Privacy Policy

1. Introduction

KVL TECH (operating as KVL Business Solutions) is a digital technology company headquartered at Sector 62, Noida, Uttar Pradesh 201309, India. We provide website development, custom software, SaaS products, AI solutions, and marketing automation services to clients across India and globally.

This Privacy Policy applies to all personal data collected through our website, client portal, contact forms, payment flows, support channels, and any other touchpoint where you interact with KVL TECH. By using our website or services, you consent to the data practices described in this policy.

We only collect information that is necessary for legitimate business purposes, and we handle it with care, transparency, and respect for your rights.

2. Information We Collect

We collect information from you in the following ways:

a) Information You Provide Directly

• Contact & Inquiry Forms: When you submit a contact, inquiry, or quote request form, we collect your name, email address, phone number, company name, and the message you write.
• Account Registration: When you create a client portal account, we collect your name, email address, phone number, and a securely hashed password. We never store passwords in plain text.
• Support Tickets: When you raise a support ticket, we collect your name, email, order reference, and the description of your issue.
• Project Briefings: During project onboarding, you may provide us with business details, branding assets, and content. This information is used solely to deliver your project.

b) Payment Information

All payments are processed by Razorpay, a PCI-DSS Level 1 certified payment gateway. KVL TECH does not collect, store, or have access to your credit card number, debit card number, CVV, bank account details, or UPI PIN. This sensitive payment information is entered directly on Razorpay's secure interface and transmitted directly to them. KVL TECH only receives a payment confirmation reference and the amount paid.

c) Automatically Collected Information

• IP Address: Your IP address is collected automatically when you visit our website and may be used for security monitoring, fraud prevention, and geographic analytics.
• Cookies: We use cookies to maintain session state, remember your preferences, and track website usage. See Section 5 (Cookies Policy) for full details.
• UTM Parameters: If you arrive at our website via a marketing campaign link containing UTM parameters (e.g., utm_source, utm_medium, utm_campaign), these are stored to help us understand the effectiveness of our marketing efforts. This data is anonymous at the campaign level.
• Device & Browser Information: We may collect information about the device and browser you use to access our website, including browser type, operating system, screen resolution, and referral URL, for analytics and compatibility purposes.

3. How We Use Your Information

KVL TECH uses the information we collect for the following purposes:

• Order Processing & Service Delivery: To process your payments, manage your orders, deliver purchased products and services, and communicate project updates and delivery confirmations.
• Customer Support: To respond to your inquiries, resolve support tickets, troubleshoot issues, and provide technical assistance related to your account or projects.
• Account Management: To create and manage your client portal account, authenticate your identity, and ensure secure access to your account and order history.
• Marketing Communications (with consent): To send you newsletters, product announcements, promotional offers, and updates about KVL TECH services — but only if you have opted in to receive such communications. You may unsubscribe at any time via the unsubscribe link in any email or by contacting us directly.
• Service Improvement: To analyse usage patterns, understand which features are most valuable, identify bugs and performance issues, and improve our website and services over time.
• Legal & Compliance: To comply with applicable Indian laws, respond to lawful requests from government authorities, enforce our Terms of Service, and protect the legal rights of KVL TECH and our clients.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorised access, and other illegal activities.

We do not sell, rent, or trade your personal information to any third parties for their own marketing purposes.

4. Third-Party Services

To operate our business effectively, KVL TECH uses a small set of trusted third-party service providers. In each case, only the minimum data necessary is shared, and all providers are bound by their own privacy and security obligations:

• Razorpay (Payment Processing):We use Razorpay to process all online payments. When you make a payment, you interact directly with Razorpay's secure checkout interface. KVL TECH shares only your name, email, phone number, and order amount with Razorpay for payment processing. Card details are never shared with or stored by KVL TECH. Razorpay's privacy policy is available at razorpay.com/privacy.
• Resend (Transactional Emails): We use Resend to send transactional emails such as order confirmations, password reset links, support ticket notifications, and invoice copies. Resend receives your email address and the content of the email only. We do not share unnecessary personal data with Resend beyond what is required to deliver the email.
• Groq AI (Chatbot):Our website features an AI-powered chatbot for answering questions about our services. This chatbot is powered by Groq's language model API. Messages you send to the chatbot are processed by Groq's servers. We do not associate chatbot conversations with your personal account unless you explicitly identify yourself. We recommend you avoid sharing sensitive personal or financial information via the chatbot. Minimal session data is shared with Groq for the sole purpose of generating a response.

