Privacy Policy

Last Updated: May 28, 2026

At Kauntech, owned and operated by Kauntech Technologies Pvt. Ltd. ("we", "us", or "our"), your privacy is our core philosophy. We design our offline-first business card scanning ecosystem to guarantee that your contacts remain secure and entirely under your own control.

This Privacy Policy explains how we collect, process, disclose, and secure your personal information, specifically in accordance with the Digital Personal Data Protection (DPDP) Act 2023 of India, and details how our App handles data associated with Google OAuth integrations.

Our Zero Server-Retention Principle

We do NOT view, store, upload, copy, or retain scanned business card images, parsed OCR textual lists, or enriched contact details on Kauntech servers. All contact parsing, local storage, and neural OCR processes run directly on-device. Data synchronization only occurs when you intentionally trigger integrations (such as Google Sheets, WhatsApp, or email drafts) directly to your own accounts.

1. Information We Process & Record

Because Kauntech operates primarily offline, our processing of data is strictly limited. We only process information required to manage subscription tiers, maintain legitimate operational consent, and enable synchronization triggers:

A. Account & Operational Metadata (Stored on Supabase)

Authentication details: Name, professional email address, and encrypted passwords or magic-link identifiers.
SaaS subscription metadata: Active subscription tier, total monthly scans logged, and your K-Tokens balance.
Device security logs: Device specifications and authorization markers. Under our secure architecture, we log minimal device telemetry strictly to prevent tampering, quota hacks, or credential theft.

B. Leads & OCR Contact Details (Processed 100% On-Device)

Business Card Scans: Images captured by your camera are processed locally via on-device ML Kit OCR engines. The raw image and OCR text are never sent to our servers.
Parsed Contacts: Extracted fields (Name, Phone number, Email ID, Company, Role, and physical addresses) are saved in encrypted local storage (SecureStore) on your smartphone.
Audio Notes: Voice memos recorded right after pitching a prospect are saved locally on the device as audio clips.

2. Legitimate Purposes & DPDP Notice

Under the DPDP Act 2023, data processing must strictly serve specified, lawful, and necessary purposes. Kauntech processes your account data solely for the following legitimate purposes:

Providing secure user authentication, password resets, and session recovery.
Enabling B2B contact extraction, smart AI enrichment (icebreakers, company details), and on-device formatting fixes.
Accurately tracking scans quotas, billing transactions, and K-Token expenditures.
Processing direct client requests for customer support or system assistance.

3. Google OAuth & API User Data Disclosures

The Kauntech App provides voluntary integrations with Google APIs (Google Sheets and Gmail) to automate follow-up workflows. Connecting these integrations triggers the Google OAuth protocol. Below is the precise disclosure of the Google API scopes requested, their specific purposes, and our strict Limited Use policies:

Scope Name	API Identifier	Exact Purpose within Kauntech	Processing & Retention
Google Sheets	`.../auth/spreadsheets`	Allows the App to write, append, and organize parsed contacts and leads directly into a Google Sheet spreadsheet selected or created by the user.	On-Device Direct Transfer: Data is pushed directly from the App to Google Sheets API endpoints. No Google Sheet data passes through or is saved on Kauntech servers.
Google Drive (File Scoped)	`.../auth/drive.file`	Allows the App to create new spreadsheets and only read/write files that have been created or explicitly opened with the Kauntech App.	Constrained Access: Restricted strictly to files created by the Kauntech App. The App cannot view or access any other files in your Google Drive.
Gmail Send	`.../auth/gmail.send`	Enables professionals to send personalized follow-up emails and AI-enriched cold templates directly via their own Gmail account upon scanning a card.	Direct Dispatch: Drafts are created and sent directly via Google Gmail API. No email body, email metadata, or Google login token is sent to or stored on Kauntech servers.

Google Limited Use Compliance

Kauntech's use and transfer of information received from Google APIs to any other app will strictly adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

We do NOT sell, trade, rent, or transfer Google OAuth user data to third parties, advertising networks, or data brokers.
We do NOT use Google OAuth user data to display, target, or serve advertisements.
We do NOT use Google OAuth user data to train, enrich, or build generalized artificial intelligence (AI) or large language models (LLMs). All AI refinement is client-driven or through user-specific cloud tokens.
Google API tokens (Access and Refresh) are stored 100% locally and securely in your device's native keychain using expo-secure-store and are fully cleared upon log-out.

4. Data Security & AES-256 Encryption

We implement top-tier technical and organizational security measures to shield your data from accidental loss, leakage, or unauthorized access:

Encrypted Device Databases: All local database entries, parsed cards, and connected OAuth credentials are secured using AES-256 local keychain encryption.
Transport Layer Security: All communications between the App, Site, and our Supabase backend are encrypted in transit using industry-standard TLS 1.3 protocols.
Isolation Protocols: Third-party API keys and tokens are securely isolated in native keychain storage and cannot be read by other installed applications.

5. Your DPDP Act Rights (Consent, Access & Deletion)

Under the DPDP Act 2023, Indian citizens have robust statutory rights regarding their digital personal data. We fully support these rights globally:

Right to Withdraw Consent: You can disconnect your Google Sheets or Gmail integrations at any time from the App's "Settings" panel, instantly revoking all OAuth permissions.
Right to Access & Correction: You have the right to view all account metadata and correct any inaccuracies inside the App profile.
Right to Erasure (Deletion): You can permanently delete your Kauntech account directly inside the App at any time: Configs → App settings → Account → Delete Account. Your account enters a 30-day grace period (during which you can sign back in and tap Cancel deletion); after the grace window all profile data, scanned cards, contacts, products, templates, integration tokens, voice memos and uploaded images associated with your account are permanently purged from our database by an automated nightly job. You may also clear local-only data by clearing App storage, or submit a deletion request through our Data Deletion Request Portal if you no longer have access to the App.

6. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to accommodate changes in Google Developer Policies, DPDP Act rules, or our offline application workflow. Any updates will be published on this page, and we will update the "Last Updated" timestamp. We recommend checking this page periodically to remain informed about how we safeguard your B2B contacts.

7. Contact our Privacy Officer

If you have any questions, compliance queries, or complaints regarding our data handling practices or Google OAuth integrations, please contact our designated Grievance & Privacy Officer:

Kauntech Technologies Pvt. Ltd.
Attn: Data Protection Officer / Grievance Redressal
Email: voltairtechindia@gmail.com
Address: Mumbai, Maharashtra, India