Who we are and what this covers
Kayaazh (“we”, “us”) builds business software, AI automation, and digital marketing services. This policy explains how we handle personal information when you:
- visit this website or send us an enquiry;
- use a Kayaazh application, such as HR & Payroll (hr.kayaazh.com) and TW ERP (erp.kayaazh.com); or
- connect a Google, Meta, or other third-party account to a Kayaazh application or integration.
Where we build or run software for a business, a separate agreement with that business may add to this policy.
Information we collect
Website enquiries
When you use our contact form, we collect your name, business name (optional), email address or phone number, the service you are interested in, your preferred language, an optional timeline, and your project description.
Website visits
This website does not use analytics, advertising trackers, or cookies. Like any website, our hosting provider records standard technical request logs (such as IP address, browser type, page requested, and time) to operate and secure the service.
Kayaazh applications
When a business uses a Kayaazh application, we process:
- account details, such as name, email address, phone number, role, and sign-in information;
- business records entered by the organisation, such as employee, attendance, leave, payroll, sales, stock, customer, or campaign records;
- where the organisation enables those features, attendance photos and device location used for check-in and geofencing; and
- technical logs needed to run, secure, and troubleshoot the application.
Connected third-party accounts
If you connect an account from Google, Meta (Facebook, Instagram, or WhatsApp), or another provider, we receive only the information covered by the permissions you approve on that provider’s consent screen. See Google user data below.
How we use information
- to reply to your enquiry and discuss a possible project;
- to provide, maintain, and support the applications and features you or your organisation use;
- to carry out actions you request through a connected account;
- to keep our services secure and prevent misuse; and
- to meet legal obligations.
Google user data
Some Kayaazh applications let you sign in with Google or connect Google services. When you do, we request only the access needed for the feature you are using, and Google shows you exactly what is requested before you approve it.
- Access: we access only the Google data covered by the scopes you grant, such as your name, email address, and profile picture for sign-in, or the specific account data a feature needs.
- Use: we use it only to provide and improve the user-facing features of the application you are using.
- Sharing: we do not sell Google user data and do not share it with third parties, except as needed to provide the feature, to comply with law, or as part of a merger or acquisition with notice to you.
- No advertising or AI training: we do not use Google user data for advertising, and we do not use it to develop, improve, or train generalised AI or machine-learning models.
- Human access: our staff do not read Google user data unless you give permission, it is needed for security, or the law requires it.
- Storage and deletion: we store it only as long as needed for the feature, and delete it when you disconnect your account or ask us to.
Kayaazh’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can remove Kayaazh’s access at any time from your Google Account permissions page.
Data managed by business customers
When a business uses a Kayaazh application to manage its own employees or customers, that business decides what information is collected and how it is used, and we process it on the business’s behalf. If you are an employee or customer of such a business, please contact that business first about your information. We will help them respond.
How long we keep information
We keep information only as long as needed for the purposes above. Enquiries are kept while we discuss your project and for a reasonable period afterwards. Application data is kept for the duration of the customer’s agreement and then deleted or returned as agreed. Data from connected accounts is deleted when you disconnect or ask us to delete it, unless we must keep it by law.
Security
We protect information using encrypted connections (HTTPS), access controls, and restricted access to production systems. No method of transmission or storage is completely secure, but we work to protect your information and will act promptly if we become aware of a problem.
Your choices and deleting your data
You can ask us to access, correct, or delete your personal information, or withdraw consent you have given, including under India’s Digital Personal Data Protection Act, 2023 where it applies. To make a request, use the form on our contact page, and tell us the name, email address, or phone number linked to your information and which application or connected account it relates to.
You can also disconnect a third-party account at any time from that provider’s settings. Once we receive a deletion request, we will confirm it and delete the data from our active systems, except where we must keep it by law.
Children
Our services are for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 18.
Changes to this policy
We may update this policy as our services change. We will post the updated version on this page with a new “Last updated” date.
Contact us
For any question about this policy or your information, use the form on our contact page.