We do not use Google Analytics, Meta Pixel, or other advertising trackers. We do not share your data with advertisers.

5. Cookies Policy

Our website uses cookies — small text files stored on your device — to deliver a better user experience. We use the following categories of cookies:

• Essential Cookies: These cookies are strictly necessary for the website to function. They include session cookies for authentication (keeping you logged in), CSRF protection tokens, and shopping cart state. You cannot opt out of essential cookies without affecting core website functionality.
• Analytics Cookies: We use lightweight, privacy-respecting analytics to understand how visitors interact with our website — which pages are most visited, how long users stay, and where they come from. This data is aggregated and anonymised. You may opt out of analytics cookies through your browser settings or a cookie consent prompt.
• UTM Tracking Cookies: When you arrive at our website via a marketing campaign link, UTM parameters (source, medium, campaign name) are stored in a session cookie to attribute conversions to the correct marketing channel. This is for internal marketing analytics only and does not involve third-party ad networks.
• Preference Cookies: These cookies remember your preferences such as language selection and theme (light/dark mode) to personalise your experience on return visits.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling essential cookies may prevent certain parts of our website from functioning correctly.

6. Data Security

KVL TECH implements commercially reasonable technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction:

• HTTPS Encryption: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security). Our website enforces HTTPS on all pages.
• Password Hashing: User passwords are never stored in plain text. We use industry-standard cryptographic hashing algorithms (bcrypt) with salt to store password hashes securely.
• Access Controls: Access to personal data is restricted to KVL TECH personnel who require it to perform their job functions. We enforce role-based access controls on all internal systems.
• Secure Infrastructure: Our servers and databases are hosted on reputable cloud providers with industry-standard security certifications, physical security controls, and regular security audits.
• Payment Security: We do not store any payment card data. All payment processing is handled entirely by Razorpay, which is PCI-DSS Level 1 compliant.

While we take every reasonable precaution, no method of data transmission over the internet or electronic storage is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you as required under applicable law within 72 hours of becoming aware of the breach.

7. Your Rights

You have the following rights with respect to your personal data held by KVL TECH. To exercise any of these rights, please email us at support@kvlbusinesssolutions.com with the subject line “Data Rights Request”. We will respond to all requests within 30 calendar days.

• Right to Access: You may request a copy of the personal data we hold about you, including information about how it is being used.
• Right to Correction: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to Deletion: You may request that we delete your personal data. We will comply with deletion requests unless we are required to retain the data for legal, tax, or contractual reasons (e.g., financial records required under Indian tax law).
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while we verify the accuracy of data you have contested.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you can transfer it to another service.
• Right to Withdraw Consent: Where we process your data on the basis of your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to our processing of your personal data for direct marketing purposes at any time.

8. Data Retention

We retain personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law:

• Active Accounts: Personal data associated with an active client account is retained for the duration of the account being active.
• Account Closure: Upon receipt of a written account closure request, we will delete or anonymise your personal data within 30 calendar days, except for data that we are legally required to retain (e.g., financial transaction records, GST invoices, which must be retained for 7 years under Indian tax law).
• Inquiries & Contact Forms: Data submitted via contact or inquiry forms is retained for 12 months and then automatically purged, unless a business relationship was established as a result of the inquiry.
• Support Tickets: Support ticket records are retained for 2 years from the date of resolution for quality assurance and dispute resolution purposes.
• Marketing Opt-Outs: If you unsubscribe from marketing communications, we retain a record of your email address on our suppression list to ensure we do not contact you again.

9. Children's Privacy

KVL TECH's services are intended for businesses and individuals aged 18 years and above. We do not knowingly collect, process, or store personal data from persons under the age of 18 (“minors”).

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at support@kvlbusinesssolutions.com. We will take prompt steps to delete such information from our systems.

We do not direct any of our marketing communications, website content, or services at children, and we do not use any data collection techniques specifically designed to attract or identify minors.

10. Changes to This Policy

KVL TECH may update this Privacy Policy from time to time to reflect changes in our business practices, applicable laws, or service offerings. When we make material changes, we will:

• Update the “Last updated” date at the top of this page.
• Post the revised policy on this page at kvlbusinesssolutions.com/privacy.
• Notify registered account holders of significant changes via email at the address associated with their account, where reasonably practicable.

Your continued use of our website or services after the effective date of any revised Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your data.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our data privacy team:

We aim to respond to all privacy-related queries within 30 days. For urgent matters or data breach notifications, please use the subject line “URGENT — Data Privacy” in your email.