Privacy Policy

1. Who We Are

KritIQ Labs LLP is a technology company specialising in SaaS products and IT services, with a focus on the real estate industry. Our registered office is located in Mumbai, Maharashtra, India. We operate the website at kritiqLabs.in and associated subdomains, as well as our SaaS product Maintainease and other digital services we provide to clients.

We act as a data controller when we collect your personal information through our website, contact forms, and direct communications. When we process personal data on behalf of our clients as part of our services, we act as a data processor.

2. Information We Collect

We collect information in the following ways:

2.1 Information You Provide Directly

• Contact Form Submissions: When you fill out the contact form on our website, we collect your full name, email address, phone number (if provided), company name (if provided), and the contents of your message.
• Email Communications: When you email us at hello@kritiqLabs.in or any other KritIQ Labs email address, we collect your email address and any personal information you choose to include in your message.
• Business Enquiries: If you engage with us regarding a project or service, we may collect additional information such as your business name, billing address, GST registration number, and project requirements.
• Account Registration: If you register for any of our SaaS products such as Maintainease, we collect your name, email address, organisation name, and other details necessary to create and manage your account.

2.2 Information Collected Automatically

• Log Data: When you visit our website, our servers automatically record information including your IP address, browser type and version, the pages you visit, the time and date of your visit, and the time spent on each page.
• Cookies: We use essential cookies to ensure the website functions correctly. These cookies do not track you for advertising purposes. See Section 5 for more details about our cookie use.
• Usage Data: If you use our SaaS products, we may collect data about how you use those products, including features accessed, actions performed, and session duration, to help us improve the service.

2.3 Information from Third Parties

We may receive information about you from third-party sources such as business partners or referral sources, but only where those third parties have confirmed they have the legal right to share that information with us.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to your enquiries submitted via our contact form or email, and to communicate with you about your projects or service requirements.
• To provide and manage our services, including onboarding you as a client, delivering contracted work, issuing invoices, and maintaining ongoing business relationships.
• To operate our SaaS products, including creating and managing your account, processing subscription payments, and providing customer support.
• To improve our website and services by analysing how visitors use our site and how clients use our products, enabling us to enhance user experience and fix issues.
• To comply with legal obligations under applicable Indian laws, including the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and applicable tax and financial regulations.
• To send service-related communications such as billing confirmations, project updates, and important notices about our services. We do not send unsolicited marketing emails without your consent.

4. Legal Basis for Processing

We process your personal data under the following legal bases as established under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:

• Consent: Where you have given us clear and informed consent to process your personal data, such as when you submit a contact form or register for our services.
• Contractual Necessity: Where processing is necessary to perform a contract to which you are a party, or to take pre-contractual steps at your request — for example, to deliver a software project or manage your SaaS subscription.
• Legal Obligation: Where we are required by law to process your data, including for tax compliance, financial record-keeping, and regulatory reporting obligations applicable to companies registered in India.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, or maintaining the security of our systems, provided those interests are not overridden by your privacy rights.

5. Cookies

Our website uses a minimal set of cookies to ensure core functionality. We do not use third-party advertising cookies or behavioural tracking cookies.

5.1 Types of Cookies We Use

• Essential / Strictly Necessary Cookies: These cookies are required for the website to function and cannot be disabled. They are typically set in response to actions you take, such as setting your privacy preferences.
• Analytics Cookies (where applicable): If we use privacy-respecting analytics tools in future, we will update this section and seek your consent where required.

5.2 Third-Party Resources

Our website loads resources from the following third-party services, which may set their own cookies or collect limited technical data:

• Google Fonts (fonts.googleapis.com) — Used to load our website's typography. Google may collect your IP address and browser information as part of serving font files. Please refer to Google's Privacy Policy at policies.google.com/privacy.
• GSAP CDN (cdnjs.cloudflare.com) — Used to load animation libraries for our website. Cloudflare may log request metadata. Please refer to Cloudflare's Privacy Policy at cloudflare.com/privacypolicy.

We recommend reviewing the privacy policies of these third-party services if you have concerns about data collection by those providers. By using our website, you acknowledge that these third-party resources are loaded as part of the site experience.

5.3 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For more information on managing cookies, visit aboutcookies.org.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to any third party under any circumstances.

We may share your personal information only in the following limited circumstances:

• Service Providers: We may engage trusted third-party vendors who assist us in operating our business, such as cloud hosting providers, payment gateways, or project management tools. These vendors are contractually obligated to handle your data securely and only for the purposes for which it was shared.
• Legal Requirements: We may disclose your personal data if required to do so by law, court order, or a valid request from a government authority in India or any jurisdiction where we operate, and where we are legally compelled to comply.
• Business Transfers: In the event of a merger, acquisition, or restructuring of KritIQ Labs LLP, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations. You will be notified of any such transfer.
• With Your Consent: We may share your information with other third parties with your explicit prior consent.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:

• Contact Form Data: Retained for up to 2 years from the date of submission, or for the duration of the business relationship if one is established.
• Client Business Data: Retained for a minimum of 7 years following the end of the business relationship, in compliance with the Companies Act, 2013 and applicable GST record-keeping requirements.
• SaaS Account Data: Retained for the duration of your active subscription, and for up to 90 days following account cancellation (to allow for reactivation). After 90 days, account data is permanently deleted unless a longer retention period is required by law.
• Log and Technical Data: Retained for up to 12 months for security and troubleshooting purposes.

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Use of HTTPS encryption for all data transmitted to and from our website and services.
• Access controls restricting personal data access to authorised personnel only, on a need-to-know basis.
• Regular review of our data collection, storage, and processing practices.
• Use of reputable, security-audited cloud infrastructure providers for hosting our services.

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any data breaches in accordance with applicable law, including the breach notification requirements under the DPDP Act, 2023.

9. Your Rights Under Indian Law

Under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights with respect to your personal data:

9.1 Right to Access

You have the right to request a summary of the personal data we hold about you and the purposes for which it is being processed.

9.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

9.3 Right to Erasure

You have the right to request that we delete your personal data when it is no longer necessary for the purposes for which it was collected, subject to any overriding legal obligations we may have to retain the data.

9.4 Right to Withdraw Consent

Where we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

9.5 Right to Grievance Redressal

You have the right to have your grievances related to the processing of your personal data addressed in a timely and effective manner. Please contact us using the details in Section 12 to raise any concerns.

9.6 Right to Nominate

Under the DPDP Act, 2023, you have the right to nominate another individual who shall exercise your rights in the event of your death or incapacity. To nominate a person, please contact us at hello@kritiqLabs.in.

To exercise any of the above rights, please send a written request to hello@kritiqLabs.in. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

10. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hello@kritiqLabs.in and we will take steps to delete that information promptly.

11. Links to Third-Party Websites

Our website may contain links to third-party websites, products, or services. These external sites are not operated by us, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link on our website does not imply endorsement of the linked site.

12. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or a prominent notice on our website. Your continued use of our website or services after any changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

13. Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000, the Information Technology (Amendment) Act, 2008, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023. Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts located in Mumbai, Maharashtra, India.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

We are committed to resolving all privacy-related concerns promptly and transparently.