Privacy Policy

Introduction

KAREOPS PRIVATE LIMITED ("KareOps", "we", "us" or "our") operates the KareOps brand, the website at www.kareops.com, and related business-operations services. This Privacy Policy explains how we may collect, use, disclose, retain and protect personal data when you visit the website, contact us, request a demonstration, authenticate to an account, or use referral or other KareOps functionality.

In this Policy, "personal data" means information about an identifiable individual. Depending on the context and applicable law, KareOps may act as the entity deciding why and how personal data is processed, or may process business data on a customer's instructions under separate commercial terms.

Information We Collect

Information you provide

Depending on how you interact with KareOps, you may provide:

• your name, email address, phone number, preferred contact method, and company or business information;
• contact and demo-request details, including your reason for contacting us, message, business size, requested date and time, and browser-reported time zone;
• authentication and signup details, including your email address, name, one-time password verification submission, and optional referral code;
• referral information, such as referral codes, related contact or organisation identifiers, referral status, attribution, and reward or payout activity where that functionality is made available; and
• information included in support messages, enquiries, feedback, or other communications with us.

Information collected automatically

When you use the website, KareOps and the infrastructure or analytics services supporting it may receive standard technical information such as IP address, browser and device information, referring page, pages or features used, dates and times, diagnostic events, and similar usage information. The website also captures campaign parameters such as UTM source, medium, campaign, term and content when those values are present in a signup URL.

The website uses Google Tag Manager as a tag-management mechanism. Tags configured within that container may collect analytics or usage information. Because container configuration can change independently of this website's source code, the precise tags and cookies active at a given time should be confirmed against the live consent and analytics configuration. See our Cookie Policy for more information about cookies and browser storage.

How We Use Information

We may use personal data, as relevant to the interaction, to:

• provide, administer and support requested KareOps services;
• respond to enquiries and schedule or conduct demonstrations;
• send and verify OTPs and maintain authenticated sessions;
• administer referral attribution, status and related rewards where referral functionality is available;
• provide customer support and service communications;
• protect accounts and services, prevent fraud or abuse, troubleshoot errors, and investigate security incidents;
• understand website and product usage, measure campaigns, and improve KareOps functionality and user experience;
• send product or marketing communications where we have an appropriate permission or other lawful basis, and honour opt-out or withdrawal requests; and
• comply with applicable law, enforce agreements, and establish, exercise or defend legal claims.

Consent and Other Permitted Processing

KareOps processes personal data for lawful purposes. Depending on the circumstances, processing may be based on your consent, steps requested by you in connection with a service or commercial relationship, KareOps' legitimate business purposes where recognised by applicable law, legal obligations, or other processing permitted under applicable law.

Where consent is the basis for processing, you may withdraw it using an available unsubscribe or preference mechanism or by contacting us. A withdrawal will not affect processing already carried out lawfully. It may mean that we cannot continue an optional communication or a service that depends on the relevant data.

We take account of applicable Indian data-protection requirements, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as their relevant provisions come into force and apply to the processing concerned, along with other applicable Indian law.

Sharing and Service Providers

We do not sell personal data. We may disclose personal data only as reasonably necessary for the purposes described in this Policy to categories of recipients such as:

• hosting, cloud infrastructure and technical service providers;
• email, communications and customer-support providers;
• analytics and tag-management providers, including Google services where configured through Google Tag Manager;
• security, fraud-prevention and operational service providers;
• professional advisers, auditors, insurers and legal advisers where appropriate; and
• courts, regulators, law-enforcement agencies or other authorities where disclosure is required or permitted by applicable law.

Where a customer uses KareOps to process data relating to its own staff, customers or business contacts, that customer determines what it submits and is responsible for providing required notices and permissions. The applicable customer agreement may contain additional data-processing terms.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing requested services, maintaining appropriate business and transaction records, resolving disputes, protecting the service, and meeting contractual or applicable legal obligations. The appropriate period depends on the nature of the data, the purpose of processing, the relationship with you or your organisation, and applicable requirements. Data may be deleted, anonymised, or retained in restricted form when no longer required for an active purpose.

Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or misuse. Measures may include transport encryption, access controls, authentication, security headers, monitoring, and limiting access according to operational need.

No website, network, storage system or transmission can be guaranteed to be completely secure. You are responsible for protecting access to your email account, OTPs, devices and authenticated KareOps session, and should notify us promptly if you suspect unauthorised access.

Your Rights

Subject to applicable law, commencement provisions, and relevant exceptions, you may have rights to:

• request access to or a summary of personal data being processed;
• request correction of inaccurate or misleading data, completion of incomplete data, or updating of personal data;
• request erasure where the data is no longer required and erasure applies;
• withdraw consent where processing relies on consent;
• raise a grievance and receive an appropriate response; and
• nominate another individual where that right applies.

To exercise a right, contact us using the details below and describe your request. We may need to verify your identity and authority before acting. A request may be limited or declined where retention or processing is required or permitted by applicable law, or where another valid exception applies. You may also have a right to approach the competent authority after using the available grievance process.

Children

KareOps is a business and business-operations product and is not directed to children. We do not knowingly solicit children's personal data through the website. If you believe a child has provided personal data without the involvement or authorisation required by applicable law, contact us so that we can review the circumstances and take appropriate action.

International Processing

KareOps and its service providers may process or store information in locations other than the location from which you access the service. We do not represent that all personal data remains exclusively in India. Where cross-border processing occurs, we seek to use appropriate contractual, technical and organisational safeguards and comply with applicable restrictions under Indian law.

Third-Party Links and Services

The website may link to third-party websites or communication services, including social networks, WhatsApp, email clients or other services. Their privacy practices are governed by their own notices and controls. KareOps is not responsible for the privacy practices or content of third-party services, and you should review their terms before providing information to them.

Changes to This Policy

We may update this Privacy Policy to reflect changes in KareOps services, processing activities, legal requirements or business practices. We will publish the updated version on this page and revise the "Last updated" date. Where applicable law requires additional notice or consent for a material change, we will take appropriate steps before the change applies.

Privacy & Grievance Contact

For privacy questions, rights requests, consent withdrawal or a grievance concerning personal data, contact:

Please include enough information for us to understand the request and identify the relevant interaction. This contact heading does not designate a Data Protection Officer or name a statutory grievance officer.