Privacy Policy

Effective Date: September 10, 2025

Kelola.co ("Kelola", "we", "our", or "us") is a cloud-based inventory management application available for Android, iOS, and Web platforms. We are committed to protecting the privacy and personal data of our users. This Privacy Policy explains how we collect, use, share, and protect information obtained from users of the Kelola application and services.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: Name, email address, phone number, business name, and business address
• Business Data: Inventory data, sales transactions, customer information, supplier details, and financial records
• Communication Data: Messages sent through our support channels, feedback, and survey responses
• Profile Information: Business type, industry, and preferences

1.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, and mobile network information
• Usage Data: Features used, time spent on the app, interaction patterns, and error reports
• Log Data: IP address, browser type, pages visited, time and date of visits, and referring pages
• Location Data: General location based on IP address (we do not collect precise GPS location)

1.3 Information from Third-Party Payment Platforms

When you subscribe to our services, we receive limited information from payment platforms:

• Subscription status (active, cancelled, expired)
• Subscription plan type and duration
• Purchase date and renewal dates
• Transaction identifiers (not full payment details)
• Country/region of purchase

2. How We Use Your Information

2.1 Service Provision

• Create and manage your account
• Provide inventory management features and functionality
• Process and activate your subscription
• Sync data across your devices
• Generate reports and analytics for your business

2.2 Service Improvement

• Analyze usage patterns to improve features
• Develop new features and services
• Conduct research and analysis
• Fix bugs and technical issues

2.3 Communication

• Send service-related notifications and updates
• Respond to your inquiries and support requests
• Send promotional communications (with your consent)
• Notify you about changes to our services or policies

2.4 Legal and Security

• Comply with legal obligations
• Enforce our Terms of Service
• Detect and prevent fraud, abuse, or security threats
• Protect the rights and safety of users and others

3. Payment Processing and Subscription Management

Important: Kelola does not directly process payment transactions or store your payment card details. All payment processing is handled by trusted third-party payment platforms.

3.1 Third-Party Payment Platforms

We use the following platforms to handle subscriptions and payments:

3.2 What Payment Information We Access

From these payment platforms, we only receive:

• Confirmation of successful payment
• Subscription status and validity period
• Basic transaction identifiers for reconciliation
• Refund and cancellation notifications

We do NOT receive or store:

• Credit card numbers or banking details
• Complete billing addresses
• Payment method details (except type, e.g., "card" or "PayPal")

3.3 Managing Your Subscription

• Google Play: Manage through Google Play Store app
• Apple App Store: Manage through Apple App Store app
• Paddle: Manage through the customer portal link on the web.kelola.co dashboard

4. Information Sharing and Disclosure

We are committed to protecting your data and will not sell, rent, or trade your personal information. We share information only in the following circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who assist us in operating our services:

• Cloud hosting providers (for data storage and processing)
• Analytics services (to understand usage patterns)
• Customer support tools (to manage support tickets)
• Email service providers (for transactional emails)
• Payment platforms (as described in Section 3)

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose information if required to do so by law or in good faith belief that such action is necessary to:

• Comply with legal obligations, court orders, or legal process
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the personal safety of users or the public
• Protect against legal liability

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice in our app before your information becomes subject to a different privacy policy.

4.4 Aggregated or Anonymized Data

We may share aggregated or anonymized information that cannot reasonably be used to identify you. This may include statistical data about app usage, business trends, or general demographic information.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Regular backups to prevent data loss
• Employee training on data protection and privacy

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Data is retained as long as your account is active
• Inactive Accounts: Data may be retained for up to 2 years of inactivity for reactivation purposes
• After Deletion Request: Most data is deleted within 30 days, except where legal obligations require longer retention
• Legal Compliance: Some data may be retained longer to comply with legal, tax, or regulatory requirements

7. Your Rights and Choices

7.1 Access and Portability

You can access your personal information through your account settings and export your business data at any time.

7.2 Correction and Update

You can update your account information and business data directly through the app or by contacting our support team.

7.3 Deletion

You can request deletion of your account and associated data by:

• Using the delete account option in app settings
• Contacting us at privacy@kelola.co

7.4 Marketing Communications

You can opt-out of promotional emails by clicking the unsubscribe link in any marketing email or updating your communication preferences in account settings.

7.5 Data Processing Objection

You have the right to object to certain types of data processing. Contact us to exercise this right.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses approved by relevant authorities
• Ensuring recipients maintain adequate security measures
• Transferring data only to countries with adequate data protection laws

9. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

10. Regional Privacy Rights

10.1 European Union (GDPR)

If you are in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data processing
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

10.2 California (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to deletion of personal information
• Right to non-discrimination for exercising privacy rights

10.3 Other Jurisdictions

If you are located in other jurisdictions, you may have additional rights under local laws. Please contact us to learn more about exercising your rights.

11. Third-Party Links and Services

Our services may contain links to third-party websites, services, or integrations. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information to them.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page with an updated effective date
• Sending an email notification to registered users
• Displaying a prominent notice in the app

We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@kelola.co
• General Support: halo@kelola.co
• Website: https://kelola.co

Data Protection Officer
For privacy-specific inquiries or to exercise your data rights, you may contact our Data Protection Officer at: dpo@kelola.co