Privacy Policy

Effective Date: 1st Nov. 2025

Last Updated: 1st Nov. 2025

Controller / Operator:

XetaBytes (a company incorporated under the laws of India) (“XetaBytes”, “we”, “us”, or “our”) owns and operates the website and services available at https://stallonrent.com (“StallonRent”, the “Platform” or the “Service”).

Registered Office / Contact:

Email (support): contact@xetabytes.com

Email (privacy): contact@xetabytes.com

By accessing or using StallonRent you accept this Privacy Policy and consent to XetaBytes’ collection, use, disclosure and processing of your Personal Data (defined below) in accordance with this policy.

1. Scope & Purpose

1.1. This Privacy Policy describes how XetaBytes collects, uses, discloses, transfers and stores Personal Data when you use StallonRent (including via web, mobile, API, and related services) and your rights with respect to that data.

1.2. This Policy applies to all users of the Platform — including Exhibitors, Event Organisers, visitors, vendors, partners, and other third parties interacting with StallonRent.

2. Definitions

• Personal Data: any information relating to an identified or identifiable natural person, including but not limited to name, email, phone, payment or tax details, business information, and any other data described in Section 3.
• Processing: any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, transmission, erasure, or modification.
• Service Providers / Processors: third parties engaged by XetaBytes to provide hosting, payments, analytics, marketing, customer support, communications, or related services.

3. Personal Data We Collect

We collect Personal Data necessary to provide the Platform and improve our services, including:

A. Data you provide directly

• Account registration: name, email, phone number, password (hashed), business/brand name, address, GSTIN (if applicable), logo/profile image.
• Booking & listing information: event details, stall selections, invoice and receipt data, transactional metadata.
• Payment and billing data: billing address, payment instrument identifiers (cards) — note: full card details are processed by PCI-compliant third-party gateways (we do not store full card numbers).
• Communications: emails, messages sent via the Platform, survey responses, reviews, support tickets.
• KYC / verification documents: identity, address, company documents where required for verification, compliance or risk mitigation.

B. Data collected automatically

• Device and usage data: IP address, device and browser identifiers, OS, page views, clickstream, referrer, timestamps, geolocation (approximate), and technical logs.
• Cookies and tracking identifiers set by us or our partners (see Section 9).

C. Data from third parties

• Payment processors, verification vendors, analytics providers, advertising partners, or social networks (if you login via a third party).

D. Aggregated or anonymized data

• Non-identifiable aggregated analytics and reports derived from user data which we may use freely.

4. Legal Bases & Purposes for Processing

We process Personal Data for the following legitimate purposes:

• To provide the Platform and perform contracts: create and manage accounts, process bookings, list events, send confirmations/invoices, process payments, and deliver customer support.
• Legal & compliance: KYC, tax, regulatory reporting, fraud detection, dispute resolution, recordkeeping.
• Legitimate interests of XetaBytes: product improvement, analytics, security, platform integrity, marketing and growth (including sending promotional communications), detection/prevention of abuse and fraud.
• Consent: where required (e.g., marketing communications, optional cookies), we will obtain your consent and you may withdraw such consent at any time.
• Legal obligation: where required by law, court order, or government authority.

5. How We Use & Share Personal Data

5.1. Uses

We may use Personal Data to:

• Operate, maintain and improve the Platform;
• Provide and process stall bookings, event listings, payments and refunds;
• Communicate with users (notifications, updates, offers);
• Authenticate and verify accounts; enforce our policies and terms;
• Provide analytics, aggregated reporting, and product insights;
• Prevent, detect and investigate fraud, security incidents and violations.

5.2. Disclosure

We may disclose Personal Data to:

• Event Organisers / Exhibitors: to the extent necessary to complete a booking, coordinate logistics and provide services.
• Service providers / processors: payment gateways, cloud hosting providers, analytics, email/SMS vendors, CRM and support platforms.
• Affiliates & corporate group companies of XetaBytes: for the purposes described in this Policy.
• Business partners & advertisers: where you have opted into such sharing or for aggregated/anonymous insights.
• Law enforcement, courts or regulators: where required by law, court order, or to protect XetaBytes’ legitimate interests.
• In connection with business transactions: sale, merger, acquisition, financing, or asset transfer — in which case Personal Data may be transferred subject to confidentiality and continuity protections.

