Privacy Policy

Who we are

Khosha Systems (“Khosha”, “we”, “us”) is a product engineering company based in Bangalore, Karnataka, India. We are the Data Fiduciary for personal data collected through khoshasystems.com. Questions about this policy or your data go to our grievance contact below.

What we collect

When you send a form (contact, sales, demo, support, careers, partnerships, newsletter, the audit report, or a request through the KAI assistant), we collect what you type: your name, email address, phone number (optional), company, and your message and choices in the form. With it we record the page you sent it from and how you reached the site: the referring website, the landing page, and any campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_term, utm_content, and Google or Meta ad click ids).

When you browse, our servers keep standard technical logs (IP address, browser, pages requested) for security and to keep the site running. With your consent only, we also use analytics cookies (see Cookies).

We do not ask for, and ask you not to send, sensitive information such as financial, health or government ID details through the forms.

Why we use it

• To reply to your enquiry, arrange a demo, provide support, or consider your job application.
• To send a confirmation of your request and, where you asked for it, our newsletter or follow-up emails (you can opt out at any time).
• To understand which pages and campaigns bring people to us, and to improve the site (only with analytics consent).
• To protect the site and our forms from spam and abuse.

Consent and legal basis

We process form data on the basis of your consent, given when you submit the form, and for the purpose you submitted it for. Analytics cookies are used only after you choose “Accept all” in the cookie bar. Security logs and spam protection rely on legitimate uses permitted by law. You can withdraw consent at any time (see Your rights); withdrawing does not affect processing that happened before.

How long we keep it

Enquiries and leads are kept for up to 24 months from your last contact with us, then deleted or anonymised. Job applications are kept for up to 12 months. Server logs are kept for up to 90 days. If you become a customer, records needed for the contract and for tax and legal obligations are kept for as long as the law requires.

Who processes it for us

We share personal data only with service providers that help us run the site and reply to you, under contracts that limit their use of it:

• EmailJS: sends the notification of your form to our team and your confirmation email.
• Brevo: our email platform for follow-up emails and the newsletter.
• Google Analytics (Google) and PostHog: site analytics, only with your consent.
• Cloudflare: network delivery and security, including spam checks on forms.
• Our hosting provider: the servers that run this site and store form submissions.

Some of these providers process data outside India, including in the United States and the European Union. We do not sell personal data, and we do not share it for third-party advertising.

Cookies

Essential: storage the site needs to work, such as remembering your cookie choice and keeping an open conversation or audit in progress for your current visit. These are always on.

Analytics: Google Analytics and PostHog cookies that count visits and show how the site is used. They are off until you choose “Accept all”, and Google’s tags run in Consent Mode with advertising storage denied unless you accept.

You can change your choice at any time: Cookie settings. You can also clear or block cookies in your browser.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• tell you what personal data we hold about you and how we use it (access);
• correct, complete or update it (correction);
• delete it, unless we must keep it by law (erasure);
• stop using it, by withdrawing your consent (withdrawal);
• name another person to exercise these rights on your behalf if you cannot (nomination);
• hear and resolve a complaint about how we handled your data (grievance).

Email veda@khosha.tech with the subject “Privacy request”. We may ask you to confirm your identity, and we reply within 30 days.

Grievance contact

Grievance Officer, Khosha Systems, Bangalore, Karnataka, India. Email: veda@khosha.tech. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Visitors in Canada

If you are in Canada, we handle your personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA). Your information may be stored and processed in India and the other countries listed above, where it may be accessible to the authorities of those countries. You have the same rights of access and correction described here, and you may complain to the Office of the Privacy Commissioner of Canada.

Security and children

We protect data with encryption in transit (HTTPS), access controls and limited retention. No method is perfectly secure, so please report any concern to us. This site is not directed at children under 18, and we do not knowingly collect their data.

Changes

We will update this page when our practices change and revise the date at the top. See also our Terms of Use.