Privacy Policy

KolossusAI is a partnership firm registered in Gujarat, India, operating from Ahmedabad. Throughout this document, "we", "us", and "our" refer to KolossusAI; "you" refers to anyone who uses our website or services.

KolossusAI is part of the broader kolossus.ai platform but operates as an independent India entity for India-resident deployments and customer relationships.

We collect only what we need to run the service:

• Contact and account information: name, work email, phone number, company name, and role - usually shared via WhatsApp or email when you reach out.
• Business data you connect: when you run a POC or production deployment, you grant us access to data from systems like Tally, your CRM, or other operational tools. We treat this data as yours.
• Usage information: basic logs about how the service is used - queries asked, features touched, errors hit - so we can keep the service running and improve it.
• Website analytics: aggregated, non-identifying information about page visits, referrers, and devices.

• Provide and operate the analytics service you signed up for.
• Respond to your questions, support requests, and procurement conversations.
• Improve product quality, fix bugs, and prioritise the next connectors and features.
• Send service-related communications (incident notices, planned maintenance, billing if applicable).
• Meet legal, tax, and accounting obligations in India.

We do not sell your information to anyone. Ever.

By default, customer business data for India deployments is stored and processed within India. If a deployment requires processing outside India (for example, when a customer chooses a global model provider), we make that clear before the deployment goes live and document it in the service agreement.

On-premise and private-cloud deployments mean your data never leaves your infrastructure. You stay in control.

We only share information with:

• Sub-processors we rely on to deliver the service (cloud infrastructure, transactional email, error tracking). These are bound by data processing agreements aligned with our own commitments to you.
• Legal and regulatory authorities when we are required to by Indian law (court order, tax notice, lawful compliance demand).

A current list of sub-processors is available on request - email us and we'll send it the same day.

Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you have the right to:

• Ask us what personal information we hold about you.
• Have inaccurate information corrected.
• Have your information deleted, subject to our legal and contractual record-keeping needs.
• Withdraw consent for any processing that relies on your consent.
• Receive a portable export of data you've shared with us.
• Lodge a complaint with the Data Protection Board of India.

Email us at connect@kolossus.ai to exercise any of these. We respond within seven working days.

Our website uses a small number of essential cookies (for example, to remember menu state) and aggregated analytics. We do not run third-party advertising trackers or sell behavioural profiles.

We retain personal information only as long as we need it for the purposes described above, or as long as Indian law requires (tax and accounting records are typically retained for eight years). Customer business data retention is governed by the deployment agreement and can be exported or deleted on request.

Our service is built for businesses. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.

When this policy changes materially, we update the "last updated" date at the top and email customers of record. Routine clarifications (typos, link updates) are made silently.