This section applies specifically to the Xellara Android application, package name com.xellara.org. Xellara is a business-to-business client portal; accounts are created for people who work at, or with, our client companies.

What the App Collects

• Name, email address and phone number — to create and identify your account, and to show you to colleagues on shared issues. Provided by you at sign-up, or by your Google account if you use Google Sign-In.
• Company and role (admin, client or developer) — set by your company administrator, and used to decide what you can see in the app.
• Support issues you raise and messages you send — to deliver the support and issue-tracking service.
• Invoices and billing records for your company — to bill for services and to meet Indian tax and accounting obligations.
• App usage events and crash diagnostics (device model, OS version, stack traces) — collected automatically by Google Firebase Analytics and Crashlytics to find and fix faults.

The app does not access your contacts, photos, location, microphone or camera, and does not read anything outside the app.

Who Processes It

We do not sell personal data and do not share it for advertising. Data is processed on our behalf by Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Analytics and Crashlytics) and stored on Google Cloud infrastructure. Within the app, your name, email and the issues you raise are visible to Xellara administrators and to colleagues in your own company; they are not visible to other companies.

Webmail

If your company has webmail enabled, the mail button opens your company’s webmail in your device’s own browser. The app does not display webmail inside itself, does not see your webmail password, and has no access to your mailbox.

Deleting Your Account and Data

In the app: Profile → Delete Account.

On the web: xellara.com/delete-account, which confirms your identity by emailing you a link.

Either route deletes immediately. There is no waiting period, no administrator step, and no way to reverse it. Deleting your account permanently erases your sign-in credentials and authentication record, your profile (name, email, phone number, role), your company membership record, your notifications, and the messages you have sent in the app.

Two categories are kept with your identity removed. Support issues you raised or were assigned remain so your company keeps its support history, but they are unlinked from you and relabelled “Deleted user”. Invoices and payment records are retained because Indian tax law requires us to keep accounting records; these are records of your company rather than of you personally, and are not linked to your user account after deletion.

Retention

Account data is kept for as long as your account exists, and is erased when you delete it or when your company ends its relationship with us. Crash and analytics data is retained on Firebase’s default schedule and is not linked to your name or email. Accounting records are kept for the period Indian tax law requires.

Security

Data is transmitted over HTTPS and stored in Google Cloud. Access is restricted by role and enforced by server-side security rules. Account deletion is performed by a server function, so it cannot be partially applied by a device that goes offline.

Children

Xellara is a workplace tool and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has an account, contact us and we will delete it.

Your Rights

You can access and correct your profile in the app, and delete your account as described above. For any other request about your data, including a copy of it, write to contact@xellara.com. We respond within 30 days.