Privacy Policy

1. Who We Are

Kamyab Infotech Pvt Ltd ("Kamyab", "we", "us") is the Data Fiduciary responsible for your personal data. We provide IT infrastructure, CRM, e-learning, email, chatbot, security, and digital asset services to businesses across India.

Registered Offices: New Delhi & Mumbai, India.
Contact for data queries: privacy@kamyab.biz | WhatsApp +91 99877 77250

2. What Data We Collect

Data Category	Examples	Purpose
Contact Details	Name, email, phone, company name	Responding to inquiries, project coordination
Communication Records	WhatsApp messages, emails, support tickets	Service delivery, issue resolution
Technical Data	IP address, browser type, device info	Website analytics (Cloudflare Web Analytics — privacy-focused, no cookies)
Service Data	Hosting configs, CRM settings, LMS content	Delivering ordered services
Payment Data	Transaction references (via pay.kamyab.co.in)	Invoice processing — we do not store card details

3. How We Collect Data

• Directly from you: When you fill the contact form (which sends a prefilled WhatsApp message — no data is stored on our servers), email us, call us, or raise a support ticket.
• Automatically: Cloudflare Web Analytics collects anonymised, cookie-free usage data to help us understand traffic patterns.
• From third parties: Payment confirmations from payment gateway providers (Razorpay / bank transfers).

4. Legal Basis for Processing (DPDP Act, Section 4)

We process your data based on:

• Consent: When you voluntarily submit your details through our WhatsApp contact form or email.
• Contractual necessity: To deliver the services you have engaged us for (hosting, CRM setup, e-learning, etc.).
• Legitimate uses: As permitted under Section 7 of the DPDP Act — e.g., responding to communications you initiate.

5. How We Use Your Data

• Communicating with you about your inquiry or project
• Delivering, maintaining, and supporting our services
• Sending invoices and processing payments
• Improving our website experience (anonymised analytics only)
• Complying with legal obligations

We do not:

• Sell your data to third parties — ever.
• Use your data for automated profiling or decision-making.
• Send unsolicited marketing without your explicit consent.

6. Data Sharing

We may share your data only with:

• Service partners: Zoho (CRM), Google (Workspace), Microsoft (365), Cloudflare (hosting/analytics) — only as needed to deliver your services.
• Payment processors: Razorpay / bank transfer intermediaries — for invoice settlement.
• Legal authorities: If required by law, court order, or regulatory direction.

We do not transfer personal data outside India unless the receiving entity complies with DPDP Act requirements and is on the Central Government's approved list.

7. Data Retention

• Inquiry data: Retained for 12 months after last contact, then deleted.
• Client project data: Retained for the duration of the engagement + 3 years for legal/tax compliance.
• Analytics data: Anonymised and aggregated — no personal identifiers stored.
• Payment records: 8 years (as required under Indian tax law).

8. Your Rights (DPDP Act, Section 11-14)

As a Data Principal, you have the right to:

• Access: Request a summary of your personal data we hold.
• Correction: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your data (subject to legal retention requirements).
• Withdraw consent: At any time, by emailing privacy@kamyab.biz.
• Grievance redressal: If you believe your data has been mishandled, contact our Data Protection Officer.
• Nominate: Nominate another individual to exercise your rights in case of death or incapacity.

We will respond to all data rights requests within 30 days.

9. Data Security

We implement industry-standard security measures:

• SSL/TLS encryption on all web properties
• Firewalled, access-controlled server infrastructure
• Regular security audits and vulnerability assessments
• Role-based access controls for client data
• Encrypted backups with tested recovery procedures

10. Cookies & Tracking

Our website uses Cloudflare Web Analytics, which is privacy-focused and does not use cookies or track individual users. We do not use Google Analytics, Facebook Pixel, or any third-party advertising trackers.

11. Children's Data

Our services are designed for businesses, not individuals under 18. We do not knowingly collect data from children. If we learn that a child's data has been collected, we will delete it promptly. If you believe we have inadvertently collected data from a child, please contact us at privacy@kamyab.biz.

12. Data Protection Officer

In compliance with the DPDP Act, our designated contact for all data protection matters:

Email: privacy@kamyab.biz
Phone: +91 11 4161 9300
WhatsApp: +91 99877 77250

13. Grievance Redressal

If your concern is not resolved within 30 days, you may approach the Data Protection Board of India as established under the DPDP Act, 2023.

14. Changes to This Policy

We may update this policy to reflect changes in law or our practices. Material changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this page periodically.