Skip to content
Start free trial

Legal

Privacy Policy

Last updated Version 3

This Privacy Policy explains how Kira Intrilogy ("we", "us", "our"),a sole proprietorship owned by Komal Sanket Sonara with its principal place of business at 7/B, RamNagar Society, Near Old Railway Crossing, Maninagar, Ahmedabad, Gujarat – 380008, collects, uses and protects personal data when you visit our website or use TECTET (the "Service").

We follow India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the Information Technology Act, 2000.

1. Our two roles

  • For your account data — the details of the people who sign up and use TECTET — we decide why and how the data is used. Under the DPDP Act we are the Data Fiduciary for it.
  • For Customer Data — the contacts, messages and files that a business handles in its workspace — the business decides why and how it is used, and we process it only on that business's instructions. For this data the business is the Data Fiduciary and we are its Data Processor. If you are an end customer who received a message from a business, please contact that business first about your data.

2. Data we collect

When you sign up and use the Service

  • name, work email, phone number, company name and your role in the workspace;
  • a hashed password (we never store your password itself) and your two-factor authentication settings;
  • billing details: billing name and address, GSTIN if you give one, plan, invoices and payment status.

Payments. Card, UPI and bank details are entered on our payment partner's page (Razorpay). We receive only a payment reference and status — never your full card number or UPI PIN.

When you use the Service

  • sign-in times, IP address, browser and device type, and the actions you take, kept as security and activity logs;
  • support requests and emails you send us.

Customer Data in a workspace

  • contacts (names, phone numbers, WhatsApp or Instagram profile names, tags and custom fields);
  • messages, photos, videos, voice notes and documents exchanged through connected channels;
  • message templates, broadcasts and their delivery reports.

3. Why we use it

  • Create and run your account and workspace — account data. Basis: your consent at sign-up, and to perform the service you asked for.
  • Bill you, issue GST invoices and keep tax records — billing data. Basis: a legal obligation.
  • Keep the Service secure and prevent fraud or misuse — logs, IP address. Basis: a legitimate use.
  • Answer support requests — account data, support messages. Basis: your consent.
  • Send service emails (invoices, security alerts, low credit warnings) — email address. Basis: to perform the service.
  • Process Customer Data for a business — Customer Data. Basis: the business's instructions.

We don't sell personal data, and we don't use Customer Data to advertise to anyone.

4. WhatsApp, Instagram and Meta

When a business connects WhatsApp (through Meta's WhatsApp Business Platform) or Instagram, messages travel through platforms run by Meta Platforms, Inc. and its affiliates ("Meta"). Meta processes that data under its own terms and privacy policy. We receive messages and delivery updates from Meta, store them so the business's team can see the conversation, and send the business's replies and approved templates back through Meta.

When a business connects its WhatsApp Business account to TECTET through Meta's Embedded Signup, Meta gives us an access token and the IDs of the business portfolio, the WhatsApp Business account and its phone numbers. We use them only to send and receive that business's messages, manage its message templates and show the status of its numbers. We store the token encrypted on our servers, never share it, and stop using it when the business disconnects TECTET or removes TECTET's access in Meta.

5. Who we share data with

We share personal data only as needed to run the Service:

  • Service providers that host our servers (Hostinger, with servers in Mumbai, India), send our emails and process payments (such as Razorpay), bound by contracts to protect the data;
  • Meta, for messages sent and received on WhatsApp or Instagram;
  • Integrations a business turns on itself;
  • Authorities, when the law or a valid order requires it;
  • A buyer or successor, if our business is merged or sold, under the same protections.

6. Where the data is stored

Our servers are located in Mumbai, India. Meta and some of our service providers may process data outside India. When data leaves India, we do so only as the DPDP Act and the Central Government's rules allow.

7. How long we keep it

  • Account data: while your account is active, then for 30 days after it is closed, unless the law requires longer.
  • Billing records and tax invoices: for as long as tax and accounting laws require.
  • Customer Data: while the workspace is active. A business can set its own retention for messages and files in Settings → Data & privacy. After the workspace is closed we delete Customer Data within 30 days.
  • Security logs: for a limited time, then deleted.

8. How we protect it

We use HTTPS for all traffic, store passwords as one-way hashes, offer two-factor authentication, keep each workspace's data separate, limit staff access to what their job needs, and record administrative actions in an audit log. No system is perfectly secure, so if a personal data breach happens we will inform the Data Protection Board of India and the people affected, as the DPDP Act requires.

9. Your rights

Under the DPDP Act you can:

  1. ask for a summary of the personal data we hold about you and how we use it;
  2. ask us to correct, complete or update it;
  3. ask us to erase it when it is no longer needed, unless the law requires us to keep it;
  4. withdraw your consent at any time (this doesn't affect what was done before, and some features may stop working);
  5. nominate another person to act for you in case of death or incapacity;
  6. raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

Write to support@tectet.co to use these rights. We may ask you to confirm your identity first. For Customer Data, we pass the request to the business that controls it and help them answer.

10. Children

The Service is meant for businesses and is not for anyone under 18. We don't knowingly collect personal data of children. If you think a child has given us data, contact us and we will delete it.

11. Cookies

We use only the cookies the Service needs to work: to keep you signed in, to protect forms against misuse and to remember simple settings. We don't use advertising cookies.

12. Changes to this policy

We may update this policy. Each version has a number and an effective date shown at the top of this page. For an important change we will tell you by email or in the Service before it applies.

13. Grievance officer and contact

  • Grievance officer: Komal Sonara
  • Email: info@kiraintrilogy.com
  • Address: 7/B, RamNagar Society, Near Old Railway Crossing, Maninagar, Ahmedabad, Gujarat – 380008

We acknowledge complaints within 24 hours and aim to resolve them within 15 days.