Your documents never reach us
The application transmits nothing. It opens no network sockets, and a check fails the release build if any shipped source imports a networking library. There is no server that could receive your documents, so none of what you process in Oxofolio is transferred to us or to any third country.
We are not your data processor
Because the software sends us nothing and we run no infrastructure that receives it, we do not process personal data on your behalf. We are not a processor under Article 4(8) GDPR, nor a Data Fiduciary or Data Processor acting for you under the Digital Personal Data Protection Act 2023. A data processing agreement is not needed for the software itself; suppliers who insist otherwise are usually describing a hosted service.
What this website records
When you download a build we store the platform, release version, time, IP address and browser identifier, so we know which releases are in use. If you send the contact form we keep what you wrote so we can reply. If you buy a licence we keep your name, email and order details for the licence itself and for our tax records. If you tell us you are buying for a business we also keep the registered name and GSTIN you gave, because both have to appear on the tax invoice and Indian law requires us to keep issued invoices.
Payments
Card and UPI details are entered in the payment provider's own checkout and never pass through this site; we receive the payment status and the identifier of the order, not the instrument. Rupee payments are taken by Razorpay. Dollar payments are taken by Dodo Payments, who act as merchant of record — meaning Dodo is the seller for that purchase and collects what it needs to charge the right tax where you are, which normally includes your name, email and country. Dodo passes us the payment identifier, your email and the tier you bought, because without your email there is nobody to send a licence to. Each provider handles what it collects under its own privacy policy.
Cookies and website analytics
This website offers Google Analytics to count visits and see which pages get read, and it runs only if you allow it when asked. Nothing is fetched from Google and no analytics cookie is set before that. If you allow it, Google is told which page you opened, roughly where you are from your IP address, and what browser you use. Change your mind at any time with the analytics link in the footer. Separately, this site sets two cookies of its own so that the contact and checkout forms work and cannot be submitted from somewhere else. They carry no identity and are not shared with anyone.
The website is not the application
That analytics applies to these pages, and to nothing else. The application you install transmits nothing at all — it opens no network sockets, and the release build fails if any shipped source so much as imports a networking library. Your documents are never involved in anything described above.
Your rights
Ask for a copy of what we hold about you, or ask us to delete it, by emailing info@chadura.com. There is nothing to ask us for in respect of your documents, because we never had them.