Your data.
Your control.

Kamsora Technologies Pvt. Ltd. ("Kamsora", "we", "our", or "us") builds AI-first enterprise platforms - AttendX, RoadEye, SmartWaste, TenderEye, and Natchat - alongside custom engineering work. This Privacy Policy explains what personal and operational data we collect, why we collect it, how we protect it, and the rights you have over it.

This policy applies to all visitors to kamsora.com, customers using our products in cloud, hybrid, or on-premise mode, and anyone whose data flows through our platforms as part of a customer deployment.

Directly from you (visitors, prospects, customers)

• Contact information: name, work email, company, designation, phone number.
• Enquiry content: product of interest, brief, operational context shared via forms or email.
• Account credentials when a customer account is provisioned (email + authentication tokens).

Automatically from our website

• Technical telemetry - IP address, browser, device, referring page.
• Anonymous usage analytics (page views, session duration) used to improve the site.
• We do not sell visitor data or share it with advertisers.

Through our products (operational data)

Each product processes data specific to its purpose. These details are covered in Section 3. In all cases, customers remain the data controller; Kamsora acts as a data processor under their instructions.

• Delivering the product or service you or your organization has contracted for.
• Responding to enquiries, demo requests, and pre-sales conversations.
• Operating, securing, monitoring, and improving our platforms and supporting infrastructure.
• Complying with legal, regulatory, and contractual obligations including DPDP Act, GDPR-aligned frameworks, BFSI mandates, and industry-specific rules.
• Internal analytics and product improvement using aggregated, de-identified data only.

We never sell personal data, biometric data, or customer operational data to third parties. We do not use customer data to train models that serve other customers.

• Encryption in transit (TLS 1.2+) and at rest (AES-256 or equivalent) across all managed platforms.
• Role-based access controls, principle of least privilege, and audit logging for all internal access.
• Network segmentation, WAF, DDoS protection, and continuous vulnerability scanning.
• ISO 27001 and SOC 2 aligned controls; formal certifications in progress.
• Customer data residency honored - India-only, EU-only, or any region you specify.
• Air-gapped and fully on-premise deployments available for defense, BFSI, and regulated sectors.

We use a small, vetted set of sub-processors strictly for service delivery. These may include cloud infrastructure (AWS, Azure, or GCP regions as selected by the customer), transactional email, identity providers (if SSO is enabled), and error-monitoring tools.

Customers running Natchat, or any product deployed on-premise, do not have Kamsora sub-processors in their data path for those deployments. A current sub-processor list is available on request to privacy@kamsora.com.

• Visitor enquiry data: retained for up to 24 months unless you request earlier deletion.
• Customer operational data: retained per the customer's configured retention policy.
• Audit and compliance logs: retained immutably for the duration the customer requires for regulatory purposes.
• On termination of services, customer data is exported on request and then deleted within 90 days unless legally required otherwise.

Under the DPDP Act and aligned frameworks (GDPR, UK DPA), individuals have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your personal data, subject to legal retention requirements.
• Withdraw consent for processing based on consent.
• Object to or restrict certain processing activities.
• Receive your data in a portable format.
• Lodge a complaint with the appropriate data protection authority.

Requests can be sent to privacy@kamsora.com. For customer-side data (data we process on behalf of a customer), we will route the request to the customer as the data controller.

Kamsora is headquartered in Gurugram, India. Where operational delivery requires a cross-border transfer, we rely on standard contractual clauses, adequacy decisions, or the customer's explicit instruction. Customers can enforce strict data-residency at infrastructure level as part of their deployment.

Our services are designed for enterprise and government customers and are not directed to individuals under the age of 18. We do not knowingly collect personal data from children.

We may update this Privacy Policy to reflect new products, regulations, or operational practices. Material changes will be communicated to customers in advance, and the effective date at the top of this page will be updated.

Kamsora Technologies Pvt. Ltd.
Ground Floor, 421/42, Sector 42
Gurugram, Haryana, India

Privacy enquiries: privacy@kamsora.com
General: sales@kamsora.com