Legal Pages

Kritexa Labs ("we", "us", "our", "Kritexa Labs") is committed to handling personal information responsibly, transparently, and in accordance with applicable law. This Privacy Policy explains what personal information we collect from you, how we collect it, why we collect it, how we use it, with whom we share it, how long we retain it, how we protect it, and what rights you have in relation to it.

This Privacy Policy is specifically about our privacy practices — how we collect and handle your personal information. For information about India's data protection legal framework and your statutory data rights in detail, please see our Data Protection / DPDP Policy. For how to exercise rights or submit a grievance, see our Grievance & Data Rights Policy.

1. Who We Are

Kritexa Labs is a technology and software company that develops and provides software products, AI-powered solutions, websites, automation systems, CRM solutions, digital marketing services, social media management, chatbot development, and related digital technology services. We operate the website at www.kritexalabs.com and associated digital channels.

For the purposes of applicable Indian data-protection law, Kritexa Labs acts as the Data Fiduciary — the entity that determines the purpose and means of processing personal data — in respect of personal information collected through our website, services, and business interactions.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected from or about:

• Visitors to the Kritexa Labs website (www.kritexalabs.com) and any associated subdomain or digital property operated by Kritexa Labs
• Prospective customers who submit enquiries, contact forms, or project briefs
• Clients and customers who have engaged or are engaging Kritexa Labs for services
• Users of any platform, tool, dashboard, or digital product operated by Kritexa Labs
• Individuals who contact Kritexa Labs by email, phone, WhatsApp, or other communication channel
• Job applicants and recruitment candidates
• Business contacts and professional relationships
• Any other individual whose personal information Kritexa Labs receives in the course of its business activities

This policy does not apply to third-party websites, applications, or services to which Kritexa Labs may link. Those services have their own privacy policies which you should review independently.

Where Kritexa Labs processes personal data on behalf of a client (for example, where a client's own customers' data is handled within a solution delivered by Kritexa Labs), such processing may be subject to a separate data-processing agreement between Kritexa Labs and that client. This Privacy Policy does not govern that processing.

3. Information We Collect

We collect different categories of personal information depending on your interaction with us. The categories we may collect include:

Identity Information

• Full name
• Business name or organisation name
• Job title or professional designation

Contact Information

• Email address
• Mobile phone number or telephone number
• WhatsApp contact number (where you initiate or consent to WhatsApp communication)
• Postal address or location information (where relevant to service delivery)

Business and Professional Information

• Details about your business, industry, and objectives submitted through enquiry or project-brief forms
• Information about your existing technology stack, marketing activities, or business processes where relevant to the services requested
• Company or organisation details required to understand and deliver services

Account Information

• Username or account identifier for any Kritexa Labs platform or client portal
• Account preferences, service configuration, and project settings
• Communication records and history within any client dashboard or portal

Login and Authentication Information

• Credentials used to access Kritexa Labs-managed platforms or client portals (passwords are stored in hashed/encrypted form and not readable by Kritexa Labs staff)
• Session tokens and authentication logs for security and audit purposes
• Two-factor authentication data where applicable

Communication Information

• Records of email communications between you and Kritexa Labs
• Messages and chat records from WhatsApp or other supported messaging channels
• Content of enquiry forms, project briefs, and written requests submitted through the website
• Records of calls or video meetings where notes or records are maintained with your knowledge

Support Information

• Details of support requests, issues reported, and queries raised regarding services or products
• Correspondence and resolutions related to support interactions
• Technical information provided to diagnose or resolve a service issue

Transaction and Billing Information

• Billing name, billing address, and GST/tax information where applicable
• Invoice records and payment history
• Payment method details — note that card or bank details for online transactions are typically processed directly by a third-party payment processor and are not stored by Kritexa Labs in unencrypted form
• Project scope, contract terms, and service agreement records

Device and Technical Information

• IP address and approximate geographic location derived from IP address
• Browser type, version, and language settings
• Operating system and device type (desktop, mobile, tablet)
• Screen resolution and viewport dimensions
• Referring website or source (how you arrived at the Kritexa Labs website)

