Privacy Policy

This Privacy Policy describes how Karva Technologies Pvt. Ltd. ("we", "us", or "our") collects, uses, and protects your information when you use Karva ScreenFlow, our digital signage SaaS platform.

We collect the following information when you register and use our platform:

• Company name and display URL slug
• Work email address
• Admin username
• Billing address, city, state, pincode
• Contact phone number
• GSTIN (optional, for tax invoicing)
• Payment transaction IDs from Razorpay (we do not store card details)
• Slides and media content you upload (images, videos)
• Usage data such as slide view counts and display analytics

We also automatically collect technical information including your IP address, browser type, device type, and access timestamps for security and service improvement purposes.

• To create and manage your account and display groups
• To deliver and operate the digital signage service
• To process payments and generate GST-compliant tax invoices
• To send invoices and account-related notifications to your email
• To provide customer support
• To monitor service health, prevent fraud, and ensure security
• To improve our platform based on usage patterns

Your data is stored securely in MongoDB Atlas (cloud database) hosted in India/Asia region. Media files are stored and served via Cloudinary CDN.

We retain your data for the duration of your account. If you close your account, your data is retained for 90 days before permanent deletion to allow for dispute resolution, unless you request earlier deletion.

Payment transaction records are retained for 7 years as required by Indian tax and accounting regulations.

We use the following third-party services, each governed by their own privacy policies:

• Razorpay — Payment processing (razorpay.com/privacy)
• Cloudinary — Media storage and CDN (cloudinary.com/privacy)
• MongoDB Atlas — Cloud database hosting (mongodb.com/legal/privacy-policy)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We use a single essential cookie (signage_token) to maintain your login session. This cookie is strictly necessary for the service to function and does not track you across other websites.

We do not use advertising cookies, third-party tracking cookies, or analytics cookies.

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Hashed and salted password storage (never stored in plain text)
• Tenant data isolation — each business account can only access its own data
• HTTP-only session cookies to prevent XSS attacks
• Regular security reviews

Karva ScreenFlow is a B2B platform intended for businesses and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Withdraw consent at any time

To exercise any of these rights, contact us at admin@karvatechnologies.com.

In accordance with the Information Technology Act, 2000 and rules thereunder, the name and contact details of the Grievance Officer are:

Grievances will be acknowledged within 48 hours and resolved within 30 days.

We may update this Privacy Policy from time to time. We will notify registered users via email when material changes are made. Continued use of the service after changes constitutes acceptance of the updated policy.

For any privacy-related queries, please contact: