Privacy Policy

This policy explains how Krityam (“Krityam”, “we”, “us”) collects, uses and protects personal data when you visit krityam.co, book a call with us, or work with us as a client. We process personal data in line with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable laws.

1. Who this policy covers

• Website visitors who browse krityam.co.
• Prospective clients who book a discovery call or contact us.
• Client brands and their team members we work with.
• Our clients’ customers, whose data we process on a client’s behalf to run order confirmation, delivery follow-up and customer engagement (see section 4).

2. What we collect

When you visit the website

Our hosting provider automatically records standard technical data such as IP address, browser type, device information, pages visited and the time of the visit. We use this to keep the site secure and working. The site does not currently use analytics or advertising cookies. If that changes, we will update this policy.

When you book a call or contact us

Calls are booked through Cal.com, which collects the details you enter, such as your name, email address and any notes about your business. Cal.com’s own privacy policy applies to that booking. We also keep the information you share with us on calls, by email, on WhatsApp or on LinkedIn.

When you become a client

To deliver our services, a client brand shares business data with us. This can include order, cash-on-delivery, shipping and delivery data, and its customers’ names, phone numbers, delivery addresses and purchase history. Where the service is enabled, it also includes records of the AI voice calls and WhatsApp messages we run for the brand, such as call recordings, transcripts and message logs.

3. How we use it

• To respond to enquiries, hold discovery calls and assess whether we are the right fit.
• To set up, run and improve the services a client has engaged us for.
• To report results to clients, including dashboards and reviews.
• To keep our website and systems secure and prevent misuse.
• To meet legal, tax and regulatory obligations.

We do not sell personal data.

4. Data we process for client brands

For our clients’ customers’ data, the client brand decides why and how that data is used and is the Data Fiduciary under the DPDP Act. Krityam acts as a Data Processor: we process that data only to provide the services the brand has engaged us for, under its instructions and our written agreement with it.

Client brands are responsible for giving their customers the required notice, obtaining any consent needed to contact them by phone or WhatsApp, and following applicable telecom and messaging rules. If you are a customer of a brand we work with, please contact that brand first about your data. We will help the brand respond to your request.

5. Who we share it with

We share personal data only as needed to run our business and deliver our services, with:

• Service providers that support our work, such as hosting, scheduling, telephony and voice AI, WhatsApp Business messaging, cloud storage and AI model providers. They may use the data only to provide their service to us.
• Authorities, where the law requires it.
• A successor business, if Krityam is merged, acquired or restructured, under the same protections.

Some providers may process data outside India. Where they do, we rely on transfers permitted under Indian law.

6. How long we keep it

We keep personal data only as long as we need it for the purposes above. Client data is kept for the length of the engagement and then deleted or returned within the period agreed with the client, unless the law requires us to keep it longer. Enquiry and booking details are deleted when they are no longer needed.

7. How we protect it

We use reasonable technical and organisational safeguards, including access controls, encrypted connections and restricting access to people who need it. No system is completely secure, but if a personal data breach affects you, we will notify you and the relevant authorities as the law requires.

8. Your rights

Under the DPDP Act you can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct, complete or update it;
• erase it, where we no longer need it or you withdraw consent;
• handle a grievance about how we have processed it.

You can also nominate another person to exercise these rights on your behalf. If we don’t resolve your grievance, you can complain to the Data Protection Board of India.

9. Children

Our website and services are meant for businesses and are not directed at anyone under 18.

10. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it last changed.

11. Contact and grievances

For privacy questions, requests or grievances, contact Rohit Kewate, Founder, through our LinkedIn page or by booking a call.