Global Privacy Policy & Data Processing Standards
How Roxan Labs collects, processes, encrypts, and safeguards subscriber and end-user data across our enterprise Software-as-a-Service platforms.
Compliance Navigation:
1. Data Controller Identity & Information We Collect
Roxan Labs ("Company", "We", "Us", or "Our") acts as both a Data Controller and Data Processor depending on the specific SaaS module deployed. We collect information necessary to provide cloud services across our software suite (Rox Shield, Rox Edu, WhatsApp Smart CRM, ISP Billing SaaS, Rox Guardian, and Rox Khata).
Account & Merchant Profile Data
Includes merchant organization name, administrative email address, contact phone number, billing address, tax registration details, and payment verification history.
Tenant Application Telemetry
System logs, API request payloads, IP addresses, browser agent headers, error traces, and active session tokens recorded for system security and operational integrity.
2. Purposes & Legal Basis of Data Processing
All collected subscriber and end-user data is processed strictly under clear legal bases (performance of contract, compliance with legal obligations, and legitimate interest):
• Provisioning multi-tenant SaaS dashboards and dedicated cloud API endpoints.
• Processing subscription payments, recurring invoices, and issuing digital tax receipts.
• Executing automated security enforcement (e.g. IMEI verification for Rox Shield).
• Dispatching critical system updates, service notifications, and security advisories.
3. Enterprise Security, Encryption & Cloud Infrastructure
Roxan Labs enforces defense-in-depth security controls across all database clusters and cloud hosting environments:
4. Data Retention & Account Deletion Policy
We retain personal and organization data only for as long as necessary to fulfill subscription obligations or meet legal reporting standards:
1. Active accounts retain data indefinitely while the subscription remains active.
2. Cancelled accounts enter a 30-day grace period during which subscribers can export their data.
3. Following 30 days of cancellation, tenant database instances are permanently purged from active servers.
5. User Rights & Data Protection Officer Contact
Subscribers have the right to request access to, correction of, or deletion of their personal data. For privacy inquiries or compliance requests, contact our Data Protection Officer:
Registered Physical Office Address:
Shop No. G-35, KN Gohar Green City, Behind Malir Court, Karachi, Pakistan
Official Contact Phone / WhatsApp:
+92 318 1169320
Data Protection Officer Email:
info@roxanlabs.com