Usage and Log Information

• Pages visited, links clicked, and navigation paths on the Kritexa Labs website
• Time and duration of website visits
• Actions taken within any Kritexa Labs platform, dashboard, or software product
• Feature usage patterns in products or services
• Server logs, error logs, and system access logs maintained for security and operational purposes

Recruitment Information

• Resume, CV, portfolio, or work samples submitted in connection with a job application
• Work history, educational qualifications, and professional skills
• Information provided in an application form, cover letter, or during interview interactions
• References and referee contact information where provided

Voluntarily Submitted Information

• Feedback, reviews, testimonials, or other content you voluntarily choose to share with Kritexa Labs
• Information submitted through surveys, questionnaires, or research activities
• Content you provide through social media interactions with Kritexa Labs' accounts

4. How Information Is Collected

Personal information is collected through the following channels and mechanisms:

Website Forms

When you complete a contact form, enquiry form, project brief form, newsletter subscription, or any other form on the Kritexa Labs website, we collect the personal information you enter in those fields. Submission of a form is a voluntary act — you choose what information to provide.

Account Registration

If you register for a Kritexa Labs platform, client portal, or other service that requires an account, we collect the personal information provided during the registration process, including your name, email address, and any credentials you choose to set up.

Product and Service Usage

When you use a product or service delivered by Kritexa Labs — such as a web application, automation system, dashboard, CRM integration, or chatbot — the system may automatically collect usage data, activity logs, and interaction records necessary for the operation, maintenance, and improvement of that service.

Customer Support

When you contact Kritexa Labs for support — whether by email, WhatsApp, or any other channel — we collect the personal information you provide in the course of that interaction, including your identity, contact details, and the details of your query or issue.

Email and Electronic Communications

When you send Kritexa Labs an email or other electronic message, we receive and store the personal information contained in or accompanying that communication, including your name, email address, and the content of the message.

WhatsApp and Business Messaging

Where Kritexa Labs uses WhatsApp Business or similar messaging channels for client communication or enquiry handling, messages sent through those channels are stored and managed in accordance with the applicable platform terms and this Privacy Policy.

Recruitment Applications

When you apply for a position at Kritexa Labs — whether through a form on the website, by email, or through a third-party platform — we collect the personal information you provide in your application, CV, portfolio, and any accompanying correspondence.

Cookies and Technical Technologies

The Kritexa Labs website uses cookies and similar technical technologies (such as browser local storage) to operate the site, understand how visitors use it, and improve performance. The website also deploys Meta Pixel (a Meta Platforms advertising and measurement technology) as a consent-gated Marketing/Advertising technology — it is disabled by default and only activated after you provide explicit consent through our cookie consent banner. For full details of the cookies and tracking technologies used and how to manage them, please see our Cookie Policy.

Automated Technical Collection

When you visit the Kritexa Labs website, certain technical information is automatically collected by our web servers and analytics tools — including your IP address, browser type, device type, and navigation behaviour. This occurs without any deliberate action on your part and is a normal function of how websites operate.

5. How We Use Personal Information

Kritexa Labs uses personal information only for the purposes for which it was collected or for purposes reasonably related to those purposes. The primary purposes are:

• Responding to enquiries and service requests: To review, evaluate, and respond to project enquiries, quotes, consultation requests, and other service-related messages received through any channel.
• Service delivery and project execution: To provide, manage, administer, and deliver the technology services, software products, AI solutions, automation, CRM, digital marketing, and other services you have engaged from Kritexa Labs.
• Account management: To create, manage, and maintain client portals, platform accounts, or service access accounts where applicable.
• Customer support: To address and resolve queries, complaints, technical issues, and support requests.
• Billing and financial administration: To generate invoices, process payments, maintain financial records, and manage contractual and commercial obligations.
• Website operation and security: To operate, maintain, monitor, test, and secure the Kritexa Labs website and associated digital infrastructure.
• Analytics and product improvement: To understand how the website and services are used in order to improve quality, usability, and relevance.
• Marketing communications: To send service updates, newsletters, promotional content, and relevant information where permitted by law and applicable consent or opt-out requirements have been satisfied. See Section 20 for your choices.
• Security and fraud prevention: To detect, investigate, and prevent unauthorised access, fraudulent activity, abuse, and cybersecurity threats.
• Legal and regulatory compliance: To comply with applicable laws, regulations, court orders, governmental directions, and legally required disclosures.
• Recruitment: To evaluate job applications, conduct recruitment processes, and communicate with candidates.
• Contractual performance: To fulfil obligations arising under contracts and service agreements with clients and vendors.
• Business records: To maintain accurate and complete records of business interactions, contracts, and transactions.

