Privacy Policy
Effective date: 13 July 2026 · Applies to kloudops.co and app.kloudops.co (and workspace subdomains)
KloudOps is a multi-tenant CRM and operations platform operated by Kurela Cognisive Pvt Ltd ("we", "us"). This policy explains, in plain language, what data we handle, why, where it lives, and the choices you have. We built KloudOps India-first, and we align this policy with the Digital Personal Data Protection Act, 2023 (DPDP) and the IT (Reasonable Security Practices and SPDI) Rules, 2011.
1. The two kinds of data we handle
- Your account data — when you create a workspace or are invited to one: your name, email address, phone number (optional), and a password we store only as a secure one-way hash. We are the data fiduciary for this data.
- Your workspace's business data — the leads, contacts, accounts, tickets, tasks, projects, files, and notes your team stores in KloudOps. This data belongs to your organisation. Your organisation decides what goes in it; we process it only to provide the service, as a processor on your behalf.
We also keep technical records needed to run the service safely: audit logs of who did what inside your workspace, and standard security logs (such as IP addresses on sign-in events).
2. What we use data for — and what we never do
- We use data only to provide, secure, and support the service: signing you in, showing your team its records, sending service emails (like trial reminders or ticket updates), and investigating problems you report.
- We never sell your data, never use it for advertising, and never share it with third parties except the service providers listed below.
- We do not use your data to train AI models.
3. Where your data lives
All application data is stored in AWS Asia Pacific (Mumbai), India (ap-south-1). Static website assets are delivered through the CloudFront content network. Your data stays on infrastructure we control, isolated per workspace with database row-level security.
4. Service providers (sub-processors)
| Provider | What for | What they see |
|---|---|---|
| Amazon Web Services (India region) | Hosting, database, file storage, email delivery | All service data, encrypted in transit |
| Anthropic (Claude API) | Optional AI features (summarize a ticket, score a lead) — only if enabled for the platform and only when a user clicks the button | Only the single record being summarized/scored, on demand; commercial API data is not used to train their models |
| Razorpay | Subscription payments (when billing goes live) | Payment details only — card/UPI data goes directly to Razorpay and never touches our servers |
5. How we protect it
- Tenant isolation: every workspace's rows are separated with PostgreSQL row-level security, enforced in the database itself — not just in application code.
- Encryption in transit (HTTPS/TLS) everywhere; passwords stored as salted one-way hashes; secrets kept out of code.
- Role-based access control inside each workspace, and a full audit trail of changes.
- Uploads are restricted by type and size; images are re-encoded; executable/HTML content is refused.
6. Cookies and local storage
We use no advertising trackers and no third-party analytics. The app stores only what it needs to keep you signed in and remember your preferences (like language and light/dark theme) in your browser's local storage.
7. How long we keep data
- Workspace data is kept for as long as the workspace is active.
- Free trials that are not converted are suspended automatically after the trial ends; suspended workspaces and their data are deleted after a reasonable holding period or on request, whichever is earlier.
- You can ask us to delete your workspace and its data at any time (see your rights below).
8. Your rights
Under the DPDP Act you can ask us, at any time, to:
- Access a summary of the personal data we hold about you;
- Correct inaccurate or incomplete personal data (most of this you can edit yourself in the app);
- Erase your personal data or your workspace's data;
- Raise a grievance about how your data is handled.
9. If something goes wrong
If a data breach affects your personal data, we will notify affected users and the Data Protection Board of India as required by the DPDP Act, and tell you plainly what happened and what we are doing about it.
10. Children
KloudOps is a business tool and is not directed at children. Workspace accounts are intended for users aged 18 or older.
11. Changes to this policy
If we change this policy in a meaningful way, we will update this page and note the new effective date at the top. Significant changes will also be announced inside the app.