Legal & Compliance

Privacy Notice

Last updated: 7 November 2026

1. Who we are

This notice applies to Indyaah Techbytes Private Limited ("we", "us"), which operates kinalys.io to promote the Kinalys platform.

For personal data collected through this website, we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 and the Data Controller under the EU/UK GDPR.

This notice covers the website and demo requests only; data processed inside the Kinalys platform is governed by the customer agreement.

2. What we collect

Through the demo form: full name, work email, job title, company name, company size, industry, your current performance and learning management setup, the challenges you describe, add-ons you are interested in, preferred demo time slot, and your consent choices.

Automatically: aggregated, cookieless page analytics and standard security logs (which may include IP address and browser type). We do not ask for phone numbers.

The demo form is for business representatives. Please do not submit sensitive personal data such as ID numbers, financial details or employee records.

3. Why we use it

We process personal data strictly for legitimate operational and pre-contractual purposes as set out in the table below:

PurposeDataBasis under DPDPBasis under GDPR
Arranging and delivering your demoContact, company details, preferred slotConsentPre-contractual steps / legitimate interests
Following up with quotes and answersContact details, your notesConsentLegitimate interests
Product updates and insights (only if you opted in)Name, emailExplicit consentConsent
Website security and aggregate usage analysisTechnical dataLegitimate uses / consentLegitimate interests

4. Who we share it with

We do not sell, rent or trade personal data. We share it only with service providers under contract: Amazon Web Services (website hosting), Cloudflare (cookieless website analytics) and Google (Google Workspace — email, form processing, spreadsheet storage and calendar scheduling).

We may disclose data where required by law.

5. International transfers

Our service providers may process data outside India, including in the United States.

For Indian residents, transfers follow the DPDP Act, 2023 and its rules; for EU/UK residents, we rely on Standard Contractual Clauses or adequacy decisions.

6. How long we keep it

Demo requests: 12 months after our last interaction, unless you ask us to delete it or become a customer.

Marketing data: until you unsubscribe or withdraw consent.

Security logs: 90 days.

7. Your rights

You have the right to access, correction, erasure, withdrawal of consent at any time (with effect from withdrawal), grievance redressal, and — under the DPDP Act — the right to nominate another person to exercise your rights in the event of death or incapacity.

Residents of other jurisdictions (including the EU/UK and US states such as California) have the rights their laws provide.

To exercise your rights, write to compliance@kinalys.io.

8. Cookies

This website does not use advertising or analytics cookies. Our analytics are cookieless.

If this changes, we will update this notice and ask for consent where required.

9. Language

This notice is available in English. On request, we will provide it in any language listed in the Eighth Schedule to the Constitution of India.

10. Grievance Officer

Indyaah Techbytes Private Limited, 22/T-25/101 Amanora Parktown, Hadapsar, Pune 411028, Maharashtra, India.

Name: Sanmeet Singh Sahni · Email: grievance@kinalys.io

We acknowledge grievances within 48 hours and aim to resolve them within 15 business days. If unresolved, you may approach the Data Protection Board of India.

11. Changes

We will post updates here with a new "Last updated" date.