📥
Section 01
Information We Collect
👤Account Information
Name, email address, and password (hashed — never stored in plain text).
🏪Store Information
Your Shopify store URL, product catalog, collections, and inventory data.
📊Usage Data
Pages visited, features used, conversation logs, and analytics from Krato sessions.
💳Payment Information
Billing details processed by Razorpay. Raw card numbers are never stored on our servers.
💬Conversation Data
Messages between your store visitors and Krato, plus purchase intent signals.
🌐Technical Data
IP address, browser type, device information, and session identifiers.
⚙️
Section 02
How We Use Your Information
🤖Provide, operate, and improve Krato and the MahanX platform
🎯Personalise the AI experience for your store and customers
💰Process transactions and send related GST tax invoices
🔔Send technical notices, security alerts, and support messages
📈Generate analytics and insight reports for your dashboard
🔍Monitor and analyse trends to improve our services
🛡️Detect, investigate, and prevent fraudulent transactions and illegal activities
⚖️Comply with our legal obligations under applicable law
🔒
We do not use your data for advertisingKrato data is used exclusively to operate the service and improve AI performance for your specific store. We never serve ads or share data for advertising purposes.
🔐
Section 04
Data Storage & Security
Your data is stored on secure servers (Microsoft Azure, India region). We implement industry-standard security measures:
🔑
TLS/SSL
All data encrypted in transit
🛡️
AES-256 Fernet
Sensitive data encrypted at rest
🔍
Security Audits
Regular vulnerability assessments
👤
RBAC
Role-based internal access controls
⏱️
Rate Limiting
Protection on all API endpoints
🧹
Input Sanitization
SQL injection & XSS prevention
ℹ️
While we take reasonable precautions, no method of internet transmission is 100% secure. We will notify you of any breach that affects your personal data within 72 hours as required by law.
⏳
Section 05
Data Retention
We retain your account information while your account is active. If you close your account, your personal data is removed within 30 days, except where:
›We are required to retain it by applicable law (e.g., GST records for 7 years)
›It is necessary to resolve active disputes or enforce agreements
›Conversation analytics have been anonymised and aggregated (may be retained indefinitely)
📧
Request deletion anytimeEmail support@mahanx.in to request immediate deletion of your personal data. We respond within 30 days.
⚖️
Section 07
Your Rights
Under GDPR and India's DPDP Act 2023, you have the following rights regarding your personal data:
👁️Access
Request a copy of the personal data we hold about you
✏️Correction
Request correction of inaccurate or incomplete data
🗑️Deletion
Request deletion of your personal data (subject to legal obligations)
📦Portability
Request a machine-readable export of your data (ZIP format)
🚫Objection
Object to how we use your data for marketing purposes
⏸️Restriction
Request that we restrict processing of your data
📧
Exercising your rightsEmail support@mahanx.in to exercise any right. We respond within 30 days. We comply with GDPR and the DPDP Act 2023.
👶
Section 08
Children's Privacy
Krato is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors.
🚨
If we learn a minor has provided dataWe will delete it promptly upon discovery. If you believe your child's data has been collected, contact us immediately at support@mahanx.in.
💬
Privacy questions?
Email support@mahanx.in · We respond within 24h on business days.