Privacy Policy
Last updated: June 1, 2025
1. Introduction
KhataFlow Technologies ("we", "our", or "us") operates the KhataFlow mobile application and website (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using KhataFlow, you agree to the collection and use of information as described in this policy.
2. Information We Collect
Account Information: When you register, we collect your mobile phone number for OTP-based authentication. We do not collect passwords.
Business Information: Shop name, address, and optional GPS coordinates you provide when setting up your shop profile.
Transaction Data: Ledger entries, customer records, sale amounts, payment records, and product catalog data that you create within the app.
Device Information: Device type, operating system version, and app version for debugging and support purposes.
Usage Data: Anonymised feature usage patterns to help us improve the product. This data cannot be linked back to you or your customers.
3. How We Use Your Information
- To provide, operate, and maintain the KhataFlow Service
- To authenticate your identity via OTP and manage your account
- To sync your local data to our secure cloud servers
- To send SMS payment reminders to your customers on your behalf (Pro plan)
- To respond to your support queries
- To detect and prevent fraud or misuse of the platform
- To improve and develop new features based on aggregated, anonymised usage data
4. Data Sharing and Disclosure
We do not sell, rent, or trade your personal or business data. We may share information only in the following limited circumstances:
- Service Providers: We use trusted third-party cloud services to store and sync your data securely. These providers process data only on our behalf and under strict data protection agreements.
- SMS Providers: For Pro plan users, customer phone numbers are shared with our SMS gateway solely to deliver payment reminders you initiate.
- Legal Requirements: We may disclose data if required to do so by law or in response to valid requests from public authorities in India.
5. Data Security
We implement strong security measures including AES-256 encryption on your device and in our servers, strict access controls so only your account can see your data, and automatic encrypted backups. While we strive to protect your data, no system is 100% secure and we cannot guarantee absolute security.
6. Data Retention
We retain your account and business data for as long as your account remains active. If you delete your account, we will delete your personal data within 30 days. Aggregated, anonymised usage statistics may be retained indefinitely as they cannot be linked to you.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Request a copy of the data we hold about you
- Withdraw consent for optional data processing
To exercise any of these rights, contact us at privacy@khataflow.com.
8. Children's Privacy
KhataFlow is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notification or email. Continued use of the Service after changes constitutes acceptance of the revised policy.
10. Contact Us
If you have questions about this Privacy Policy, please contact: