Privacy Policy

Who we are

KAIOS BUILD (“KAIOS”, “we”) is operated by Kartikeya Mishra in India. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary for the personal data described here. Contact us through the contact form (topic “Privacy”).

What we collect and why

• Application data — name, email, role, city (optional), project description, skills, hours, links and answers. Used only to review your application and, if you join, to suggest matches.
• Account data — email and sign-in identifiers from Firebase Authentication (and your Google profile name if you sign in with Google). Used to secure your account.
• Builder Passport and projects — what you choose to enter. Shown according to the visibility you set: only you, members, or public after review.
• Community activity — feedback requests, responses, usefulness ratings and weekly commitments.
• Payment records — order and payment IDs, amount, status and payment method type from Razorpay. We never receive or store full card numbers, UPI PINs or bank credentials.
• AI requests — the text you submit to an AI feature is sent to our AI provider to generate a response. We store usage counts and technical metadata (feature, token counts, success/failure), not the content of your prompts.
• Support messages — what you send us through the contact form.
• Security data — hashed IP-based rate-limit counters (automatically deleted) and server logs needed to prevent abuse.

We do not use advertising trackers or third-party analytics cookies. Sign-in state is stored in your browser by Firebase because the service can't work without it. If we add analytics or advertising in future, we'll update this policy and ask for consent where required before enabling it.

Legal basis

We process personal data on the basis of your consent (given when you apply, join or submit a form) and for legitimate uses permitted by law, such as complying with tax and accounting obligations and preventing fraud. You can withdraw consent at any time; this doesn't affect processing already carried out.

Who we share it with

We share data only with service providers that process it on our behalf, under their terms:

• Google Firebase / Google Cloud — authentication, database and hosting infrastructure.
• Razorpay — payment processing.
• Our configured AI provider (Google Gemini or Anthropic) — only the text you submit to an AI feature.
• Our hosting provider (for example Vercel) — serving the website.

Some providers may process data outside India. We'll share data with authorities only when legally required.

How long we keep it

• Applications that don't lead to membership: up to 12 months, then deleted.
• Account, profile and community data: while your account is active, deleted when you delete your account.
• Payment and invoice records: for the period required by Indian tax and accounting law (typically 8 years).
• Support tickets: up to 24 months after resolution.
• Rate-limit records: automatically deleted within hours.

Your rights

Subject to applicable law, you can access, correct, update and erase your personal data, withdraw consent, nominate another person to exercise your rights, and raise a grievance. Signed-in members can download their data and delete their account from Settings. Anyone else can use the contact form. If you're in the European Economic Area or the UK, you also have rights under the GDPR, including data portability and the right to complain to your local supervisory authority.

Security

Data is encrypted in transit and at rest by our infrastructure providers. Browsers cannot read or write our database directly; every request is checked on our servers. Access to administrative tools is restricted and logged. No system is perfectly secure; if a breach affects you, we'll notify you and the relevant authorities as the law requires.

Children

KAIOS BUILD is for people aged 18 and over. We don't knowingly collect data from children.

Grievance officer

Kartikeya Mishra, KAIOS — reachable via the contact form (topic “Privacy”). We acknowledge grievances within 24 hours and aim to resolve them within 15 days. If you're not satisfied, you may approach the Data Protection Board of India once it is accepting complaints.

Changes

We'll post updates here and change the date above. For material changes we'll notify members by email before they take effect.