6. Communication and Support

Personal information provided through communication with Kritexa Labs — whether by email, WhatsApp, telephone, contact form, or any other channel — is used to understand your query, provide assistance, manage the service relationship, and maintain an accurate record of interactions.

We retain communication records for as long as reasonably necessary to provide ongoing service, handle disputes, and comply with legal requirements. Kritexa Labs does not use communication data for purposes unrelated to the interaction from which it was obtained, except where otherwise described in this policy or where required by law.

Support interactions may be reviewed internally for quality assurance, training, and improvement of our support processes. Any such review is carried out with appropriate access controls.

7. Product and Service Operations

When Kritexa Labs delivers a service — such as a website build, automation system, CRM setup, chatbot deployment, or digital marketing campaign — we may collect and process personal information and service-related data that is necessary for the proper operation, monitoring, and delivery of that service.

This operational data may include:

• Client contact information required for project coordination and communication
• Login credentials and access data for systems we are building, managing, or maintaining on behalf of a client
• Technical and performance data from systems under management
• Content, assets, and materials provided by clients for use in their projects
• Analytics and reporting data relevant to the services being delivered

Data accessed or processed in the course of client service delivery is handled with appropriate confidentiality and is used only for the purpose of delivering the contracted services. Separate data-handling terms may apply under the relevant service agreement.

8. Software and Account Information

Where Kritexa Labs operates software platforms, client dashboards, or portals that require user accounts, the following data-handling practices apply:

• Account creation: Personal information provided at registration (such as name, email, and role) is used to create and manage your account.
• Authentication: Login credentials are stored securely using appropriate hashing and encryption techniques. Kritexa Labs does not store plaintext passwords.
• Session management: Session data is used to maintain your authenticated state during a visit and to log you out automatically after inactivity for security.
• Account activity: Actions taken within a platform or dashboard (such as creating projects, uploading files, or configuring settings) are logged for operational, audit, and support purposes.
• Account deactivation: Where an account is deactivated or a service contract ends, account data is handled in accordance with the data-retention principles described in Section 17.

9. AI-Powered Services and User Inputs

Kritexa Labs develops and delivers AI-powered solutions, including chatbots, automation systems, conversational AI tools, and AI-assisted digital marketing capabilities. Where you interact with AI-powered tools or services built or managed by Kritexa Labs, the following applies:

• Conversational inputs: Text, queries, commands, or other inputs submitted to an AI-powered chatbot, assistant, or automation tool may be processed to generate a response and to improve the system's accuracy and performance.
• AI system logs: Interactions with AI features may be logged for quality assurance, safety monitoring, performance evaluation, and debugging purposes.
• No autonomous decision-making with legal effect: Kritexa Labs does not use automated AI decision-making systems to make decisions that have a significant legal or similarly significant effect on individuals without human review.
• Third-party AI models: Where AI features rely on third-party AI model providers, inputs processed by those models are subject to the applicable terms and privacy policies of those providers. Kritexa Labs takes reasonable steps to select AI providers with appropriate data-handling practices.
• Client AI deployments: Where Kritexa Labs builds AI solutions for clients (such as customer-facing chatbots), the data processed by those solutions is handled pursuant to the relevant client service agreement and the client's own applicable privacy obligations.

10. Analytics and Service Improvement

Kritexa Labs uses analytics technologies to understand how visitors use the website and how clients use our services. This helps us improve the quality, relevance, and performance of what we offer.

