KITKaro Privacy Policy

Last updated: 12-10-2026

This policy explains how Easy Life Concept Private Limited ("KITKaro", "we") handles personal data when businesses use KITKaro (kitkaro.in).

1. Two kinds of data, two roles

DataWhose it isOur role
Account data: details of the business and its users (names, phone numbers, emails, login records, billing details)Ours to look afterWe decide how it is used (Data Fiduciary)
Customer Data: the details a business puts in about its own customers (names, phone numbers, city, notes, messages, orders)The business'sWe process it only on the business's instructions (Data Processor). The business is the Data Fiduciary and is responsible for its customers' consent

If you are a customer of a business that uses KITKaro, please contact that business first about your data. We will help them answer you.

2. What we collect (account data)

  • Business details: name, address, GSTIN, business type, city.
  • User details: name, phone number, email, role in the business.
  • Login and security records: sign-in times, device and browser, IP address.
  • Billing: plan, payments, invoices. Card and bank details are handled by our payment provider; we do not store full card numbers.
  • Support conversations and records of support access.

3. Why we use it

  • To create and run your account and workspace.
  • To keep the Service secure and to prevent misuse.
  • To bill you and keep accounting records as the law requires.
  • To send you service messages (renewals, security alerts, changes to terms).
  • To understand how the Service is used, using counts only (for example "number of follow-ups done"), never your customers' names or numbers.

We do not sell personal data. We do not use Customer Data to advertise to anyone.

4. Where it is stored

On servers in India (Utho Cloud), with daily backups. Some service providers below may process limited data outside India; we will tell you where.

5. Who else handles data (service providers)

ProviderWhat forData involved
Utho Cloud (India)Servers, database, file storage, backupsAll data, encrypted in transit
CloudflareDomain name service and network protectionTechnical connection data
Anthropic (AI)Drafting messages when you use the AI featureOnly what is needed for the draft (business profile, the customer's first name, occasion, recent notes). Phone numbers are not sent. Its servers are outside India.
RazorpaySubscription paymentsBilling details
Google (Gmail)Login codes and service emailsName, email

Each provider may use the data only to provide its service to us.

6. How long we keep it

  • While your account is active.
  • After it ends: Customer Data deleted within 30 days of the 30-day export window; backup copies expire within 30 days.
  • Billing and tax records: as long as Indian law requires.
  • Security and audit logs: 1 year.

7. Security

  • Each business's data is separated at the database level; one business cannot reach another's.
  • Passwords are stored only as hashes.
  • Our staff cannot view a business's Customer Data unless the Account Owner opens time-limited support access; every such view is logged and visible to the Account Owner.
  • Encrypted connections (HTTPS), daily backups, access limited to people who need it.
  • If a personal data breach affects you, we will inform you and the authorities as the law requires.

8. Your rights

Under Indian law you may ask to access, correct, update or erase your personal data, withdraw consent, and nominate someone to act for you. Account Owners can export and correct most data themselves in Settings. For anything else, write to us.

9. Children

KITKaro is for businesses. It is not meant for anyone under 18.

10. Grievance Officer

Ronak K, Grievance Officer, Easy Life Concept Pvt Ltd, 4th Floor, F-254, RIICO Industrial Area, Mansarovar, Jaipur, Rajasthan 302020 · kitkaro.in@gmail.com
We will acknowledge complaints within 48 hours and resolve them within the time the law requires.

11. Changes

We will post changes here and tell Account Owners of material changes in advance.