Draft document — not yet reviewed by a lawyer. This page is a reasonable starting template for a SaaS business and is published so the site has real policy pages, not a placeholder link. Please have it reviewed by qualified legal counsel for your jurisdiction before relying on it in a dispute.

Privacy Policy

Effective date: August 2026

This Privacy Policy explains what information Kinxso collects across its Products and public website, and how it's used.

1. Information We Collect

• Account & billing information: name, email, phone, company name, billing address, and (via our payment processors — Stripe or PayFast — who handle card/bank details directly; we never store your full card number) payment status.
• Business data you enter: whatever you input into a Product to use it — inventory, sales, tenants, leases, accounting records, menu items, etc.
• Usage data: pages visited, features used, and error logs, used to improve the Products.
• Location data: at signup, we detect your approximate country from your IP address purely to show the correct regional pricing and payment method (PayFast for Pakistan, Stripe internationally). We do not track precise location.

2. How We Use Information

To provide and improve the Products, process payments, send service-related emails (welcome emails, renewal reminders, password resets), and respond to support requests. We do not sell your personal information to third parties.

3. Third Parties We Share Data With

• Stripe and PayFast — payment processing.
• Cloudinary — image/file hosting for content you upload (logos, receipts, documents).
• Infrastructure providers hosting our servers and databases.

Each of these processes data only as needed to provide their part of the service.

4. Data Retention

We retain account and business data for as long as your account is active, and for a reasonable period after cancellation in case you reactivate, unless you request deletion sooner.

5. Your Rights

You can request a copy of your data or ask us to delete it by contacting support. Some financial/business records may need to be retained longer where required by law.

6. Security

We use industry-standard practices (encrypted connections, hashed passwords, rate-limited login endpoints) to protect your data, but no system is 100% secure.

7. Changes to This Policy

We may update this policy from time to time; material changes will be announced.

8. Contact

Questions about this policy: see the contact details on our Contact page.