5.3. Sale or Rent

We do not sell Personal Data. Any future change to this policy will be posted clearly with an opt-out where required by law.

6. Retention & Deletion

6.1. Retention Periods

We retain Personal Data only as long as necessary for the purposes set out in this Policy, to fulfil contractual, tax, accounting, legal or security obligations, or to resolve disputes. Typically:

• Account and transactional records: retained for the period necessary to comply with legal and tax obligations and for business needs (up to 7 years or as required by law).
• Marketing consents & preferences: retained until withdrawal plus reasonable administrative period.
• Logs and analytics: retained in aggregated or pseudonymised form per our data retention schedule.

6.2. Deletion & Deactivation

You may request deactivation or deletion of your account by contacting contact@xetabytes.com. We will delete or anonymize Personal Data within a reasonable time, subject to (a) retention for legal/compliance reasons, (b) dispute resolution, or (c) legitimate business recordkeeping obligations.

7. Data Security & Breach Response

7.1. Security

We implement reasonable administrative, technical and physical safeguards (encryption in transit, access controls, secure hosting, regular security assessments) to protect Personal Data.

7.2. Breach Response

In the event of a data breach, we will take prompt measures to contain and remediate the breach, notify affected users and authorities as required by applicable law, and take steps to prevent recurrence.

Note: No system is absolutely secure — XetaBytes cannot guarantee complete security of information transmitted or stored on the Platform.

8. Cross-Border Transfers

StallonRent is hosted and operated using global cloud providers and our service providers may transfer or store Personal Data in countries outside your jurisdiction, including outside India. By using the Platform you consent to such transfers, which will be governed by appropriate safeguards (contracts, standard contractual clauses or equivalent) as required by law.

9. Cookies, Tracking & Advertising

9.1. We use cookies, web beacons, local storage, SDKs and similar technologies for:

• Essential platform functions (authentication, session management);
• Performance and analytics (to improve features);
• Personalization and recommendations;
• Marketing and advertising (including third-party ad networks).

9.2. Cookie Controls

You can set browser preferences to block or delete cookies; however, disabling certain cookies may limit Platform functionality. We provide a Cookie Settings control on the Platform to manage non-essential cookies.

10. Your Rights & Choices

Depending on applicable law, you may have rights to:

• Access, correct or update Personal Data held about you;
• Request deletion or restriction of processing;
• Object to processing (including profiling) and withdraw consent;
• Data portability where applicable;
• Lodge complaints with a supervisory authority.

To exercise any rights, contact contact@xetabytes.com with sufficient details to verify your identity. We will respond within a reasonable timeframe and as required by law. XetaBytes may refuse manifestly unfounded or excessive requests subject to applicable law.

11. Minors

StallonRent is intended for users aged 18 years and above. We do not knowingly collect Personal Data from minors. If you believe we have collected information from a minor, contact contact@xetabytes.com immediately and we will take steps to delete such data.

12. Marketing & Communications

We may send emails, SMS/WhatsApp messages and push notifications for transactional purposes, service announcements and promotional offers. You may opt out of promotional communications by following the unsubscribe link or contacting contact@xetabytes.com. Transactional messages (booking confirmations, invoices) are necessary for service delivery and cannot be unsubscribed from.

13. Third-Party Sites & Links

The Platform may contain links to third-party websites and services that are not controlled by XetaBytes. We are not responsible for their privacy practices. Please review their privacy policies before providing Personal Data.

14. Changes to this Privacy Policy

XetaBytes may update this Policy at any time. Material changes will be communicated by posting the revised Policy on StallonRent with a revised Effective Date and/or via email or in-app notification. Continued use of the Platform after changes constitutes acceptance of the revised Policy.

15. Limitation of Liability & Disclaimer

While this Policy explains our practices regarding Personal Data, it does not create any contractual or other rights enforceable by third parties beyond those set out in the applicable Terms of Service. XetaBytes will not be liable for incidental, consequential or indirect damages arising from data processing, except where directly caused by XetaBytes’ gross negligence or willful misconduct, to the extent permitted by applicable law.

16. Contact & Grievance Officer

For privacy inquiries, requests or grievances, contact:

Privacy Officer

XetaBytes

Email: contact@xetabytes.com

If your grievance is unresolved, you may escalate to the appropriate supervisory authority as per applicable law.

17. Governing Law & Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising hereunder shall be subject to the exclusive jurisdiction of the courts of Ghaziabad, India.