Privacy Policy

01What this policy covers

It covers two things: the Kaarak AI app for Android and iOS, which you sign in to with your mobile number and use to look after your business online, and the website at https://kaarak.ai, where you can read about Kaarak and book a demo.

Where something applies to only one of them, we say so. Vizup Technologies Private Limited offers the app under the name Kaarak AI and is responsible for the information described here.

02Information the app collects

Some of this you give us directly, some is created as you work with the assistant, and some reaches us from Google, WhatsApp or Instagram once you choose to connect those accounts.

• Mobile phone number — your sign-in identifier. We send the one-time code to it over WhatsApp
• Account and user ID — every request in the app is scoped to your account, so you only ever see your own data
• Location — optional. Used only to rank nearby results when we search Google Places for you. On Android we only ever receive an approximate location; on iPhone the system may give us a more precise one, depending on your settings. We use it for that search and do not store it or track where you go
• Voice recordings and transcripts — your spoken conversation with the assistant. The transcript is stored so the assistant remembers what you asked for
• Photos — your brand logo and the images you pick for posts
• Documents and files — menus, price lists, catalogues and FAQ sheets you upload, so the assistant can answer from them
• Typed chat messages — your conversation with the assistant when you use the keyboard instead of your voice
• Google Business Profile data — your listing content, reviews and metrics, once you connect Google
• WhatsApp Business account, once connected — the business phone number, display name and account identifiers
• Instagram professional account, once connected — the account ID, username, name, profile photo and account type. Also the posts published through Kaarak, comments on them and the business’s replies, and post performance figures such as reach and engagement
• Customer conversations — the messages customers send to the business on WhatsApp and Instagram, including text, photos, videos, voice notes, documents, stickers and locations; the business’s replies, whether sent from Kaarak, the WhatsApp Business app or the Instagram app; delivery and read status; and any earlier WhatsApp chat history the owner chooses to share when connecting
• Customer details — the name, WhatsApp number, Instagram username and profile photo that WhatsApp or Instagram share with us; customers the owner adds by hand, such as a name, number and notes; and whether each customer has agreed to receive offers, when they agreed, and whether they have opted out
• Message templates — the templates the business creates, and the results of messages sent with them (sent, delivered, read)

We do not read the contacts on your phone. Customers appear in Kaarak only when they message your business, or when you add them yourself. We do not collect your call logs, your location in the background or when the app is closed, your advertising identifiers, or any health or financial data. The app carries no advertising SDKs and no third-party trackers.

03Permissions and your choices

The app asks for a permission at the moment it is needed, and keeps working if you say no.

• Microphone — only for a voice conversation. Decline it and you can still type to the assistant
• Location — optional, and only to order nearby search results. Decline it and you can type your city or area instead
• Photos and files — used only for the image or document you pick. We do not browse your gallery or your storage

You can change or withdraw any of these at any time in your device settings. To withdraw the consent you gave us more generally, write to [email protected] or delete your account.

04Information we collect on this website

When you book a demo, we ask for your name, business name, WhatsApp or phone number, city and, optionally, the kind of business you run. We only collect what we need to get in touch and prepare for the call.

When you browse the site, our hosting provider automatically records standard technical details such as your IP address, browser type, device, pages visited and approximate location. This helps us keep the site secure and understand how it is used.

• Contact details: name, phone or WhatsApp number, email if you write to us
• Business details: business name, city, type of business
• Technical details: IP address, browser, device, pages visited
• Anything you choose to share with us on a call or over WhatsApp

05How we use it

We use your information to:

• Sign you in and keep your account secure
• Run the assistant — understand what you ask for in your own words, and carry it out
• Draft posts, replies, captions and images for you to approve
• Read and update the accounts you connect, such as your Google Business Profile, when you ask us to
• Show your customers’ messages in one inbox and send the replies you write
• Suggest replies. Only if you switch it on, reply automatically to routine questions using your business’s information
• Send updates, offers, follow-ups and review requests only to customers who have agreed to receive them, and stop when they ask
• Publish your posts to Instagram, help you reply to comments, and show how your posts are performing
• Remember your business, so you do not have to explain it again each time
• Contact you about the demo you requested and answer your questions
• Help you when something goes wrong, and keep a record of what happened
• Run, protect and improve Kaarak
• Meet our legal obligations

We do not sell your personal information. We do not use it for advertising to you on other platforms. We do not use your voice recordings, documents or conversations to train our own AI models.

06Who we share it with

We share information only with service providers who help us run Kaarak, and only as far as each of them needs it to do its job. Today these are:

• Supabase — sign-in, our database, and storage for the files you upload
• Google Cloud Run — hosts the Kaarak service the app talks to
• Google Places API — looks up businesses and places when you search for them
• Google Business Profile API — reads and updates your listing, its reviews and its metrics, once you connect Google
• Meta (WhatsApp Cloud API and Instagram API) — delivers your sign-in code; receives and sends your business’s WhatsApp and Instagram messages; publishes to your Instagram account; reads comments and performance figures for it
• OpenAI — the language model and embeddings behind the assistant, including your customers’ messages when you use suggested or automatic replies
• ElevenLabs — turns your speech into text, and the assistant’s replies into speech
• Sarvam AI — an alternative provider for the same speech to text and text to speech
• LiveKit Cloud — carries the live audio during a voice conversation
• fal.ai — generates images for your posts
• Vercel — hosts this website and runs the demo form on our behalf
• Resend — delivers the email notification to our team when you submit the demo form

These providers process your information under their own security commitments and only on our instructions; they may not use it for their own purposes. We also pass content to Google or Meta when you ask us to publish something to your own listing or page. Beyond that, we may share information if the law requires it, or to protect the rights and safety of Kaarak, our customers or others.

