Legal Documents

Privacy Policy & Terms

Review our data processing standards, confidentiality guidelines, and authorized credential validation clauses.

Privacy Policy

At XpertLync Solutions Pvt. Ltd., we prioritize the security of information and confidentiality of data. This Privacy Policy details how we handle information collected through our inquiry forms, job applications, and GRC systems.

Data Collection & Processing

We collect names, email addresses, phone coordinates, and organizational names only when explicitly provided through our contact, careers, or enrollment forms. These details are processed solely to validate inquiries and recruit compliance professionals.

Security Protections

In alignment with ISO/IEC 27001 guidelines and GDPR requirements, we utilize encryption during transmission, strict logical access controls, and administrative reviews to secure all stored information.

CyberGuard DLP Browser Extension Privacy Policy

This section specifically governs the XpertLync CyberGuard DLP Browser Extension (Standard and Enterprise Editions) for Google Chrome, Microsoft Edge, and Chromium-based browsers, developed and distributed by XpertLync Solutions Pvt. Ltd. This disclosure strictly adheres to the Google Chrome Web Store Developer Program Policies, Microsoft Edge Add-ons Developer Program Policies, GDPR, CCPA/CPRA, and the Digital Personal Data Protection (DPDP) Act.

🎯 Single Purpose & Core Functionality

The sole purpose of the XpertLync CyberGuard DLP extension is to provide real-time, in-browser Data Loss Prevention (DLP) and pre-upload file screening. It intercepts drag-and-drop events, file dialog selections, clipboard transfers, and form inputs directly within the client-side browser memory layer to prevent unauthorized exfiltration of proprietary or sensitive enterprise data before network transmission occurs.

🔒 100% Client-Side Processing & Zero Cloud Scanning

Zero Remote File Inspection: All heuristic content checks, cryptographic file signature calculations (SHA-256), keyword matching, and policy evaluations are executed strictly inside the endpoint browser's local memory. No enterprise documents, source code files, customer records, credentials, or personal communications are ever transmitted to XpertLync servers or any third-party cloud service for analysis.

📜 Google Limited Use & Data Sharing Commitments

In strict adherence to the Google Chrome Web Store Developer Program Policies:

  • No Sale of Data: XpertLync does not sell, rent, monetize, or trade any user data, browsing history, or incident records to third parties, data brokers, or advertising networks.
  • Single Purpose Limitation: User data and browser events are used strictly for in-browser Data Loss Prevention and security enforcement. We do not use or transfer user data for purposes unrelated to the extension's core single purpose.
  • No Creditworthiness or Lending Evaluation: We do not use or transfer user data to evaluate creditworthiness, financial standing, or for lending purposes.
  • No Advertising or Profiling: The extension does not inject advertisements, track users for marketing purposes, or build behavioural profiles.

⚙️ Browser Permissions & Technical Justifications

The extension requests only the minimum permissions necessary to deliver DLP security protection:

Host Permissions (<all_urls>): Required to inspect file upload dialogues, clipboard events, and form actions across any web destination visited by the user to ensure comprehensive DLP protection regardless of the target website.
storage: Used to locally persist DLP inspection rules, whitelisted corporate domains, and tamper-resistant local audit logs on the endpoint device.
tabs: Used solely to identify the active tab's domain in order to evaluate destination-specific DLP rules, update extension protection badges, and open administrator option interfaces.
notifications: Required to display immediate real-time desktop alerts whenever an unauthorized file transfer or data exfiltration attempt is blocked.
scripting: Required to inject pre-upload file screening hooks and DLP warning modal overlays into DOM pages.
alarms: Used to schedule low-overhead periodic background maintenance, such as license validation heartbeats and log buffer rotation.
desktopCapture & offscreen (Enterprise Edition Only): Exclusively utilized in Enterprise deployments to capture visual forensic evidence snapshots of the active tab solely when high-severity DLP security policy breach events occur, processed offscreen without degrading browsing performance.

📊 Edition Differences: Standard vs Enterprise

Standard Edition: Operates entirely autonomously on the user's workstation. Incident records are stored strictly in local browser storage (chrome.storage.local). Optional email alerts are dispatched directly to the customer-configured administrator email via secure SMTP relay. Standard Edition does not capture screenshots and does not communicate with external management servers.

Enterprise Edition: Designed for managed corporate environments. It allows IT security administrators to push policies centrally and stream security event telemetry (SHA-256 file fingerprint, destination URL, workstation hostname, timestamp, and triggered rule) to the enterprise's private, customer-controlled XpertLync Central DLP Management Console.

🗑️ Data Retention, Log Management & Uninstallation

Users and administrators can view, export, or clear local incident audit buffers at any time through the extension's Options console. Uninstalling the extension immediately purges all locally stored policies, configuration settings, and audit logs from the browser storage layer.

🛡️ Data Protection Inquiries & Contact

For questions, Data Subject Access Requests (DSAR), or privacy policy inquiries concerning our browser extensions or cybersecurity services, please contact our Data Protection Officer:

XpertLync Solutions Pvt. Ltd.
Legal & Compliance Division
Email: privacy@xpertlync.com / support@xpertlync.com
Website: https://xpertlync.com

Terms of Service

These Terms govern the use of the XpertLync website, validation registries, and training assets.

Credential Verification & Validation Codes

The unique 16-digit validation code system is a proprietary authenticity mechanism managed by XpertLync Solutions. Recreating, distributing, or publishing fake validation logs or claiming unverified compliance contracts is a violation of international intellectual property regulations and standard compliance codes.

Legal Notice Disclaimers

XpertLync Solutions Pvt. Ltd. disclaims all liabilities arising out of unauthorized brand usage, certifications, or consulting promises made by third parties. Genuine contracts must be verified exclusively through our official lookup tool or by communicating directly with compliance@xpertlync.com.

DSR Center

Data Subject Access Request Portal

Submit preferences, portability requests, or request deletion of data processed by XpertLync under GDPR, CCPA/CPRA, or local privacy laws.

0 / 5000
Request Logged

DSR Request Received!

Your request was logged. A confirmation email has been forwarded to compliance and a verification transcript has been sent to your inbox.

Tracking ID: XL-DSR-XXXX-XXXX

DSR Dispatch Logs (HTML Mail copy)