Privacy Policy

This Privacy Policy describes how Kiwikit Software ("we", "us") collects, uses and protects information when you use Kiwikit Service (the "Service") or visit our website. Our office is at 3rd Floor, G. No. 1174, 1175/1/1, Office No. 308, Sai Sanskruti, Baif Road, Wagholi, Pune, Maharashtra – 412207, India.

• Account information: your name, business name, mobile number, email address and city, provided when you register, subscribe or submit an inquiry form.
• Business data: the operational data you enter into the Service — customer records, device details, job cards, payments and reports. This data belongs to you; we process it only to provide the Service.
• Usage & technical data: log data such as IP address, browser type, pages visited and actions performed, used for security auditing and improving the Service.

• To provide, maintain and improve the Service.
• To respond to your inquiries and provide customer support.
• To process payments and manage subscriptions.
• To send service-related communications (billing, security, feature updates). We do not send marketing spam.
• To detect, prevent and investigate fraud or abuse.

• Data is stored on reputable cloud infrastructure. Each customer business receives a logically isolated database — your data is never mixed with another customer's.
• All connections to the Service are encrypted using SSL/TLS.
• Backups are taken daily and encrypted using AES-256 before storage.
• Access to production systems is restricted to authorised personnel and audit-logged.

Our optional Backup & Restore feature lets you store encrypted backups of your company database in your own Google Drive. When you choose to connect Google Drive, we request the https://www.googleapis.com/auth/drive.file scope. This is a per-file scope: it grants our application access only to the files and folder it creates itself (an "ERP Backups" folder). We cannot see, read, or modify any other file in your Google Drive.

We use this access solely to:

• create an "ERP Backups" folder in your Google Drive;
• upload encrypted backup files to that folder;
• download those files when you choose to restore; and
• list, verify, and delete backup files that we created.

Backup files themselves are stored in your Google Drive, not on our servers. On our side we store only: an encrypted Google refresh token (so backups can run), the Google Drive folder/file identifiers, and backup metadata (file name, size, date, checksum). Backup files are encrypted (AES-256-GCM) before they leave our server, so their contents cannot be read by anyone — including Google — without restoring them through our application.

You can disconnect Google Drive at any time from the Backup & Restore settings in the app; doing so revokes our access and deletes the stored refresh token. You may also revoke access directly from your Google Account permissions. Backup files already in your Google Drive remain under your control.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for serving advertisements, and we do not allow humans to read this data unless we have your consent for specific support issues, it is necessary for security purposes, or to comply with applicable law.

We do not sell or rent your personal information. We share data only with service providers necessary to operate the Service — such as cloud hosting providers, payment gateways (to process your payments) and messaging providers (to deliver WhatsApp/SMS updates you have enabled) — and only to the extent required. We may disclose information if required by law or a valid governmental request.

The Service uses cookies and browser storage strictly for authentication (keeping you signed in) and essential preferences. We do not use third-party advertising cookies on the Service.

We retain your data for as long as your subscription is active. After termination, data is retained for up to 90 days (so you can reactivate or export), after which it is permanently deleted. You may request earlier deletion or a full export at any time by contacting us.

You may request access to, correction of, export of, or deletion of your personal information by writing to kiwisofttechwork@gmail.com. We will respond within a reasonable time and in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023.

We may update this Privacy Policy from time to time. Material changes will be notified via the Service or email. The "Last updated" date at the top reflects the latest revision.

For privacy questions or grievances, contact us at kiwisofttechwork@gmail.com or +91 84595 74080, or write to our office address below.