KhaataPOS

Legal

Privacy policy

RangSilk Private Limited operates KhaataPOS. This policy explains what we collect to run workspaces, billing, and customer storefronts, and how you can reach us.

Last updated 23 August 2026

Who we are

This policy is issued by RangSilk Private Limited (“we”, “us”), operating the KhaataPOS product from New Delhi, India. Website: https://www.khaatapos.com. If you have a privacy question or complaint, use the contact details at the bottom of this page — email, phone, or WhatsApp.

Who this covers

  • Business owners and staff who create or use a KhaataPOS workspace.
  • Customers who sign in to a shop storefront to place orders or book services.
  • People who write to us via the contact form, phone, email, or WhatsApp.

What we collect

  • Account details: name, email, phone, workspace slug, and business profile.
  • Billing details needed for the ₹2 mandate and later plan charges (via Razorpay).
  • Operational data you enter: catalog, orders, staff, payroll, and books.
  • Storefront data: customer name, email, phone, delivery address, and order history for that shop.
  • Technical logs such as IP, device, and sign-in method (including Google OAuth).
  • Support messages you send by form, email, phone, or WhatsApp.

How we use it

To operate the product, send OTPs and transactional email or WhatsApp, process payments, show shop branding, isolate tenants, prevent abuse, and answer support. We do not sell customer lists or staff directories. Marketing messages to shop customers are sent only by the shop that holds that customer, subject to that shop’s consent settings.

Legal basis (India)

We process personal data to provide the service you request, to meet tax and accounting duties, and for legitimate security of a multi-tenant platform. Where India’s Digital Personal Data Protection Act, 2023 requires consent, we collect it in-product (for example storefront marketing). You may withdraw consent from the shop or by writing to privacy@khaatapos.com.

Sharing

We share only what a processor needs to complete that job:

  • Payment: Razorpay (mandates, cards, UPI Autopay).
  • Email / SMS / WhatsApp: SMTP provider and Zavu (or equivalent) for OTPs and bills.
  • Files: Cloudinary for public shop logos/catalog images; AWS S3 for private documents.
  • Google: if a customer chooses Google sign-in on a storefront.
  • Platform staff: only records required to support the account or investigate abuse.

We do not sell personal data to advertisers.

Cookies and similar technology

Essential cookies keep you signed in. Theme preference may be stored in the browser. Payment checkout may set cookies on Razorpay’s domain. Details: Cookies policy.

Retention

Workspace and order records stay while the account is active and as required for tax, GST, or dispute handling. You can ask us to close an account. After closure we keep only what law requires (for example invoices) and delete or anonymise the rest when that period ends.

Your rights

  • Access and correction of your account data (in-product or by email).
  • Export of customer personal data for a shop you control (privacy centre in the ERP).
  • Erasure requests, subject to tax and legal holds.
  • Complaint to privacy@khaatapos.com or the Data Protection Board of India when applicable.

Children

KhaataPOS workspaces are for businesses. We do not knowingly create owner accounts for anyone under 18.

Security

Tenant isolation, role-based access, audit trails, and rate limits are described on our security page. No internet service is perfectly secure; report a suspected incident to support@khaatapos.com immediately.

Related policies

Terms of use · Refund policy · Cookies policy · Contact us

Contact for privacy

KhaataPOS is a product of RangSilk Private Limited. If you have questions or a complaint about this policy, reach us on any of the channels below. We do not require you to use the website form.