Privacy Policy
Last Updated: 29 June 2026
Effective Date: 29 June 2026
1. Who We Are
Karo Simple is a QR-code-based review management platform built for Indian businesses. We help business owners collect genuine customer reviews on platforms like Google, Zomato, Justdial, Amazon and others and receive private feedback from customers who had a poor experience.
Data Fiduciary (the entity responsible for your data):
Operating as: Karo Simple
Website: https://karosimple.in
Platform: https://app.karosimple.in
Address: Pachpedi Naka, Raipur, Chhattishgarh, 492001
Privacy Contact: grievance@karosimple.in
As the Data Fiduciary under the Digital Personal Data Protection Act 2023 (DPDPA 2023), Karo Simple decides the purpose and means of processing your personal data and is responsible for protecting it.
2. Who This Policy Applies To
This Privacy Policy applies to:
- Business Owners — Indian small and medium business owners who register on Karo Simple to manage customer reviews for their business.
- Agency Owners — Digital marketing agencies or multi-location businesses that manage multiple sub-businesses under one Karo Simple account.
- Website Visitors — Anyone who visits karosimple.in without creating an account.
By using our platform or website, you confirm that you have read and understood this Privacy Policy.
3. What Personal Data We Collect
3.1 Business Owners and Agency Owners
| Data Type | Specific Fields | Why We Collect It |
|---|---|---|
| Identity | Full name, email address, phone number | Account creation and communication |
| Business Details | Business name, category, city, address | Platform setup and QR code generation |
| Payment Data | Subscription plan, billing cycle, payment reference ID | Billing via our payment gateway we do not store card or UPI numbers |
| Platform Activity | Review platform links added, QR codes generated, scan count | Delivering the service to you |
| Customer Feedback | Private feedback submitted by dissatisfied customers | Stored on your behalf for your business improvement |
| Device and Browser | IP address, browser type, device type, session identifiers | Security and fraud prevention |
Important: Karo Simple does not store positive review content. When a satisfied customer submits a review on Google, Zomato, or any other platform through your QR code, that content goes directly to that platform. We only store the private negative feedback that customers submit through our internal feedback form.
3.2 Website Visitors
| Data Type | Why We Collect It |
|---|---|
| Cookies (with your consent) | Analytics and, if applicable, affiliate tracking |
| IP address and device/browser data | Security, regional analytics |
| Contact form submissions (name, email, message, business type) | Responding to your enquiry |
4. Why We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Providing the Karo Simple platform and all its features | Contractual necessity |
| Processing subscription payments via our payment gateway | Contractual necessity |
| Sending transactional emails — invoices, OTPs, plan alerts | Contractual necessity |
| Sending WhatsApp notifications (only if you opt in) | Your consent |
| Analytics and improving the product | Legitimate interest |
| Customer support | Legitimate interest |
| Detecting and preventing fraud and security threats | Legitimate interest |
| Complying with Indian law and responding to government or court orders | Legal obligation |
We do not use your data for advertising to third parties. We do not sell your data.
5. Third-Party Services We Use
To deliver our service, we share certain data with the following third-party processors. Each is bound by their own privacy practices.
| Service | Data They Receive | Purpose |
|---|---|---|
| Payment Gateway (our payment processor) | Name, email, phone, payment amount | Processing subscription payments |
| Google (OAuth and Analytics) | Email address, usage and traffic data | Sign-in with Google; analytics (with your consent) |
| Cloud Service Provider | All platform traffic and data in transit | Hosting infrastructure for karosimple.in and app.karosimple.in |
| Sanity CMS | Blog content only — no personal data | Managing blog and content pages |
| WhatsApp Business API | Phone number (only if you have opted in) | Sending business notifications |
| Email Service Provider | Name and email address | Sending transactional emails |
Data Transfer Outside India: Vercel and Google operate servers outside India. When you use our platform, your data may be processed on servers located internationally. Both Vercel and Google maintain data protection standards consistent with the requirements of Indian law. This cross-border transfer is disclosed in compliance with DPDPA 2023.
6. Cookies and Tracking
6.1 Essential Cookies
These cookies are necessary for the platform to function. They do not require your consent and cannot be turned off.
| Cookie | Purpose |
|---|---|
| Authentication session cookie | Keeps you logged in to app.karosimple.in |
| CSRF protection token | Prevents cross-site request forgery attacks |
6.2 Analytics Cookies
We use Google Analytics 4 (GA4) to understand how visitors use our website. These cookies are not loaded until you explicitly accept them through our Cookie Consent Banner.
8. How Long We Keep Your Data
| Data | How Long We Keep It |
|---|---|
| Business Owner and Agency Owner account data | For the duration of your account, plus 2 years after account deletion |
| Private customer feedback stored on your behalf | For the duration of your account, plus 2 years |
| Contact form submissions | 1 year |
| Analytics data | 26 months (Google Analytics 4 default retention) |
| Payment and subscription records | 7 years (required for GST and income tax compliance) |
After these periods, data is either deleted or anonymised.
9. Your Rights Under DPDPA 2023
If you are a registered user of Karo Simple, you have the following rights under the Digital Personal Data Protection Act 2023:
- Right to Access — You can request a copy of the personal data we hold about you.
- Right to Correction — You can ask us to correct any inaccurate or incomplete personal data.
- Right to Erasure — You can request that we delete your personal data. This right is subject to any legal retention obligations we have (see Section 8).
- Right to Withdraw Consent — You can withdraw consent for non-essential data processing at any time. This does not affect the lawfulness of processing carried out before you withdrew consent.
- Right to Nominate — Under DPDPA 2023, you may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.
- Right to Grievance Redressal — You may file a complaint with our Grievance Officer if you believe your data rights have been violated (see Section 12).
To exercise any of these rights, email us at support@karosimple.in. We will respond within 30 days of receiving your request.
10. Children's Data
Karo Simple is a business-to-business SaaS platform designed for use by business owners and professionals. It is not intended for individuals under the age of 18.
We do not knowingly collect personal data from minors. If you believe that a person under 18 has registered on our platform, contact us immediately at support@karosimple.in and we will delete the account promptly.
11. Grievance Officer
In accordance with the Information Technology Act 2000 Rule 5(9) and the Digital Personal Data Protection Act 2023, we have appointed a Grievance Officer to handle complaints related to this Privacy Policy and your personal data.
Grievance Officer: Mr. Shubham Sahu
Designation: Founder, Grievance Officer, Karo Simple
Email: grievance@karosimple.in
Address: Pachpedi Naka, Raipur, Chhattishgarh, 492001
Acknowledgement: Within 120 hours of receiving your complaint
Resolution: Within 60 days of acknowledgement
You may also submit complaints through our online Grievance form at karosimple.in/grievance.
If your complaint is not resolved to your satisfaction within 60 days, you may escalate the matter to the relevant authority under DPDPA 2023 or the Ministry of Electronics and Information Technology (MeitY).
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, platform features, or applicable law. When we do, we will update the "Last Updated" date at the top of this page.
For significant changes that affect how we use your data, we will notify registered users by email at least 7 days before the changes take effect.
Your continued use of Karo Simple after a revised Privacy Policy is posted constitutes your acceptance of the updated policy.
14. Contact Us
For any questions or concerns about this Privacy Policy or how we handle your data:
General support: support@karosimple.in
Grievance Officer: grievance@karosimple.in (Response time: Within 48 hours)
See also: Terms of Service · Refund & Cancellation Policy · Grievance Redressal