Analytics data may include:

• Pages visited, time on site, and bounce rates
• Navigation paths through the website
• Device type, browser, and geographic region (derived from IP address)
• Traffic sources and referral information
• Usage patterns within software products and dashboards

Where analytics tools collect or process personal data, they are configured to do so in a manner that is proportionate to the purpose and consistent with applicable law. Analytics data is generally used in aggregate and is not used to identify individuals by name for marketing purposes.

The Kritexa Labs website also uses Meta Pixel for advertising measurement and campaign analytics. Meta Pixel is classified as a Marketing/Advertising technology and is not loaded or activated unless you explicitly enable the Marketing & Advertising category in the cookie consent panel. For specific information about the cookies and technologies used on the Kritexa Labs website, and for details on how to manage or withdraw consent, please see our Cookie Policy.

11. Security and Fraud Prevention

We process certain personal information — principally IP addresses, device identifiers, and activity logs — to monitor for and protect against unauthorised access, abuse, spam, malicious activity, and cybersecurity threats affecting our website and services.

This includes:

• Monitoring for unusual access patterns or login attempts
• Detecting and blocking spam or automated abuse of contact forms
• Investigating reported incidents or suspected security breaches
• Verifying identity where a request requires identity confirmation

Security-related processing is carried out on the basis of our legitimate interest in protecting the integrity of our systems and the personal data we hold, and where required by applicable law.

12. Legal and Regulatory Requirements

Kritexa Labs may be required to process, disclose, or retain personal information to comply with legal and regulatory obligations. These may include:

• Obligations under the Information Technology Act, 2000 and rules made thereunder
• Requirements of the Digital Personal Data Protection Act, 2023, as applicable upon commencement
• Directions issued by CERT-In under Section 70B of the IT Act regarding incident reporting, log retention, and cybersecurity practices
• Tax laws, GST obligations, and financial record-keeping requirements
• Court orders, subpoenas, governmental notices, and legally binding requests from competent authorities
• Any other applicable Indian law or regulatory requirement

Where Kritexa Labs discloses personal information to comply with a legal obligation, we will notify the affected individual to the extent permitted by law and where it would not prejudice the legal process.

13. Data Sharing

Kritexa Labs does not sell your personal information to third parties. We do not share personal information with third parties for their own independent marketing purposes.

We may share personal information in the following circumstances:

• With service providers and vendors (see Section 14)
• With professional advisers: Lawyers, accountants, auditors, and other professional advisers engaged by Kritexa Labs, subject to professional duties of confidentiality
• With law-enforcement and government authorities: Where legally required or permitted — for example, in response to a court order, governmental notice, or to protect the rights, safety, or property of Kritexa Labs, its clients, or the public
• With business partners: Where delivery of a specific service involves a trusted partner or sub-contractor, subject to appropriate data-handling agreements
• In connection with business transactions: See Section 15
• With your consent: Where you have specifically authorised a particular disclosure

14. Service Providers and Vendors

To operate our business and deliver services, Kritexa Labs uses third-party service providers and vendors. These providers act on our instructions and may have access to personal information to the extent necessary for their service functions. Categories of providers we may use include:

• Cloud hosting and infrastructure providers: Services that host the Kritexa Labs website and digital infrastructure
• Email and communication service providers: Platforms used to send, receive, and manage business and client email communications
• CRM and project-management platforms: Tools used to manage client relationships, enquiries, projects, and workflows
• Analytics providers: Services used to measure and analyse website traffic and performance
• Payment processing providers: Third-party services used to process financial transactions securely
• AI and machine-learning platforms: Third-party model providers used in the delivery of AI-powered products and services
• Productivity and collaboration tools: Software used internally by Kritexa Labs to manage work and communication

Kritexa Labs takes reasonable steps to ensure that service providers maintain appropriate technical and organisational safeguards for personal information processed on our behalf. Where practicable, appropriate data-processing or sub-processor agreements are put in place.

15. Business Transfers

In the event of a merger, acquisition, restructuring, sale of all or part of our business assets, or similar corporate transaction involving Kritexa Labs, personal information held by Kritexa Labs may be transferred to or reviewed by the counterparty, successor entity, or their advisers as part of that transaction, subject to applicable law.

