Privacy Policy
Two kinds of data: what we hold about you as our customer, and what you keep in your site, which we host on your behalf.
1.Scope and roles
This policy explains what Xelent Solutions ("Xelent", "we") does with personal data on trangohub.com and in the TrangoHub sites we host. For your account, orders and billing we are the data controller. For the data inside your site — your contacts, deals, employees, payroll, invoices and messages — you are the controller and we are your processor: we store and process it only to run the Service for you.
2.What we collect about you and why
- Order and account data: your name, email, company name, chosen site address, plan and billing period. Used to build your site, run it and invoice you.
- Billing data: our invoices and payment records, and for card payments your Paddle customer and subscription identifiers and the country Paddle reports for tax. We never receive or store card or bank details; Paddle, as merchant of record, collects them under its own privacy policy.
- Support and sales messages: what you send us by email, WhatsApp, the contact form or a demo booking, so we can reply. Demo bookings are made through Calendly under its privacy policy.
- Technical data: IP address, browser and timestamps in server logs, session cookies and the standard security logs of the application. Used for security, rate limiting and fault finding.
- Marketing: the pages you visit on trangohub.com may be measured with analytics and advertising tags (see Cookies). We email product news only to customers and to people who asked for it; every email has an unsubscribe link.
3.Data inside your site
- Stored in a database that belongs to your site alone, on servers we operate, encrypted in transit and at rest, backed up daily.
- Accessed by Xelent staff only to provide support you asked for, to fix a fault, or where the law requires. Access is logged.
- Never sold, never shared with other customers, never used to train AI models or for advertising.
- Exportable by you at any time, and deleted on the schedule in our Terms when your subscription ends.
4.Legal basis
We process order, account and billing data to perform our contract with you; technical and security data in our legitimate interest of running a secure service; marketing data with your consent; and the data in your site on your instructions as your processor.
5.Who we share data with
- Paddle.com Market Ltd (UK) and Paddle.com Inc (US): checkout, invoicing, tax and refunds for card payments, as merchant of record.
- Amazon Web Services: hosting of trangohub.com and every site, in the region shown on your site's System page.
- Cloudflare: DNS, TLS certificates and protection in front of the Service.
- Our transactional email relay and WhatsApp provider, for the messages the Service sends on your behalf and ours.
- Calendly, for demo bookings; Google and Meta, for analytics and advertising measurement on trangohub.com only (not inside sites).
- Authorities, where the law requires it or to defend a legal claim.
- Integrations you connect yourself from your site (for example Google mailboxes or calendars, payment gateways or tax portals) receive data under their own terms and your instructions.
6.Where data lives and international transfers
Sites and backups are hosted on Amazon Web Services. Paddle processes payment data in the United Kingdom and United States under its own safeguards. Xelent staff access data from Pakistan. If you are in the EU, UK or another jurisdiction with transfer rules, this means your data is transferred outside it; we rely on contractual safeguards with our processors and will sign a data processing agreement on request.
7.Retention
- Your account and order data: for as long as you are a customer, then up to 12 months.
- Billing records: seven years, as required for tax and accounting.
- Data inside your site: for the life of the subscription, then 90 days after it ends (so you can export or resume), then deleted, and removed from backups within a further 30 days.
- Server logs: 30 days. Support conversations: three years.
8.Your rights
You can ask us to export, correct or delete the data we hold about you as our customer, or to restrict or object to its processing, by writing to the address below; we respond within 30 days. For data inside your site, the administrator of that site controls it; if you are a contact or employee of one of our customers, please ask them, and we will help them respond. You may also complain to the data protection authority in your country.
9.Cookies
Your TrangoHub site uses only strictly necessary cookies: a session cookie, a CSRF token and, if you choose it, a "remember me" cookie. The marketing pages on trangohub.com may also set analytics and advertising measurement cookies (Google, Meta); you can block these in your browser without affecting your site. Paddle sets its own cookies in the checkout overlay.
10.Security
Passwords are hashed, two-factor authentication is available on every account, connections are encrypted with TLS, each site has its own database, backups are daily and encrypted, and staff access is logged. If a breach affects your data we will notify you without undue delay.
11.Children
The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect data from children.
12.Changes and contact
We may update this policy; the date at the top shows the current version, and material changes are emailed to site administrators. The data controller is Xelent Solutions, Faisalabad, Punjab, Pakistan. Questions or requests: [email protected] with the subject "Privacy".