Privacy Policy
In short: XpertApps, operated by QuoDroid Software Development Private Limited, collects the details you send us: enquiries, newsletter sign-ups, bookings and job applications. It also keeps a standard server access log when you browse (IP address, page, referring page, browser and time), deleted after 90 days. A separate log keeps only the country each request came from, without the IP address, for 14 days. We use the logs and our cookieless events for counts, security and fixing errors, never to identify you. XpertApps does not sell, trade, or rent your personal information to third parties.
Effective date:
Last updated:
1. Introduction
XpertApps ("we," "our," or "us") is operated by QuoDroid Software Development Private Limited. This Privacy Policy describes how we collect, use, and share information when you visit our website at xpertappdev.com or engage with our services. QuoDroid Software Development Private Limited, Kolkata, India, is the controller of your personal data, called the data fiduciary under India's law.
2. Information We Collect
Information You Provide
We collect information you voluntarily provide to us, including:
- Your name, work email, company, subject and message when you send the contact form, and what best describes you, if you choose to say
- What best describes you, if you answer that optional question before the Store App Planner’s first question. We count the answers and never link one to your plan.
- Your email address, and any first name you give, when you subscribe to the newsletter
- The details you enter on Calendly when you book a call
- Your name, email address and note, with any LinkedIn profile or CV link in it, when you send us your profile through the careers form
- If you take our AI interview: your name, email address, phone number if you give it, LinkedIn profile, years of experience and earliest start date, the time and time zone you book, and your answers
- Company name and project details shared during consultations
- Any other information you choose to provide in communications with us
Enquiries Through the Contact Form
We use what you send through the contact form to reply to your enquiry. The form also sends any labels in the contact page's address, such as a plan name, so we can see which pages lead to enquiries. If you say what best describes you, we also count that choice. If you come from the Store App Planner, the form puts a summary of your plan in the message, and you can edit it first.
Our own server, which runs on Amazon Web Services in Mumbai, sends the form to our Microsoft 365 mailbox through Amazon SES and keeps no copy. Our legal basis is taking steps you ask for before a contract, or our legitimate interest in answering enquiries. Our mailbox keeps your enquiry as long as we need it to answer you and record any work that follows. You can ask us to delete it at any time.
Before sending it, the server asks an AI model, Anthropic’s Claude, run by Amazon Bedrock in India, whether the message looks like spam. Bedrock keeps no copy and does not pass it to Anthropic, and neither company uses it to train AI models. A message marked as spam still reaches our mailbox, in a separate folder, so the check never deletes anything. Our legal basis is our legitimate interest in keeping unsolicited sales messages and automated spam out of our inbox.
The Newsletter
If you subscribe, we use your email address, and any first name you give, only to send the newsletter. Buttondown sends it for us and processes your details in the United States, under the EU standard contractual clauses and the UK Addendum. The form also passes Buttondown any labels in the page's address, showing which link you followed.
Our legal basis is your consent. We keep your subscription until you unsubscribe, which you can do from any issue or by emailing us. To have your address deleted as well, just ask.
Job Applications and Our AI Interview
If you send us your profile through the careers form, we use your name, email address and note, with any links in it, to consider you for roles and to reply. The form travels as an enquiry does: our own server in Mumbai has the AI model check it for spam, then sends it to our Microsoft 365 mailbox and keeps no copy.
If you take our AI interview, RecruiterAI, our own interview system, records those details, your IP address when you apply, and the whole interview: what you and the interviewer wrote, with the times, how long it took, how often you switched away from the page, and your browser and device. It runs on Amazon Web Services in Mumbai and emails the report and transcript to our hiring mailbox.
An AI model, Anthropic’s Claude, run by Amazon Bedrock in the United States, asks the questions, then scores your answers in six areas and writes a report for our team, including how fast long answers arrived. Bedrock keeps no copy and does not pass your answers to Anthropic, and neither company uses them to train AI models. The interview pages load their typeface from Google Fonts, so Google sees your IP address and browser, but nothing you type.
