update this policy as the products evolve. Significant changes are announced in-product or by email before they take effect; the "last updated" date always reflects the current version.
Questions about this policy? Reach us via the Contact page — Xeta · Proprietor: Pushpa Chaturvedi · Greater Noida, Uttar Pradesh, India.