Privacy Policy

1. Introduction & Scope

Kaboo.ai (“Kaboo”, “we”, “us”, or “our”) operates a SaaS + marketplace platform that connects real estate developers and channel partners (agents/brokers). We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains:

• What personal data we collect;

• How we use and share that data;

• How long we retain data;

• Your choices and rights; and

• How we protect data and who to contact with questions or complaints.

This Policy applies to personal data we collect when you use Kaboo services, website, mobile apps, WhatsApp interactions, or otherwise interact with us.

2. Definitions

• Personal data / Personal information: Any information that identifies or can reasonably identify an individual (name, phone, email, etc.).

• Sensitive personal data: In Indian context, may include government ID numbers (Aadhaar), financial information, etc. We treat such data with elevated protections.

• Controller: Kaboo Technologies Private Limited — determines purpose/means of processing.

• Processor / Service provider: Third parties processing data on Kaboo’s behalf.

  
  

3. Data We Collect

We collect the following categories of data, depending on how you use our services:

a. Account & identity data

• Full name, company name, role/title, email address, phone number, profile photo, physical address (company/office).

• RERA / Business registration numbers and related company documents when you provide them (for developer or business accounts).

b. Login & authentication data

• Passwords (hashed), OTPs, device identifiers, IP address, browser details.

c. Contact & lead data

• Customer / buyer details that agents submit as leads: name, phone number, email, property preferences, property visit schedules, documents voluntarily provided by the buyer (KYC, ID or income documents, if shared with consent).

d. Transaction & invoice data

• Booking, invoice, payment status, bank/UPI/transaction references, payout history, commission details.

e. Communication & messages

• Messages you send to us (support queries), WhatsApp messages exchanged through Kaboo’s WhatsApp Business API, and automated message metadata (timestamps). We may store text, structured templates, and attachments you send.

f. Usage & analytics data

• App usage logs, feature usage metrics, error logs, aggregate statistics, cookies and similar tracking technologies.

g. Third-party data

• Data from integration partners you connect (CRM, Google/GMail, payment providers), public sources, or developers who provide partner/agent lists.

h. Optional sensitive data

• If you voluntarily provide bank account details, GST, PAN, or other financial/KYC documents to receive payouts, we will process these securely for payment and tax compliance.

  
  

4. How We Collect Data

• Directly from you: account registration, profile creation, lead submission, invoice generation, support requests.

• From developers: when a developer onboards their channel partners, they may share partner lists and contact details for onboarding.

• From third-party integrations: CRM tools, WhatsApp Business API providers (Meta), analytics providers, payment gateways, identity verification vendors.

• Automatically: through cookies, logs and telemetry when you use our website or apps.

  
  

5. How We Use Your Data

We use personal data to:

• Provide, operate, and improve Kaboo services (account management, lead submission, onboarding, site-visit coordination).

• Process invoices, payments and commission disbursals.

• Verify / authenticate identities and developer/agent credentials (e.g., RERA checks, KYC for payouts).

• Communicate with you — account notices, transactional messages, service updates, technical or security notices.

• Provide WhatsApp messages and other notifications (with consent — see Section 7).

• Maintain an audit trail for lead attribution and dispute resolution.

• Prevent fraud, abuse or illegal activity and investigate security incidents.

• Provide analytics and platform insights (aggregated/anonymized) for product development and developer dashboards.

• Personalize and improve user experience (recommendations, matching).

• Comply with legal obligations (tax, audit, regulatory reporting).

• Marketing and promotional communications (where you have consented).

We will only use data for purposes compatible with those described at the time of collection or as permitted by law.

6. Legal Bases for Processing (where applicable)

Although Indian law does not require the same legal bases as some international laws, we rely on the following lawful grounds as appropriate:

• Consent — for marketing, WhatsApp messages, and where required for processing.

• Contractual necessity — to provide the services you requested (lead routing, invoice processing, payouts).

• Legitimate interests — platform improvements, fraud prevention, security, and analytics (balanced against your rights).

• Legal obligations — tax, compliance, court orders, and regulatory requirements.

7. WhatsApp & Message Consent

By providing your phone number and opting into WhatsApp communication:

• You consent to receive transactional and service messages from Kaboo via WhatsApp (using Meta’s WhatsApp Business API).

• Messages may include onboarding confirmations, OTPs, lead status updates, invoice notifications, and product/service announcements (depending on your consent).

• For marketing or promotional messages, we will obtain explicit consent as required by applicable law and WhatsApp/Meta policies.

8. Opt-out / Unsubscribe / Message Preferences

You can opt out of receiving WhatsApp messages from Kaboo at any time:

• Reply with STOP, UNSUBSCRIBE, or the keyword specified in the message (if provided).

• Use the in-app notification settings to turn off non-essential messages.

• Email us at hello@kaboo.ai or use the contact form on our site to request removal from marketing lists.

• Note: transactional messages (lead attribution, invoice status, security alerts) are necessary for service delivery — unsubscribing from marketing may not stop these essential notifications unless you delete your account.