Where such a transfer occurs, we will endeavour to ensure that the successor entity handles personal information in a manner consistent with this Privacy Policy, or that affected individuals are notified and, where required by law, provided with an opportunity to withdraw consent or exercise applicable rights.

16. International Processing

Kritexa Labs is based in India and its primary operations are conducted in India. However, some third-party service providers we use — including cloud hosting, analytics, AI platform, and productivity tool providers — may operate infrastructure or data centres located outside India. As a result, personal information may be stored, processed, or accessed in jurisdictions other than India.

The Central Government may, under the DPDP Act, 2023, specify countries or territories to which transfers of personal data are permitted or restricted. Where such notifications are issued, Kritexa Labs will comply with the applicable transfer restrictions and requirements.

When personal information is processed outside India by our service providers, we take reasonable steps to ensure it is handled in accordance with applicable Indian law and with appropriate contractual and technical safeguards. We do not represent that all personal information is stored exclusively in India, as this depends on the infrastructure decisions of our third-party providers.

17. Data Retention

Kritexa Labs retains personal information only for as long as reasonably necessary for the purposes for which it was collected, or as required or permitted by applicable law. The appropriate retention period for a given category of data depends on:

• The nature of the data and the purpose for which it was collected
• The duration of the service relationship or active project
• Applicable statutory or regulatory retention requirements (including financial records requirements and CERT-In log-retention directions)
• The applicable limitation periods for legal claims
• The need to maintain records for dispute resolution, audit, or compliance purposes
• Whether the data has been anonymised, in which case it is no longer personal data and retention restrictions do not apply

When personal information is no longer required for any legitimate purpose and no legal obligation requires its retention, Kritexa Labs will take reasonable steps to securely delete, anonymise, or dispose of it.

Communication and enquiry data submitted through the website is typically retained for the duration of the enquiry and a reasonable period thereafter to manage follow-up and records.

Client and project data is retained for the duration of the client relationship and for a reasonable period following project completion, in line with applicable limitation periods and business record-keeping needs.

Recruitment data that does not result in employment is retained for a reasonable period after a recruitment process concludes and is then securely deleted or anonymised, unless the applicant consents to retention for future opportunities.

18. Data Security

Kritexa Labs implements reasonable and appropriate technical and organisational security measures to protect personal information against unauthorised access, disclosure, alteration, loss, and destruction. Our security measures include, where applicable:

• Encrypted transmission of data over public networks using HTTPS/TLS protocols
• Encryption of sensitive data in storage where appropriate
• Access controls and authentication mechanisms to restrict access to personal information on a need-to-know basis
• Least-privilege access principles for internal systems and data repositories
• Regular security updates and patch management for systems and software
• Monitoring and logging of system access for security and audit purposes
• Secure backup procedures to protect against accidental loss or corruption of data
• Vendor security assessments for key third-party processors handling personal information
• Internal incident-response procedures for detecting, managing, and reporting security events

Where applicable, Kritexa Labs' security practices are informed by the directions issued by the Indian Computer Emergency Response Team (CERT-In) under Section 70B of the Information Technology Act, 2000, including obligations relating to cybersecurity incident reporting, information security practices, and related requirements as notified from time to time.

19. Security Incidents

Kritexa Labs maintains internal procedures for identifying, containing, assessing, and responding to personal data breaches and cybersecurity incidents.

Where a personal data breach or security incident occurs that is likely to adversely affect the rights or interests of individuals, Kritexa Labs will:

• Take prompt steps to contain and remediate the incident
• Notify the relevant regulatory authority and, where applicable, the affected individuals in accordance with the requirements of the DPDP Act, CERT-In directions, and any other applicable law in force at the time
• Document the incident and the steps taken in response
• Conduct a post-incident review and implement appropriate corrective and preventive measures

Notification timelines and procedures will be determined by the statutory and regulatory requirements in force at the time of the incident. The DPDP Act, when fully in force, requires Data Fiduciaries to notify personal data breaches to the Data Protection Board of India and affected Data Principals in the manner specified by that legislation.

20. Marketing Communications

Kritexa Labs may send promotional communications, service announcements, newsletters, and relevant information to individuals where permitted by applicable law and where consent or opt-out requirements have been satisfied.

