Privacy Policy

• Account Holders / Business Owners ("you", "Data Subject") - the person or business that signs up for Kayyro.
• End Customers of Account Holders - when you use Kayyro to create invoices, you may enter your own customers' names, phone numbers, addresses, and TRNs into the platform. You (the Account Holder) are responsible for that data as the Controller for your own customers; Kayyro acts as the technology platform (a "Data Processor" in relation to that data) storing it on your behalf.

From you directly (Account Holders):

• Name, email address, phone number
• Business name, business address, TRN (VAT registration number)
• Password (stored in encrypted/hashed form, never in plain text)
• Payment and billing information (processed by our payment partner, Razorpay - we do not store your card/UPI details ourselves)

Entered by you into the platform (about your own customers):

• Customer names, phone numbers, addresses, TRN (where applicable)
• Product, pricing, and invoice data you create

Collected automatically:

• Basic usage data (login timestamps, pages visited, device/browser type) for security and service improvement
• IP address, for fraud prevention and security logging

We use collected information to:

• Provide and operate the Service (generate invoices, calculate VAT, track inventory)
• Authenticate your account and maintain security
• Process subscription payments
• Communicate with you about your account, invoices, or service updates
• Comply with legal obligations under UAE law (including VAT, tax record-keeping and consumer protection law)
• Improve and troubleshoot the Service

We do not sell your data or your customers' data to third parties, and we do not use your business data to train any external AI/ML models.

We share information only with:

• Payment processors (Razorpay) - to process your subscription payments
• Cloud infrastructure providers (Supabase, Vercel, or successor providers) - to host and store your data securely
• Communication services (e.g. WhatsApp, when you choose to share an invoice via WhatsApp) - only the specific invoice link you choose to share, sent at your instruction
• Law enforcement or regulators, only when legally required (e.g. a valid court order or statutory request)

We do not share your data with advertisers or data brokers.

• Your data is stored on cloud infrastructure with encryption in transit (HTTPS/TLS) and at rest.
• Access to your organization's data is restricted using database-level Row-Level Security, meaning other Kayyro customers cannot access your business data, and vice versa.
• We limit internal access to your data to what is necessary for providing support or maintaining the Service.
• No system is 100% secure; we take reasonable technical and organizational measures to protect your data but cannot guarantee absolute security.

As a Data Subject, you have the right to:

• Access - request a copy of the personal data we hold about you
• Correction - request correction of inaccurate or incomplete data
• Erasure - request deletion of your personal data, subject to legal retention requirements (e.g. tax record-keeping obligations)
• Withdraw consent - withdraw consent for optional processing at any time (this may limit your ability to use parts of the Service)
• Complaints - raise a complaint with our Data Protection contact (see Section 10) and, if unresolved, escalate to the UAE Data Office

To exercise these rights, contact us at support@kayyro.example.

We retain your account data for as long as your account is active. After account closure, we may retain invoice and transaction records for the period required under UAE tax and commercial law (at least five years for VAT records), after which data is deleted or anonymized, except where longer retention is required by law.

Kayyro is intended for business use by individuals who are at least 18 years old. We do not knowingly collect data from children, and the Service is not directed at children.

Our hosting and service providers may process data outside the UAE. Where this happens we rely on providers that apply appropriate safeguards and we transfer only the data needed to run the Service, in line with the PDPL.

For any privacy-related questions, complaints, or requests, contact our Data Protection contact:

• Name: Focused Folks Solutions LLP
• Email: support@kayyro.example
• Address: 236, Seventh Heaven, Ahmedabad, Gujarat, 380055
• Response time: We aim to acknowledge complaints within 7 days and resolve them within 30 days.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Focused Folks Solutions LLP

• Email: support@kayyro.example
• Address: 236, Seventh Heaven, Ahmedabad, Gujarat, 380055