xorkeesign app-privacy policy

Odyssey Technologies Limited ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. xorkeesign enables users to digitally sign email communications, providing cryptographic authenticity and guarantee of integrity across supported mail platforms. By downloading, installing, or using the App, you agree to the terms described in this Privacy Policy.

xorkeesign adheres to the highest standards of privacy, data protection, and compliance in the countries where it operates. We are committed to:

• Handling personal data in accordance with applicable laws, including the Digital Personal Data Protection Act, 2023 (India), and international standards such as the General Data Protection Regulation (GDPR), where these apply.
• Ensuring transparency in how we collect, use, and process data.
• Respecting user rights, including the right to access, delete, or correct personal data, as required by law.
• Implementing strong security measures to protect data both in transit and at rest, as applicable.

Our services are structured to minimize data collection to only what is necessary for the scope of services and we design our processes to automatically align with global regulations as we expand into new markets.

This Privacy Policy explains how we collect, use, store, and safeguard your information via the xorkeesign application ("App") and related services.

1. Data We Collect

• Information You Provide: Your email ID and public key. Your private key always stays on your device and is never uploaded or accessed by us.
• Automatically Collected: Timestamp of digital signatures.
• Mail Credentials & Content: Stored encrypted on your device only; not accessed or stored by us in our servers.
• OAuth tokens: Stored encrypted on your device only; not accessed or stored by us in our servers.

2. How We Use Your Data

• To apply and verify digital signatures on your emails.
• To confirm that every email is sent by the user/owner of that specific e-mail id.
• To comply with legal obligations and improve the App.
• Mail credentials and email content processed locally are never transmitted to our servers and are removed from your device on uninstallation of the App.
• OAuth tokens are exchanged between xorkeesign app and the respective email service provider over an encrypted connection, without involving the xorkeesign service.

We do not sell or share your personal data for advertising or marketing. Regardless of the country where you reside, you authorize us to transfer, process, store and use your information in countries other than your own in accordance with this Privacy Policy and to provide you with Services as outlined above.

3. Data Storage & Security

• Your data is encrypted and stored securely on our servers.
• Mail credentials, OAuth tokens and email content remain encrypted locally on your device and are deleted if you remove the email account added to the xorkeesign app or uninstall the App.

4. Use of Third-Party Mail Services

xorkeesign is compliant with standard protocols of third-party mail providers (e.g., Gmail, Outlook). We do not control these services; please review their privacy policies for details.

xorkeesign app uses OAuth to connect with certain email providers that mandate or prefer its use. xorkeesign does not collect, access, retain or store any sensitive information exchanged as a part of OAuth authentication.

5. Your Privacy Rights

You have the right to:

• Request deletion or restrict processing where applicable.
• Withdraw consent at any time.

6. Children’s Use

The App is intended for users aged 18 and above. We do not knowingly collect data from minors.

7. Policy Updates

We may update this Privacy Policy. Continued use means acceptance of changes.

8. Contact Us

If you have questions or concerns about your privacy, contact us at:
Odyssey Technologies Limited
Email: privacy@odysseytec.com
Website: www.odysseytec.com

Odyssey's general privacy policy can be found here.