Marketing communications may include:

• Information about new services, products, features, or capabilities offered by Kritexa Labs
• Industry insights, technology updates, and content relevant to our clients and prospects
• Invitations to webinars, events, or consultations
• Case studies, portfolios, or showcases of work

Kritexa Labs will not send unsolicited marketing communications to individuals who have clearly indicated they do not wish to receive them. You may opt out of marketing communications at any time by:

• Following the unsubscribe instructions included in any marketing email
• Sending an email to enquiry@kritexalabs.com with the subject line "Marketing Opt-Out"

Opting out of marketing communications does not affect transactional or service-related messages that are necessary for the administration of an active service relationship.

21. User Choices

You have several choices in relation to your personal information and your interactions with Kritexa Labs:

• Accuracy: You may request correction of inaccurate personal information we hold about you.
• Marketing opt-out: You may opt out of marketing communications as described in Section 20.
• Consent withdrawal: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect processing already carried out on the basis of that consent before withdrawal.
• Cookie and tracking consent management: You may change or withdraw your cookie and tracking consent at any time by clicking the Cookie Preferences link in the footer of any page. This includes the ability to withdraw Marketing consent, which will stop Meta Pixel from being loaded on future page visits. See our Cookie Policy for full details.
• Account deletion: Where you have an account with a Kritexa Labs service, you may request deletion of your account, subject to any retention obligations under applicable law or your service agreement.
• Access to your information: You may request information about the personal data we hold about you.

To exercise any of these choices, please contact us as described in Section 25. For detailed information about exercising data rights under applicable law, see our Grievance & Data Rights Policy.

22. Children's Privacy

The Kritexa Labs website and services are directed at businesses, professional individuals, and adult users. Kritexa Labs does not knowingly or intentionally collect personal information from children (persons below the age of 18 years, or such other age as may be specified under applicable law from time to time).

The DPDP Act, 2023 requires that processing of personal data of a child be done only with verifiable parental consent, and imposes additional safeguards relating to children's data. Kritexa Labs' current digital properties and services are not directed at minors and do not include mechanisms designed to attract or engage children.

If Kritexa Labs becomes aware that it has inadvertently collected personal information from a child without appropriate parental consent, it will take prompt steps to delete that data. If you believe that personal information of a child has been submitted to us without appropriate consent, please contact us immediately at enquiry@kritexalabs.com.

23. Third-Party Websites

The Kritexa Labs website and our communications may contain links to external websites, platforms, or services operated by third parties. These links are provided for convenience and information only.

Kritexa Labs has no control over and accepts no responsibility for the content, privacy practices, or data-handling practices of any third-party website or service. This Privacy Policy does not apply to third-party websites. You are strongly encouraged to read the privacy policy of any external site before providing personal information to it.

Similarly, when Kritexa Labs delivers solutions that involve integration with third-party platforms (such as social media platforms, CRM systems, or payment gateways), the personal information processed by those third-party platforms is subject to their own privacy policies and terms of service.

24. Changes to This Privacy Policy

Kritexa Labs may update this Privacy Policy from time to time to reflect:

• Changes to our services, products, or business practices
• New or amended laws, regulations, or regulatory guidance — including changes arising from the phased commencement of DPDP Act provisions
• Changes to our technical infrastructure, third-party providers, or data flows
• Improvements to our data-protection and security practices

When we update this policy, the "Last Updated" date at the top of this page will be revised accordingly. We encourage you to review this policy periodically, particularly when we notify you of changes.

For material changes that require consent under applicable law, Kritexa Labs will provide notice through appropriate channels and obtain the required consent before those changes take effect in relation to your personal information.

25. Privacy Contact

If you have questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal information by Kritexa Labs, please contact us:

Please include "Privacy Policy Query" or "Data Rights Request" in the subject line of your email, along with your name and a clear description of your query or request. Where identity verification is required to process your request, we will ask for appropriate confirmation before acting on it. For information on how to raise a formal grievance or exercise statutory data rights, see our Grievance & Data Rights Policy.