Some applications are declined automatically, with no person involved, and we email you if that happens. It happens when your scores fall below our bar, or when long answers arrived unusually fast and gave little detail we could check. Neither rule applies if your interview was cut short or the assessment is marked low-confidence: a person decides instead. If you leave the interview page three times it stops, and that is not a decline. To have a person review an automatic decline, give your view or contest it, email support@xpertappdev.com.
Our legal basis is taking steps you ask for before a possible employment contract, and our legitimate interests in assessing applicants and keeping the interview fair. You don’t have to give us these details, but we can’t consider you without them. We keep your application and interview for 12 months after we receive them, then delete them, unless you join us or the law requires us to keep them. Tell us at any time that you no longer want to be considered, or ask us to delete them sooner.
Information Collected Automatically
When you visit our website, we may automatically collect certain information, including:
- Browser type and version
- Operating system
- Pages visited and time spent on the site
- Referring website or source
- IP address, recorded with the page, referring page, browser and time in a standard server access log that is deleted after 90 days
- The country your connection comes from, which our content delivery network works out from your IP address. It is kept in a separate log without the IP address and deleted after 14 days.
- Events from our own script, such as a button click or how far you scrolled, never what you type into a form. Our Cookie Policy lists every event.
3. How We Use Your Information
We use the information we collect to:
- Respond to your enquiries, arrange calls and provide requested services
- Send you the newsletter, if you subscribe
- Consider your job application, including through our AI interview
- Count, in aggregate, how our website is used, so we can improve it
- Keep the website secure and working, including filtering automated traffic and fixing errors
- Comply with legal obligations
We do not use the logs or events to identify or follow individual visitors, and we do not use your data for advertising. Our only profiling is the AI interview’s assessment of applicants, described above.
4. Legal Bases and Retention
The table below gives the legal basis for each use of your data under UK and EU law, and how long we keep it.
| Purpose | Legal basis | How long we keep it |
|---|---|---|
| Replying to an enquiry or a booking | Steps you ask us to take before a contract. Otherwise, our legitimate interest in answering business enquiries. | Our mailbox and calendar keep it as long as we need it to answer you and record any work that follows. The form’s server keeps no copy. |
| Checking contact-form messages for spam | Our legitimate interest in keeping unsolicited sales messages and automated spam out of our inbox | The check keeps nothing. The message itself is kept as for any enquiry. |
| Considering a job application, from the careers form or our AI interview | Steps you ask us to take before a possible employment contract, and our legitimate interests in assessing applicants and keeping the interview fair | 12 months after we receive it, then deleted, unless you join us or the law requires us to keep it. The form’s server keeps no copy. |
| Sending the newsletter | Your consent, which you can withdraw at any time | Until you unsubscribe, or until you ask us to delete it |
| Server logs: keeping the site secure, fixing errors, filtering automated traffic and counting use | Our legitimate interests in keeping the site secure and working, and in knowing, in aggregate, how it is used | 90 days, then deleted automatically |
| Measurement events from our script | Our legitimate interest in understanding, in aggregate, how the site is used, so we can improve it. In the UK, the Privacy and Electronic Communications Regulations allow this for statistics, as you can opt out. | 90 days, as part of the server logs. Totals derived from them, with no IP address or browser details, are kept. |
| Counting page views by broad region: India, the UK, the US and Canada, Europe, and the rest of the world | Our legitimate interest in knowing, in aggregate, where our readers are. We count only page views our script reports, so opting out leaves you out, and never by city. | 14 days for the country log. Totals by region and day, with no IP address, are kept. |
| Error reports from our script (missing pages and script errors) | Our legitimate interest in keeping the site working. Under the UK rules, detecting faults is strictly necessary, so it needs no consent. | 90 days, as part of the server logs |
| Your opt-out and your plan, kept in your browser | Your opt-out never leaves your browser, and your plan reaches us only in a form you send. Keeping your own choices for a feature you use is strictly necessary, so it needs no consent. | Local storage until you clear it; session storage until you close the tab |
| Meeting our legal obligations | Legal obligation | As long as the law requires |
Under India's Digital Personal Data Protection Act 2023, you give us enquiry details voluntarily so we can reply, and job applicants give us theirs, including their interview answers, so we can consider them. The newsletter relies on your consent.
