Legal

Privacy Policy

How Kavolith Group collects, uses, stores, and erases personal data — and the rights you hold under India's Digital Personal Data Protection Act, 2023.

Last updated: 16 August 2026

DPDP Act 2023

Our data practices

1. Who we are

Kavolith Group is an Intelligence Systems Company based in Hyderabad, Telangana, India. We engineer AI systems for revenue, operations, and workforce automation. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), Kavolith Group is the Data Fiduciary for the personal data described in this policy.

2. Personal data we collect

We only collect what you choose to give us. When you submit our contact form, book a consultation, or write to us, we collect:

  • Name — so we can address you correctly.
  • Email address — the primary channel for our reply.
  • Phone number (including WhatsApp number, where you share it) — for follow-up calls or messages you have asked for.
  • Company or organisation name, where you provide it.
  • Your message — the description of your process, tools, and requirements.
  • Basic technical metadata generated by your visit, such as the page you submitted from and the submission timestamp.

3. Why we collect it (purpose)

Your personal data is processed for the specified, lawful purposes you provided it for:

  • Responding to your enquiry and scheduling a consultation.
  • Scoping, quoting, delivering, and supporting the services you engage us for.
  • Maintaining a record of client communication and project decisions.
  • Meeting our legal, accounting, and contractual obligations.

4. Consent

Submitting the contact form or messaging us on WhatsApp constitutes your consent to process the data you supply for the purposes above. Your consent is free, specific, informed, and unconditional, and you may withdraw it at any time by writing to arafath@kavolith.com. Withdrawal does not affect processing carried out before withdrawal, and we may retain records where law requires it.

5. How and where your data is stored

Contact submissions are delivered into our operational systems and stored in Airtable (our lead and client record system) and Google Workspace (email and documents). Access is restricted to Kavolith Group personnel who need it to answer or deliver on your enquiry. These providers act as Data Processors on our instructions and may store data on servers outside India, under their own security and contractual commitments.

We do not sell your personal data, and we do not share it with advertisers or data brokers. We use analytics on this website to understand aggregate traffic patterns; those analytics are not used to identify you personally.

6. Data retention

We keep enquiry data only as long as it serves the purpose it was collected for. In practice: enquiries that do not become engagements are retained for up to 24 months so we can pick up the conversation if you return, then deleted. Client project records are retained for the duration of the engagement and up to 7 years afterwards where financial, tax, or contractual obligations require it. Once the purpose ends and no legal obligation applies, the data is erased.

7. Your rights under the DPDP Act, 2023

As a Data Principal you have the following rights, which you can exercise at any time by emailing arafath@kavolith.com:

  • Right to access — obtain a summary of the personal data we hold about you and how it is being processed.
  • Right to correction and completion — have inaccurate or incomplete data corrected or updated.
  • Right to erasure — have your personal data deleted where it is no longer needed for the purpose it was collected for and no law requires us to keep it.
  • Right to withdraw consent — stop further processing based on your consent.
  • Right to grievance redressal — raise a complaint with us about how your data is handled, before escalating.
  • Right to nominate — nominate another individual to exercise these rights on your behalf in the event of death or incapacity.

8. Security practices

We apply reasonable security safeguards to prevent personal data breaches: access-controlled accounts with multi-factor authentication, encrypted transport (HTTPS/TLS) for all form submissions, least-privilege access to our record systems, and prompt removal of access when it is no longer required. If a personal data breach occurs, we will notify the Data Protection Board of India and affected Data Principals as required by the DPDP Act.

9. Children's data

Our services are intended for businesses. We do not knowingly collect personal data of children under 18. If you believe a child's data has been submitted to us, write to us and we will erase it.

10. Grievance redressal

Grievance Officer: Mohammed Arfath, Founder, Kavolith Group.

Email: arafath@kavolith.com · Phone: +91 94920 44168 · Hyderabad, Telangana, India.

We acknowledge grievances within 3 business days and aim to resolve them within 30 days. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.

11. Changes to this policy

We may update this policy as our systems or legal obligations change. The revision date below always reflects the current version. Material changes affecting how we use data you have already given us will be communicated to you directly where we hold your contact details.

Grievance Officer

Mohammed Arfath, Founder — Kavolith Group, Hyderabad, Telangana, India.

arafath@kavolith.com · +91 94920 44168