We will process opt-out requests within a reasonable time (typically within 5 business days) and comply with any contractual obligations.

9. Data Sharing & Third Parties

We may share personal data with the following categories of recipients:

a. Service providers / processors

• Cloud hosting providers, database providers, CDN, analytics (e.g., Google Analytics), email/SMS gateways, customer support platforms, payment processors, KYC/identity verification vendors, WhatsApp Business API providers (Meta) and other vendors who process data on our behalf.

b. Developers & channel partners

• When an agent submits a lead to a developer, the developer receives relevant lead/contact information to act on the lead (this is fundamental to the service). By submitting a lead, the agent and lead consenting to share data with that developer is implied or must be obtained according to applicable law.

c. Financial & professional advisors

• Payment processors, banks, auditors, legal advisors where necessary to provide services or comply with law.

d. Affiliates & business transfers

• Kaboo may share data with affiliates or in connection with a merger, acquisition, reorganization or sale of assets. If such a transaction occurs, affected users will be notified and rights preserved where required.

e. Law enforcement / legal reasons

• To comply with legal processes, governmental requests, court orders, or to protect the rights, property, or safety of Kaboo, users or the public.

We will require third parties to adopt appropriate contractual and technical safeguards for data protection.

10. Cross-Border Transfers

Kaboo may transfer personal data to and store it in countries outside India for processing and hosting. When we transfer data cross-border, we take steps to ensure appropriate safeguards (e.g., data processing agreements, standard contractual clauses, or other measures) to provide adequate protection.

11. Data Retention

We retain personal data only as long as needed to fulfill the purposes described in this Policy or to meet legal, tax, or accounting requirements. Typical retention periods:

• Account & profile data: for the duration the account remains active + up to 3–7 years after account termination for recordkeeping and legal compliance.

• Lead & transaction records (invoices): retained for a minimum period necessary for dispute resolution, tax and audits — typically up to 7 years (consistent with Indian tax and corporate record retention norms).

• Messages & logs: retained for operational troubleshooting and security for 1–3 years unless longer retention is required.

• Aggregated/anonymized analytics: retained indefinitely for product improvement.

We regularly review retention schedules and securely delete or anonymize data that is no longer required.

12. Data Security

We implement reasonable administrative, technical and physical safeguards to protect personal data, including (but not limited to):

• Encryption in transit (TLS) and encryption at rest for sensitive fields.

• Role-based access control and least-privilege for internal systems.

• Secure authentication (password hashing, support for MFA).

• Regular security assessments, vulnerability scanning and logging.

• Secure backups and disaster recovery plans.

While we strive to protect data, no system is completely secure. If a data breach occurs, we will follow applicable breach-notification laws and inform affected users and regulators as required.

13. Data Subject Rights

Depending on applicable law, you may have rights to:

• Access and obtain a copy of personal data we hold about you.

• Rectify / correct inaccurate or incomplete personal data.

• Erase or restrict processing in certain circumstances (subject to legal exceptions).

• Object to processing for direct marketing or legitimate interests.

• Portability of certain personal data.

• Withdraw consent where we rely on consent for processing.

To exercise any of these rights, contact us at hello@kaboo.ai. We will respond within a reasonable timeframe (typically within 30 days), subject to verification and legal limitations.

14. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our services and collect analytics:

• Essential cookies for login, security, and core functionality.

• Performance/analytics cookies to understand platform usage.

• Functional cookies for preferences and app functionality.

• Advertising cookies only with consent, if applicable.

You can block or delete cookies through your browser settings. Disabling cookies may affect functionality.

15. Children

Our services are intended for adults (18+). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will promptly delete the information as required.

16. Compliance with Meta / WhatsApp Policies

Kaboo uses WhatsApp Business APIs through authorized providers. We follow Meta’s policies and terms applicable to WhatsApp Business, including message templates, user opt-in, opt-out handling, and data security practices. Use of WhatsApp messaging is always governed by user consent and WhatsApp requirements.

17. Changes to this Policy

We may update this Privacy Policy periodically. We will post the revised Policy on our website and indicate the date of the latest revision. For material changes, we will provide notice via email or in-app notification before changes take effect.

18. Contact & Grievance Officer

If you have questions, requests, or complaints about this Policy or our data practices, contact:

Privacy / Grievance Officer:
Name: Muralidharan Senthilkumaran
Email: hello@kaboo.ai
Address: OYO Workflo, Ranka junction, 1st Floor, AH45, Krishna Reddy Industrial Area, Dooravani Nagar, KR Puram, Bangalore, Karnataka - 560016
Phone / WhatsApp: +91 8110959531

We will acknowledge and address grievances in accordance with applicable laws and within a reasonable timeframe (typically 30 days).

19. International Users

If you access Kaboo from outside India, please note your data may be transferred to India and other countries for processing. By using Kaboo, you consent to such transfers consistent with this Policy.

20. Miscellaneous

• This Policy should be read together with our Terms of Service.

• In case of conflict between this Policy and applicable law, the law will govern. We will comply with legal requirements and update our practices as necessary.