Privacy Policy

1. Scope

This policy covers:

• visitors to this website;
• people who submit the business audit form, email us, call us or message us on WhatsApp; and
• contact persons at our customers, prospects, vendors and partners.

When our customers use the Kanada platform, they may connect systems (such as Tally, spreadsheets or an ERP) that contain personal data of their own customers, vendors and employees. For that data, our customer decides why and how it is processed, and we process it only on their instructions and under our agreement with them. Questions about that data should first be directed to the business that uses Kanada.

2. What we collect

Information you give us. When you request a business audit we ask for your name, business name, phone number, email address, industry, turnover band, number of employees, the software and tools your business uses, and (optionally) a description of your main operational problem. If you contact us by email, phone or WhatsApp, we receive the details and content of that communication.

Information collected automatically. Like most websites, our servers and hosting provider record technical information such as IP address, browser type, device type, pages requested and time of the request. We use this to operate and secure the website and to diagnose problems.

Cookies and analytics. This website does not currently use advertising cookies or third-party tracking cookies. If we add an analytics or similar service, we will update this policy before doing so and ask for your consent where the law requires it.

We do not intentionally collect sensitive information such as financial account credentials, health data or government identification numbers through this website. Please don't include them in the form.

3. How we use it

• To respond to your request, schedule and conduct the business audit, and follow up about our services.
• To prepare proposals and, if you become a customer, to set up and provide the services.
• To operate, secure and improve the website, including preventing spam and abuse.
• To comply with legal obligations and enforce our terms.

We process personal data on the basis of the consent you give when you submit the form or contact us, and for other legitimate uses permitted under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), such as complying with law. We will not send you marketing messages unrelated to your request without your consent, and every such message will tell you how to opt out.

4. Who we share it with

We do not sell personal data. We share it only with:

• Service providers who help us run our business — for example website hosting, email, messaging (including the WhatsApp Business Platform) and customer-relationship software — under contracts that limit their use of the data to providing services to us;
• Professional advisers such as lawyers, auditors and accountants, where necessary;
• Authorities when required by law, court order or to protect rights, safety and security; and
• A successor entity in the event of a merger, acquisition or restructuring, subject to this policy.

Some service providers may store or process data outside India. Where they do, we transfer data only as permitted under the DPDP Act and applicable rules, and require appropriate safeguards.

5. Business data on the platform

Business data that customers connect to or store in the Kanada platform is used only to provide the services to that customer, as set out in their agreement with us. We do not sell it, and we do not use one customer's business data to provide services to another customer. Access within Kanada is limited to personnel who need it to support the customer, and is logged. You can read more on our Security page.

6. How long we keep it

We keep enquiry and audit information for as long as needed to respond to you and pursue the conversation, and in any case no longer than 24 months after our last interaction unless you become a customer or ask us to delete it sooner. Customer information is kept for the duration of the relationship and afterwards only as long as required for legal, tax and accounting purposes. Server logs are kept for a limited period for security purposes.

7. How we protect it

We use reasonable security safeguards appropriate to the nature of the data, including encryption in transit, access controls based on role, activity logging and backups. No system is perfectly secure; if a personal data breach occurs, we will notify affected people and the Data Protection Board of India as required by law.

8. Your rights

Subject to the DPDP Act and applicable rules, you have the right to:

• obtain a summary of the personal data we hold about you and how it is processed;
• have inaccurate or incomplete personal data corrected, completed or updated;
• have your personal data erased when it is no longer needed, unless we must retain it by law;
• withdraw consent at any time (this does not affect processing already carried out);
• nominate another person to exercise your rights in the event of death or incapacity; and
• have your grievances addressed by us, and if unresolved, approach the Data Protection Board of India.

To exercise any of these rights, write to hello@kanada.in from the email address you gave us, or tell us how to verify your identity. We respond within the time limits set by law.

9. Children

This website and our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, please contact us and we will delete it.

10. Contact and grievances

For privacy questions, requests or complaints, contact us at hello@kanada.in or +91 98301 26794 with the subject “Privacy”. We will acknowledge your grievance promptly and resolve it within the period prescribed under applicable law.

11. Changes to this policy

We may update this policy as our services or the law change. We will post the updated version here with a new “last updated” date and, for material changes, take reasonable steps to let you know.