07Your customers' information

When your customers message your business, or you add them in Kaarak, their information belongs to your business. You decide how it is used, and Kaarak processes it on your behalf and on your instructions. We use it only to provide Kaarak to you, never to contact your customers for ourselves or to market to them. Your customers can stop offers at any time by replying STOP. For any other request about their information, they can contact your business, and we will help you respond.

Under the Digital Personal Data Protection Act, 2023, that makes the business the data fiduciary and Kaarak its data processor.

08Data deletion

You can delete your Kaarak AI account, and the data in it, at any time. In the app, open Settings and choose Delete account. We ask you to confirm, and then the deletion begins.

If you cannot get into the app, write to [email protected] from the email you use with us, or tell us the mobile number you sign in with, and we will do it for you. We act on these requests within 30 days and confirm when it is done. You do not need to install the app to ask us.

Deleting your account removes:

• Your account and profile, including the mobile number you signed in with
• The brands you created and their details
• Documents and files you uploaded as assistant context
• Images and logos you uploaded or that Kaarak generated for you
• Your voice and chat conversations with the assistant, including transcripts
• Your stored Google connection, so Kaarak can no longer read or update your listing
• Connected WhatsApp and Instagram accounts
• Customer conversations, including the photos and files in them
• The customer list and records of who agreed to receive offers
• Message templates

Two things stay. We keep usage and audit records — that an action ran, and when — with your account identifier stripped out so they can no longer be tied back to you; we need these for security, billing accuracy and our own legal obligations. And anything already published to your Google Business Profile, Instagram or WhatsApp remains there, because it now sits on your own account with that platform and you can remove it from there. Deleting your Kaarak account does not delete your Google or Meta accounts.

Disconnecting WhatsApp or Instagram in Settings stops new messages from reaching Kaarak. Conversations already in Kaarak stay, so you can refer back to them, until you delete your account or ask us to remove them.

You can also remove Kaarak’s access from Meta directly: in Facebook Business Settings under Integrations, or in the Instagram app under Settings, Apps and websites.

09How long we keep it

We keep your app information for as long as your account is open. When you delete your account, we remove it as described above. Voice recordings are kept only as long as we need them to produce the transcript and the assistant’s reply; the transcript stays with your conversation until you delete it or close your account.

We keep demo requests for as long as we are in conversation with you and for up to 24 months afterwards, so we can follow up if you come back. Technical logs are kept for a short period for security. You can ask us to delete your information sooner at any time.

Customer conversations, media and customer details are kept while your account is open, unless you ask us to remove them. Links to photos and files in the app expire after about an hour and are renewed while you use it. Technical copies of the updates WhatsApp and Instagram send us are kept for up to 30 days, to fix problems, and then deleted. Records of a customer’s agreement to receive offers are kept for as long as that customer is in your list, so you can show they agreed.

10Where your information is processed

Kaarak is built and run from India. Our service runs in Google Cloud’s Mumbai region, and your information sits on servers our providers operate on our behalf.

Some of the providers listed above process information outside India — the AI, speech and image ones in particular. Where that happens, we send only what the feature needs and rely on our contracts with those providers to protect it. Indian law permits these transfers except to countries the Government restricts, and we will follow any such restriction if one is notified.

11Cookies

This website does not use advertising or tracking cookies. The app stores a little data on your device to keep you signed in and remember your preferences, and carries no advertising or analytics trackers. If we add analytics in future, we will use privacy-respecting tools and update this policy before doing so.

12Your rights

Under Indian law you have the right to:

• Ask what personal information we hold about you
• Ask us to correct or update it
• Ask us to delete it
• Withdraw consent you gave earlier
• Nominate someone to exercise these rights on your behalf
• Raise a grievance with us, and with the Data Protection Board of India if we do not resolve it

To exercise any of these, write to [email protected]. We will respond within the time required by law. To delete your account yourself, see Data deletion above.

13Security

We use encrypted connections (HTTPS), access controls and reputable providers to protect your information. Files you upload are stored so that only your own account can reach them, and every request the app makes is checked against the account it belongs to. No system is perfectly secure, but we take reasonable steps to keep your data safe and will tell you, and the Data Protection Board, if something goes wrong that affects you.

14Children

Kaarak is meant for business owners. You must be 18 or older to create an account, and the app is not directed at children. We do not knowingly collect information from children.

15Changes to this policy

If we change this policy in a meaningful way, we will update the date at the top of this page and, for changes that affect the app, tell you in the app. Continued use of Kaarak after a change means you accept the updated policy.

16Contact and grievance officer

For any questions, requests or complaints about your personal information, contact our grievance officer at [email protected].

Grievance Officer, Vizup Technologies Private Limited, 902 Lyric, Salapuria Cadenza Kudlu, Bommanahalli (Bangalore), Bangalore South, Bangalore- 560068, Karnataka.