Privacy Policy

1. Introduction

At KaaryaBook, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our business management platform, mobile application, and related services (collectively, the "Services").

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by all the terms outlined in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide when you:

• Create or register an account
• Set up your business profile
• Use our business management features
• Contact customer support
• Subscribe to newsletters or marketing emails
• Participate in surveys, contests, or promotions
• Provide feedback or testimonials

This information may include:

• Identity Data: Full name, username, profile picture
• Contact Data: Business email address, phone number, physical address
• Business Data: Business name, GST number, PAN, business registration details
• Financial Data: Payment method details, bank account information, transaction history
• Customer Data: Customer names, contact details, order history, preferences
• Inventory Data: Product details, pricing, stock levels, supplier information

2.2 Information Collected Automatically

When you access our Services, we automatically collect:

• Device Information: IP address, browser type and version, device type, operating system
• Usage Data: Pages visited, features used, time spent, clickstream data
• Location Data: Approximate location based on IP address
• Log Data: Access times, error logs, crash reports
• Cookies: Cookie identifiers and similar tracking technologies

2.3 Information from Third Parties

We may receive information about you from:

• Payment processors and financial institutions
• Business partners and service providers
• Social media platforms (if you connect your accounts)
• Public databases and data brokers

3. How We Use Your Information

We use your information for the following purposes:

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: AES-256 encryption for data at rest, TLS 1.3 for data in transit
• Access Control: Role-based access controls and multi-factor authentication
• Infrastructure: Secure cloud infrastructure with regular security audits
• Monitoring: 24/7 system monitoring and intrusion detection
• Backups: Automated daily backups with geographic redundancy
• Compliance: Regular compliance checks (GDPR, CCPA, SOC 2 Type II)
• Penetration Testing: Quarterly security assessments by third-party experts

However, no method of transmission over the Internet or electronic storage is 100% secure.While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach, we will notify affected users within 72 hours as required by law.

5. Data Sharing and Disclosure

5.1 Service Providers

We share information with trusted third-party service providers:

• Payment Processors: Razorpay, Stripe, PayPal
• Cloud Infrastructure: AWS, Google Cloud, Microsoft Azure
• Customer Support: Zendesk, Intercom
• Analytics: Google Analytics, Mixpanel
• Email Services: SendGrid, Mailchimp

5.2 Legal Compliance

We may disclose information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, government agencies).

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and prominent notice on our website.

5.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

We do not sell your personal information to third parties.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you Services. We retain and use your information as necessary to:

• Comply with legal obligations (tax, accounting, regulatory requirements)
• Resolve disputes
• Enforce our agreements
• Maintain business records for up to 7 years as required by law

When we no longer need your information, we will securely delete or anonymize it. You may request deletion of your account and associated data at any time through your account settings or by contacting us.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

To exercise your rights, please contact us at privacy@kaaryabook.com. We will respond within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. Types of cookies we use:

• Essential Cookies: Required for basic functionality
• Preference Cookies: Remember your settings
• Analytics Cookies: Help us understand usage patterns
• Marketing Cookies: Track campaigns and personalize ads

You can manage cookie preferences through your browser settings. However, disabling essential cookies may affect functionality. For more details, see our Cookie Policy.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

Safeguards we implement for international transfers:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules (BCRs)
• Privacy Shield certification (for US transfers)
• Data Processing Agreements with all vendors

Our servers are primarily located in Mumbai, India and Frankfurt, Germany, with backups in Singapore and Virginia, USA.

10. Children's Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

If we learn that we have collected personal information from a child without parental consent, we will take steps to delete that information.

11. Third-Party Links and Services

Our Services may contain links to third-party websites, plugins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policies of every website you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

How we notify you of changes:

• Posting the updated policy on this page with a revised "Last Updated" date
• Sending an email notification for material changes (to the email associated with your account)
• Displaying a notice within our application

We encourage you to review this Privacy Policy periodically. Your continued use of our Services after any changes constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

For urgent data breach notifications or security concerns, please contact our security team directly at security@kaaryabook.com.