Privacy Policy

1. Overview

Karki Innovative Technologies Pvt. Ltd. operates kitagency.co and app.kitagency.co. For personal data collected through our main website and dashboard, we act as the Data Controller. Where we host and operate digital properties on behalf of a Client, we act as a Data Processor for visitor data collected on that property. Direct privacy requests to support@kitagency.co.

2. Data we collect

• Lead & audit submissions: Names, corporate email addresses, phone numbers, company names, domain URLs, growth targets, and consultation notes.
• Visitor telemetry & heatmaps: Page views, referral sources, coarse location (IP-derived), browser details, session durations, and interaction coordinates (clicks, scrolls) used for heatmaps. Heatmaps capture interaction positions, not typed keystrokes.
• AI chatbot & copilot logs: Conversations sent to site assistants are stored with session identifiers to maintain conversation state and associate leads. Do not submit sensitive financial or personal information through chat inputs.
• RAG training documents: PDFs and files uploaded by Clients to train custom assistants are converted into isolated vector embeddings. Uploaded files are strictly scoped to the account and are never used to train third-party foundation models.
• Account & financial records: Client account tier, seat allocations, credit balances, invoice histories, and wire transfer confirmations. We do not store raw credit card numbers on our servers.

3. Purpose & legal basis

We process data to respond to audit inquiries (pre-contractual steps), fulfill paid subscriptions (contract performance), improve infrastructure performance (legitimate interest), and maintain tax/accounting records (legal obligation).

4. Data security architecture

Data is stored in isolated database clusters enforcing TLS encryption in transit and standard volume encryption at rest. Multi-tenant access controls restrict queries strictly to tenant-scoped identifiers.

5. Infrastructure processors

We do not sell personal data. Data is shared strictly with core infrastructure processors:

• Cloud infrastructure providers: Managed cloud hosting (AWS) for database, compute, and storage nodes.
• AI model vendors: Third-party AI providers (Anthropic, OpenAI) for prompt processing. Inference data is not retained to train public models.
• Mail delivery gateways: Enterprise email gateways for transactional and campaign messaging.

6. Retention schedules

• Leads & inquiries: 24 months from last contact, then deleted.
• Chatbot logs: 12 months, then purged.
• Analytics & telemetry: 14 months in identifiable form, then aggregated.
• Active account data: Life of the subscription plus 30 days post-termination.
• Financial records: 7 years to satisfy corporate tax and legal requirements.

7. Your data rights

Depending on your jurisdiction, you may hold rights to access, correct, delete, or export your personal data in a structured format (CSV). Submit data requests to support@kitagency.co. We respond within 30 days.

8. Cookies

We use essential first-party session cookies and local storage to maintain dashboard authentication and session state. We do not load third-party cross-site advertising trackers on our properties.

9. Contact information

Privacy questions and compliance requests: support@kitagency.co.