Privacy Policy

Karva Technologies ("we", "us", "our") operates the growSME platform, accessible at sme.karvatechnologies.com. We are the data controller for personal data collected through this platform and the connected applications: HRMS, Digital Marketing, Digital Signage, and CRM.

Registered office: Karva Technologies, G-14, Ground Floor, COXBIT, TNAU Campus, Coimbatore – 641 003, Tamil Nadu, India.

Contact: admin@karvatechnologies.com

We collect the following categories of personal and business data:

Account information — full name, email address, phone number, company name, company address, GST number.

Subscription & billing — selected plan, billing history, Razorpay payment identifiers (we do not store card numbers or CVVs — these are handled entirely by Razorpay). GST tax invoices generated for your account.

Technical data — IP address, browser type, device information, session and authentication tokens (stored as secure HttpOnly cookies), access logs (date, time, pages visited).

Application data — each connected product (HRMS, Digital Marketing, Digital Signage, CRM) stores its own data in its own database, governed by this same policy.

To provide and operate the growSME platform and connected applications.

To manage your subscription, process payments, and issue GST tax invoices.

To send transactional emails (subscription confirmations, invoices, support replies, password resets).

To authenticate you via Single Sign-On (SSO) across connected applications.

To improve platform performance, fix bugs, and monitor security threats.

We do not sell your data to any third party. We do not use your data for advertising.

Contract — processing is necessary to fulfil the subscription agreement you enter with us.

Legitimate interests — monitoring security, preventing fraud, improving the platform.

Legal obligation — maintaining financial records for GST compliance under Indian law.

We share your data only with trusted service providers who help us operate the platform:

Razorpay — payment processing. Only non-sensitive identifiers are shared (order IDs, payment IDs). Card data is handled entirely by Razorpay and never touches our servers.

MongoDB Atlas — cloud database hosting. Data is encrypted at rest and in transit.

SMTP provider — for sending transactional emails. Only the email address and message content are shared.

We do not share your data with advertisers, data brokers, or unrelated third parties.

Active accounts: all data is retained for the duration of your subscription and for 30 days after expiry or cancellation.

Financial records (invoices, payment records): retained for 7 years as required by Indian GST law.

You may request deletion of your account and associated data at any time by emailing admin@karvatechnologies.com, subject to legal retention obligations.

All data is transmitted over HTTPS (TLS 1.2+). Authentication tokens are stored in HttpOnly, Secure cookies. Passwords are hashed using bcrypt (cost factor 12). Database connections require authentication and are restricted by IP allowlist.

We conduct periodic security reviews. In the event of a data breach affecting your personal data, we will notify you within 72 hours of becoming aware.

You have the right to access, correct, or delete the personal data we hold about you.

You have the right to restrict or object to processing in certain circumstances.

You have the right to data portability — we will provide your data in a machine-readable format upon request.

To exercise any of these rights, email admin@karvatechnologies.com from your registered email address. We will respond within 30 days.

We use only essential cookies required to operate the platform — specifically, an HttpOnly session cookie to authenticate your login. We do not use advertising or tracking cookies.

You can disable cookies in your browser, but this will prevent you from signing in to the platform.

We may update this Privacy Policy from time to time. When we do, we will update the 'Last Updated' date at the top of this page and, for material changes, send a notification to your registered email address.

Continued use of the platform after any change constitutes acceptance of the updated policy.

For privacy-related queries or to exercise your rights, contact us at:

Email: admin@karvatechnologies.com

Phone: +91 93635 63693

Address: Karva Technologies, G-14, Ground Floor, COXBIT, TNAU Campus, Coimbatore – 641 003, Tamil Nadu, India.