Privacy Policy

1. Introduction

This Privacy Policy describes how Lekkha Technologies ("we", "our", or "Lekkha") collects, uses, processes, and protects your personal data when you use our business management platform and related services (the "Services").

We are committed to protecting your privacy and ensuring transparency about our data practices. This policy complies with India's Digital Personal Data Protection Act 2023 (DPDPA) and other applicable data protection laws.

2. Who We Are

Data Fiduciary: Lekkha Technologies
Business Address: Bengaluru, Karnataka, India
Email: privacy@lekkha.com
Phone: +91 88843 44885

3. What Personal Data We Collect

3.1 Information You Provide Directly

• Account Information: Name, email address, phone number, business name, GST number
• Business Data: Product information, inventory details, customer records, sales transactions
• Payment Information: Billing address, payment method details (processed by secure payment providers)
• Support Communications: Messages, feedback, and support requests you send to us

3.2 Information We Collect Automatically

• Usage Data: How you interact with our Services, features used, time spent
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access logs, error reports, performance data

3.3 Information from Third Parties

• Integration Data: Data from integrated services (with your consent)
• Business Directory Data: Publicly available business information for GST validation

4. Why We Collect and Use Your Data

We process your personal data for the following lawful purposes:

4.1 With Your Consent

• Providing Lekkha Services and platform functionality
• Processing business transactions and managing inventory
• Sending marketing communications (you can opt-out anytime)
• Enabling integrations with third-party services

4.2 Legitimate Uses (as per DPDPA 2023)

• Service Provision: Data voluntarily provided for specific service purposes
• Legal Compliance: Complying with GST regulations, tax laws, and legal obligations
• Employment: Managing employee access and platform administration
• Safety & Security: Preventing fraud, ensuring platform security

5. How We Share Your Data

We do not sell your personal data. We may share your data only in these limited circumstances:

5.1 Service Providers

• Cloud Hosting: Secure data centers in India for platform hosting
• Payment Processing: Secure payment providers for subscription billing
• Support Services: Customer support tools to assist you

5.2 Legal Requirements

• When required by Indian law or court orders
• To protect our rights, property, or safety
• For GST compliance and tax reporting obligations

5.3 Business Transfers

If Lekkha is acquired or merged, your data may be transferred as part of that transaction (with notice to you).

6. Data Storage and Security

6.1 Data Location

All your personal data is stored in secure data centers within India. We do not transfer your data outside India without your explicit consent.

6.2 Security Measures

• Encryption: AES-256 encryption for data at rest and in transit
• Access Controls: Role-based access, multi-factor authentication
• Monitoring: 24/7 security monitoring and threat detection
• Backups: Regular encrypted backups across multiple secure locations

7. Data Retention

We retain your data only as long as necessary for:

• Providing Services while your account is active
• Complying with legal obligations (e.g., tax records for 7 years as per Indian law)
• Resolving disputes and enforcing agreements

Account Deletion: When you delete your account, we will permanently delete your data within 30 days, except where legal retention is required.

8. Your Data Rights

Under DPDPA 2023, you have the following rights:

8.1 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: privacy@lekkha.com
• Phone: +91 88843 44885
• Account Settings: Many data management options are available in your account dashboard

We will respond to your request within 30 days as required by DPDPA.

9. Consent and Withdrawal

By using our Services, you provide free, specific, informed, unconditional, and unambiguous consent for data processing as described in this policy.

Withdrawing Consent: You can withdraw your consent at any time by:

• Closing your account through account settings
• Contacting us at privacy@lekkha.com
• Opting out of marketing communications via email links

Withdrawing consent may limit your ability to use certain Services.

10. Cookies and Tracking

We use cookies and similar technologies to:

• Essential Cookies: Required for platform functionality and security
• Analytics Cookies: Understand how you use our Services (with consent)
• Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings or our cookie consent banner. For more details, see our Cookie Policy.

11. Children's Privacy

Lekkha is designed for businesses and is not intended for children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will delete such information.

12. International Users

If you access our Services from outside India, your data will be transferred to and processed in India. By using our Services, you consent to this transfer and processing.

13. Data Breach Notification

In the unlikely event of a data breach that affects your personal data, we will:

• Notify the Data Protection Board of India within 72 hours
• Inform affected users within 24 hours with details about the breach
• Provide information about steps taken to address the breach
• Offer guidance on protecting your interests

14. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Email notification to your registered email address
• Notice on our platform and website
• In-app notifications for material changes

Continued use of our Services after updates constitutes acceptance of the revised policy.

15. Complaints and Grievances

15.1 Grievance Officer

Name: Priya Sharma
Title: Data Protection Officer
Email: grievance@lekkha.com
Phone: +91 88843 44885
Response Time: Within 30 days

15.2 Data Protection Board

If you are not satisfied with our response, you can file a complaint with the Data Protection Board of India:

• Website: [To be notified when DPB is established]
• Process: Submit complaint online or via post
• Information Required: Details of the privacy concern and attempted resolution

16. Contact Information

For any questions about this Privacy Policy or our data practices, contact us: