Privacy Policy

1. Who we are

KSoftWeb (“we”, “us”) is a software studio based in Durg-Bhilai, Chhattisgarh, India. We build and operate ERP products for Indian small and mid-sized businesses. This policy covers our marketing site at ksoftweb.com.

2. What data we collect

We only collect data you explicitly give us, plus standard server logs.

Forms you fill in — contact form, demo request, newsletter signup, job application. Captured fields include the name, email, phone, company, message and (for applications) resume PDF you submit.
Server logs — IP address, user-agent, timestamps, and the URL you visited. Retained for 90 days for security + abuse detection.
Cookies — only the Laravel session cookie (so the site remembers form submissions across redirects) and, when configured, a Google Analytics 4 cookie for aggregate, IP-anonymised traffic stats.
Client portal accounts — name, email, phone, company, password (stored hashed via bcrypt), and any avatar you upload.

3. What we don't collect

We never use third-party tracking pixels (Facebook, LinkedIn Insight, etc.).
We never buy or sell email lists.
We don't profile you across other sites.

4. How we use your data

Replying to you — every form submission generates an email to our team. That's the entire purpose.
Aggregate analytics — to understand which pages people read, so we can write better ones. Never tied back to your identity.
Service of contract — once you become a paying customer, we use your account data to deliver and support the product you've subscribed to.

5. Where your data lives

Production data is hosted in India (currently AWS Mumbai region). Daily MySQL backups go to encrypted S3 storage; weekly media backups too. We don't ship customer data outside India unless you explicitly request a deployment region elsewhere.

6. Who we share it with

We share data only with the third parties needed to run the service:

Razorpay — for payment processing (subject to their privacy policy).
Meta WhatsApp Cloud API — for transactional WhatsApp messages we send you.
Google Analytics 4 — only when you visit ksoftweb.com (not the products).
Email transport provider (e.g. AWS SES, Postmark) — to deliver emails.

We never sell, lease, or rent personal data to anyone.

7. Your rights

You can ask us to:

tell you what data we hold about you,
correct anything that's wrong,
delete your data entirely (within 30 days of a written request, except where law requires us to keep it),
stop processing it for any non-essential purpose.

Email legal@ksoftweb.com from the address you registered with.

8. Security

We follow industry-standard practices: encrypted connections (TLS 1.2+), bcrypt password hashing, role-based admin access, full audit logs of all admin changes, automated daily backups, and rate-limited public endpoints. We test for the OWASP Top 10 before each release.

9. Cookies + Do Not Track

We honour the DNT header — if your browser sends it, we don't load the GA snippet. We don't use any tracking cookies beyond GA4 (and only when configured).

10. Children's data

KSoftWeb is a B2B service. We don't intentionally collect data from anyone under 18. If you believe a minor has submitted data through our forms, email legal@ksoftweb.com and we will delete it.

11. Changes to this policy

We'll update the “Last updated” date above whenever we change it. Material changes (anything that affects what data we collect or who we share it with) will also be emailed to portal users 30 days in advance.

12. How to reach us

Email legal@ksoftweb.com, or write to:
KSoftWeb, Durg-Bhilai, Chhattisgarh, India.