5. Who Receives Your Data
We do not sell, trade, or rent your personal information to third parties. These service providers handle it for us:
- Amazon Web Services (AWS) – hosts this website, delivers it through its CloudFront network and stores our server logs, and runs the contact form’s server, which sends your enquiry to our mailbox through Amazon SES without keeping a copy. Through Amazon Bedrock, it also runs the AI model that checks each form message for spam, without keeping the message or passing it to the model’s maker, Anthropic. It receives every request you make to the site. It also runs RecruiterAI, our AI interview system, and through Bedrock the AI model that interviews you, on the same terms.
- Microsoft 365 – hosts our email, including the mailboxes where enquiries, job applications and interview reports arrive.
- Buttondown – sends our newsletter. It receives your email address and any first name you give.
- Google Fonts – serves the typeface on our AI interview pages, so it receives your IP address and browser when you open them.
- Calendly – runs the booking pages that our Calendly links open. Those pages run under Calendly's own terms and privacy policy. We receive the details you enter when you book. Our links pass Calendly labels naming the page and link you used, so we can see which pages lead to bookings.
We may also share information when required by law or to protect our legal rights, or with your explicit consent. We share nothing with advertisers or analytics companies.
6. Where It Is Processed
We are based in Kolkata, India. Our service providers process your data in these places:
- AWS stores this website and its server logs, and runs the contact form, in its Mumbai region, in India. The spam check runs in its Mumbai or Hyderabad region, also in India. RecruiterAI stores interviews in Mumbai, and the AI interview’s model runs in AWS’s United States regions, under AWS’s data processing terms, which include the EU standard contractual clauses and the UK Addendum. CloudFront delivers each page from an AWS location near you, which may be in another country.
- Microsoft 365 holds our mailboxes under our account, which is registered in India.
- Buttondown processes your details in the United States, under the EU standard contractual clauses and the UK Addendum.
- For Calendly, see Calendly's own privacy policy.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.
8. Cookies
This website sets no cookies of its own and uses no third-party analytics service. We measure usage ourselves, without cookies, and store nothing on your device for analytics. If you opt out, your choice is kept in your browser's local storage. A plan you take from the Store App Planner to the contact form waits in your browser's session storage until you close the tab.
Our web server also keeps a standard access log, which includes IP addresses and is deleted after 90 days. A second log keeps each request’s country, with no IP address, for 14 days. Our Cookie Policy sets all of this out in full, including every event our script sends. To opt out of measurement, use the button in the footer of any page. We honour the Global Privacy Control and Do Not Track browser signals automatically.
9. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies.
10. Your Rights
Under UK and EU data protection law you have these rights, some of which apply only in certain cases:
- To access the personal data we hold about you
- To have inaccurate data corrected
- To have your data erased
- To restrict how we use it
- To receive data you gave us in a portable format
- To object to any use of it that relies on our legitimate interests
- To withdraw your consent at any time, where we rely on it
To object to measurement, use “Opt out of measurement” in the footer of any page, or in our Cookie Policy. It takes effect at once. To stop the newsletter, use the unsubscribe link in any issue. To object to anything else, such as our server logs, email us. Apart from the AI interview’s automatic declines, described above, we make no decisions about you by automated means.
To make a request, email support@xpertappdev.com. We answer within one month, and may first ask you to confirm who you are.
To complain about how we handle your data, email us at the same address. We acknowledge complaints within 30 days. In the UK, you can also complain to the Information Commissioner's Office (ICO), at ico.org.uk. In the EU, you can complain to the supervisory authority where you live or work.
If you are in California, you may have rights to know, correct and delete your data. We do not sell or share personal information, as California law defines those terms.
India: Privacy Contact and Grievances
Under India's Digital Personal Data Protection Act 2023, you can ask what data we hold about you, and have it corrected or erased. You can also nominate someone to exercise these rights if you die or cannot act, and you can raise a grievance. Our privacy contact is support@xpertappdev.com, and we answer within one month. If our answer does not resolve your grievance, you can complain to the Data Protection Board of India.
11. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on this page with a revised effective date.
13. Contact Us
If you have any questions about this Privacy Policy, or want to use any of your rights, please contact us at:
QuoDroid Software Development Private Limited
Kolkata, India
Email: support@xpertappdev.com
Website: xpertappdev.com