Privacy Policy

1. Our Commitment

KALIYAZ (“we”, “us”, “our”) operates the KALIYAZ platform, including the website kaliyaz.com and any associated services (collectively, the “Service”). We take your privacy extremely seriously. This Privacy Policy describes in detail the types of information we collect, how we use it, the legal bases for processing, and your rights. By accessing or using the Service, you expressly consent to the collection, processing, and disclosure of your information as described in this policy.

2. Information We Collect

We collect information to provide, improve, and secure our Service. Categories include:

• Registration data: email address, username, and password (hashed). Optional: profile picture, bio, social handles.
• User Content: any background images, links, titles, and metadata you upload to create your link-in-bio page.
• Analytics & Usage: IP address, browser type, operating system, device identifiers, pages viewed, click-through rates, and referring URLs. We use this to understand engagement and optimize performance.
• Authentication data: session tokens, login timestamps, and security logs (retained for 30 days).
• Communications: if you contact support, we retain correspondence to assist you and improve our service.

3. Legal Bases for Processing (EEA/UK Visitors)

If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

• Contract performance: to provide our Service according to our Terms of Service (e.g., account creation, page delivery).
• Legitimate interests: to improve security, prevent fraud, and enhance user experience (analytics).
• Consent: where you have explicitly consented (e.g., marketing emails – you may opt out anytime).
• Legal obligations: to comply with applicable laws (e.g., retention for tax purposes if payments are introduced).

4. How We Use Your Information

• Provide & maintain the Service: account authentication, link page generation, real-time editing.
• Analytics & improvements: measure feature popularity, click tracking, diagnose technical issues.
• Security & fraud prevention: monitor for unauthorized access, spam, abuse (rate limiting, bot detection).
• Communication: respond to support tickets, send essential service updates (e.g., security notices).
• Future features (with consent): if we introduce paid subscriptions, payment data will be handled by PCI-DSS compliant processors (e.g., Stripe/Razorpay). We never store full credit card numbers.

5. Cookies & Similar Technologies

KALIYAZ uses strictly necessary cookies and session storage to keep you logged in and secure. These are essential for the Service to function. We may also use optional analytics cookies (with your consent) to understand aggregate usage. You can control cookies via browser settings, but disabling necessary cookies may break login functionality.

Third-party cookies: We embed no third-party advertising cookies. Any future integration (like Google Analytics) will be preceded by a cookie consent banner.

6. Data Sharing & Subprocessors

We engage trusted third parties to assist in operating the Service, under strict confidentiality obligations:

• Vercel / Cloudflare: hosting and CDN (logs may include IP addresses).
• Supabase / PostgreSQL: database provider (encrypted at rest).
• Resend / SendGrid: transactional emails (only email address + necessary identifiers).
• Auth0 (optional): authentication service (if implemented).

We never sell, rent, or trade your personal information. Government or law enforcement requests will be handled in compliance with applicable law, and we will notify you unless legally prohibited.

7. Data Retention

We retain your information for as long as your account is active. If you delete your account, we will remove or anonymize your personal data within 30 days, except where retention is required by law (e.g., financial records). Usage logs (IP, device) are anonymized after 60 days.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

• Right to access – request a copy of your personal data.
• Right to rectification – correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) – delete your account and data.
• Right to restrict or object to processing (e.g., analytics).
• Right to data portability – receive your data in a structured, machine-readable format.
• Right to withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, email AbhinavGadge@proton.me. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority.

9. Security Measures

We implement strong security controls including:

• Encryption in transit (TLS 1.3) and at rest (AES-256).
• Regular security audits, penetration testing, and dependency scanning.
• Access controls: strictly limited employee access, multi-factor authentication.
• Breach notification: we will inform affected users and relevant authorities within 72 hours if a data breach occurs.

10. International Data Transfers

KALIYAZ primarily hosts data in the United States and Europe (depending on provider). If you access our Service from outside these regions, your information may be transferred to, stored, and processed in countries that may have different data protection laws. We ensure such transfers are compliant with Standard Contractual Clauses or other adequacy mechanisms.

11. Children’s Privacy

The Service is not directed to individuals under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it. If you believe a child has submitted data, please contact us.

12. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be notified via email or a prominent notice on the Service. Your continued use after the effective date constitutes acceptance of the revised policy.