Privacy Policy

Kindflow

Last updated: April 12, 2026

1. Introduction

Nedati Technologies Private Limited (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Kindflow service (“the Service”), an enterprise-grade intelligent agent platform.

We comply with applicable data protection laws including the Information Technology Act, 2000 of India and the General Data Protection Regulation (GDPR) where applicable. By using our Service, you consent to the data practices described in this policy.

2. Information We Collect

Personal Information

We may collect personal information that you provide directly to us, including:

  • Name and contact information (email address, phone number)
  • Company and organization details
  • Account credentials
  • Payment and billing information
  • Communication preferences
  • Customer support inquiries and feedback

Business Data

When you use Kindflow to create and deploy intelligent agents, we process:

  • Standard Operating Procedures (SOPs) you upload for AOP transformation
  • Agent Operating Procedures (AOPs) generated from your SOPs
  • Agent configuration and deployment settings
  • Conversation logs between your agents and end users
  • Audit trail data for agent decisions and actions

Automatically Collected Information

When you use our Service, we automatically collect:

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, features used, time spent)
  • Cookies and similar tracking technologies
  • Log data and analytics information

3. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Kindflow platform
  • Transform your SOPs into Agent Operating Procedures
  • Deploy and operate intelligent agents on your behalf
  • Generate audit trails and compliance reports
  • Process transactions and send billing information
  • Respond to support requests and provide customer service
  • Send technical notices, updates, and security alerts
  • Monitor and analyze usage trends for platform improvement
  • Detect, prevent, and address technical issues and fraud
  • Comply with legal obligations

4. Your Business Data

Your SOPs, AOPs, agent configurations, and conversation data belong to you. We process this data solely to provide the Service. Specifically:

  • We do not use your business data to train our own AI models
  • We do not share your SOPs, AOPs, or conversation data with other customers
  • Agent conversation logs are isolated per organization and encrypted at rest
  • Audit trail data is retained for the duration of your subscription and for 90 days after account deletion

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

  • Service Providers: With third-party vendors who perform services on our behalf (hosting, payment processing, analytics)
  • AI Model Providers: Conversation context is sent to our AI inference providers to generate agent responses. This data is not retained by these providers for training purposes.
  • Business Transfers: In connection with mergers, acquisitions, or asset sales
  • Legal Requirements: To comply with legal obligations, court orders, or government requests
  • With Your Consent: With your explicit consent for specific purposes

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Security

We implement appropriate technical and organizational security measures including:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Role-based access controls and authentication mechanisms
  • Organizational isolation ensuring your data is never accessible to other customers
  • Incident response procedures

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide the Service. Specific retention periods:

  • Account data: duration of your subscription plus 30 days
  • Conversation logs: configurable by your organization, default 12 months
  • Audit trails: duration of subscription plus 90 days
  • Billing records: as required by applicable tax and financial regulations

8. Your Rights

Depending on your location and applicable laws, you may have the following rights:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal information
  • Portability: Request a copy of your data in a portable format
  • Objection: Object to certain processing of your information
  • Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at contact@nedati.com. We will respond within the timeframe required by applicable law.

9. Cookies

We use essential cookies to operate the Service (authentication, session management). We may use analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using parts of the Service.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service with at least 30 days notice. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact

For questions about this Privacy Policy or our data practices, contact:

Nedati Technologies Private Limited

Email: contact@nedati.com

Address: 1/50 GF, Rajendra Nagar, Ghaziabad, Uttar Pradesh, India 201005