This policy explains how Kanishu Technologies ("we", "us") handles personal data when you visit our website, create an account, buy a subscription or use our products. Our registered address is U-001, Mantri Paradise, Arekere Gate, Bannergatta Road, Bangalore - 560076.
Two roles we play
- For your account and billing — the details you give us to sign up, buy and manage subscriptions — we decide why and how the data is used. Under the DPDP Act we are the data fiduciary.
- For the data your organisation puts into our products — tickets, assets, contacts, policies, vendor records and the like — your organisation decides what goes in and why. We process it only on your organisation's instructions, to run the product for you. Your organisation is the data fiduciary and we are its data processor. Requests about that data are best made to your organisation; we help them respond.
What we collect
- Account details: your name, work email, organisation name, and (if you give them) your GSTIN and state, so we can issue correct tax invoices.
- Billing records: what you bought, when, and what you paid. Payments are taken by Razorpay; we never see or store your full card, UPI or bank details — only the payment reference Razorpay gives us.
- Sign-in and security data: passwords (stored only as one-way hashes), multi-factor authentication settings, sign-in times and IP addresses, used to keep your account safe and to block abuse.
- Activity history: each product keeps a history of who added, changed or deleted what, so your organisation can audit its own records.
- Messages you send us, for example a support request.
We use only the cookies needed to keep you signed in and to protect forms against forgery. We do not use advertising or cross-site tracking cookies.
Why we use it
- To create and run your account and provide the products you subscribe to.
- To take payment, issue tax invoices and keep the accounting records the law requires.
- To send service emails: sign-in links, invoices, renewal reminders, and notices about your subscription.
- To keep the service secure, investigate misuse and meet legal obligations.
- To answer your questions and improve the service.
We rely on your consent, given when you sign up, and on the legitimate uses the DPDP Act allows, such as meeting a legal obligation. We do not sell personal data, and we do not use it for advertising.
Who we share it with
Only with the service providers we need to run the service, each bound to use the data only for us:
| Provider | What they do for us |
|---|---|
| Hostinger | Hosts our servers and databases and sends our emails |
| Cloudflare | Delivers our website securely and protects it from attacks |
| Razorpay | Takes payments |
We may also disclose data when the law requires it, for example to a court or a government authority acting lawfully. Some providers may process data outside India; where they do, it is only as the DPDP Act permits.
How long we keep it
- Account details: while your account is open, and then only as long as we need them to deal with any question about your account.
- Invoices and billing records: for as long as tax and accounting laws require.
- Your organisation's product data: while the subscription is active and for as long afterwards as you need to renew or export it. Your organisation can ask us to delete it at any time after the subscription ends.
- Security logs: for as long as needed to investigate and prevent misuse.
How we protect it
Each customer's product data is kept in its own separate database. Connections are encrypted (HTTPS). Passwords are hashed, stored secrets are encrypted, and staff access to the platform needs multi-factor authentication. Read more on our Security page. If a personal data breach occurs, we will inform affected people and the Data Protection Board of India as the law requires.
Your rights
Under the DPDP Act you can:
- ask what personal data we hold about you and how we use it;
- ask us to correct, complete or update it;
- ask us to erase it, unless the law requires us to keep it;
- withdraw your consent at any time (this won't affect what we did before you withdrew it, and we may no longer be able to provide the service);
- nominate someone to exercise these rights for you if you die or become unable to;
- complain to our Grievance Officer, and then to the Data Protection Board of India if you are not satisfied.
To exercise any of these, email our Grievance Officer (below). We reply within 30 days.
Children
Our products are for businesses. We do not knowingly collect personal data from anyone under 18.
Grievance Officer
Arun Bhat
Kanishu Technologies, U-001, Mantri Paradise, Arekere Gate, Bannergatta Road, Bangalore - 560076
Email: [email protected]
Changes to this policy
If we make a significant change, we will email account holders before it takes effect. The date at the top shows when this policy was last updated.