Privacy Policy

1. Data we collect

• Contact: phone number, name, email address (and Google account name and email if you sign in with Google).
• Tax: PAN, used only for TDS and tax filings.
• Payout: bank account number, IFSC, account holder name and UPI ID.
• Cards: only the names of the banks whose cards you hold (for example "HDFC") so we can show matching offers. We never collect or store card numbers, expiry dates, CVV, PINs or card OTPs.
• Orders: marketplace order IDs, screenshots, invoices you upload, delivery and payout records.
• Messages: chats with our team on WhatsApp, Telegram or email.
• Device and usage: IP address, device and browser type, a device identifier cookie, app logs and login times, used for security and fraud checks.

2. Why we use it

• To create and secure your account and send login OTPs.
• To match your orders, verify invoices and pay you.
• To deduct TDS and meet tax, accounting and legal duties.
• To prevent fraud, duplicate accounts and misuse.
• To send service messages about your orders and payouts. Marketing messages only with your consent, and you can opt out any time.

3. Legal basis

We process your data with your consent, which you give when you sign up, and for legitimate uses allowed by the DPDP Act, such as meeting legal obligations (for example tax laws). You may withdraw consent at any time; this will not affect processing already done, and we may not be able to continue paying out without the data we need.

4. Who we share it with

We do not sell your data. We share it only as needed with:

• SMS/OTP and messaging providers (for example 2factor.in, WhatsApp, Telegram).
• Hosting and storage providers (for example Hostinger) and Google, if you use Google sign-in.
• Banks and payment providers to make payouts.
• Our CA, auditors and tax authorities (for TDS filing using your PAN).
• Law enforcement or regulators when the law requires it.

5. How long we keep it

• Account data: while your account is active.
• Order, payout, invoice and TDS records: up to 8 years, as needed under Indian tax and company laws.
• Security logs: up to 1 year [CONFIRM PERIOD].
• After you delete your account we erase or anonymise data we no longer need, except records we must keep by law.

6. Security

We use HTTPS encryption, restricted staff access, two-factor login for admins, audit logs and regular backups. Invoices are stored privately and shown only to you and authorised staff. No system is perfectly secure; if a breach affects you we will inform you and the Data Protection Board as the DPDP Act requires.

7. Your rights

• Get a summary of your personal data and how it is used.
• Correct or update wrong or incomplete data.
• Erase your data (see Delete Account), subject to legal retention.
• Withdraw consent.
• Nominate another person to act for you in case of death or incapacity.
• Raise a grievance with us, and then with the Data Protection Board of India if not resolved.

To use these rights, write to privacy@kamaai.app [CONFIRM EMAIL] or contact the Grievance Officer below. We aim to reply within 30 days.

8. Children

Kamaai is only for adults aged 18 and above. We do not knowingly collect data of children.

9. Grievance Officer

• Name: Vinay
• Email: admin@kamaai.app
• Phone: +91 99064 23272
• Address: Globiznet Shopping Pvt Ltd, 127, Railway Link Road, Near Apollo Cradle Hospitals, Liberty Market, Amritsar - 143001, Punjab

10. Changes

We will post updates here with a new date, and tell you in the app for important changes.