We collect information in the following ways:

Information you provide

• Account details: name, email address, password, organization name, and profile information.
• Support content: conversations, messages, contact details, attachments, notes, and other content you or your end users exchange or submit through the platform, including messages sent and received via connected messaging channels such as WhatsApp.
• Billing information: billing contact and transaction records (payment card data is processed by our payment providers, not stored by us).
• Communications: information you share when you contact us for support or feedback.

Information collected automatically

• Usage data: pages viewed, features used, actions taken, and timestamps.
• Device & log data: IP address, browser type, operating system, device identifiers, and referring URLs.
• Cookies: as described in the Cookies & Tracking section.

Information from third parties

If you sign in through a third-party provider (such as Google) or connect an integration or messaging channel, we may receive profile, authentication, and message-related information as permitted by that provider and your settings.

• Provide, operate, maintain, and improve the platform.
• Deliver and route customer support conversations across channels.
• Authenticate users and secure accounts.
• Process transactions and send related information.
• Respond to inquiries, provide customer support, and send service announcements.
• Monitor and analyze trends, usage, and activity to improve performance and reliability.
• Detect, prevent, and address technical issues, fraud, and abuse.
• Comply with legal obligations and enforce our terms.

KuraDesk offers Google as an optional way to sign in. We request only the basic sign-in scopes email, profile, and openid. We do not request access to Gmail, Google Drive, Contacts, Calendar, or any other Google service.

What we receive and why

• Email address: to identify your account, match you to workspaces you have been invited to, and send service messages such as invitations and password resets.
• Basic profile (name and profile picture): to display who you are to teammates inside your workspace.

How we limit use of Google user data

• We use Google user data solely to authenticate you and provide the KuraDesk shared inbox described on our homepage.
• We never use Google user data for advertising.
• We never sell or rent Google user data.
• We do not transfer Google user data to third parties except as needed to operate the Service (for example, our hosting provider), to comply with applicable law, or with your explicit consent.
• We do not allow humans to read Google user data except with your explicit consent, for security purposes such as investigating abuse, to comply with applicable law, or where the data has been aggregated and anonymized.

KuraDesk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke KuraDesk's access at any time from your Google Account permissions page, or ask us to delete your account data by emailing privacy@kurasika.tech.

Where the GDPR or similar laws apply, we process personal data on the following bases: performance of a contract, our legitimate interests (such as securing and improving the platform), your consent (which you may withdraw at any time), and compliance with legal obligations.

We do not sell your personal information. We may share information with:

• Service providers: vendors who host, process, or support the platform (e.g., cloud hosting, messaging providers, analytics, payment processing) under contractual confidentiality obligations.
• Messaging platforms: when you connect a channel such as WhatsApp, messages are transmitted through that provider subject to their own terms and privacy practices.
• Within your organization: account administrators and authorized agents may access support content associated with your account.
• Legal & safety: when required by law, legal process, or to protect the rights, property, or safety of KuraDesk, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

We use cookies and similar technologies to keep you signed in, remember preferences, understand how the platform is used, and improve it. You can control cookies through your browser settings; disabling some cookies may affect functionality. Where required, we will request your consent before setting non-essential cookies.

We retain personal information for as long as needed to provide the platform, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we delete or anonymize it. Account owners may request deletion of their data as described in Your Rights & Choices.

We implement technical and organizational measures designed to protect your information, including encryption in transit, access controls, and regular monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on your location, you may have the right to access, correct, update, delete, restrict, or object to the processing of your personal information, and to data portability. You may also withdraw consent where processing is based on consent. To exercise these rights, contact us at privacy@kurasika.tech. We will respond in accordance with applicable law. You also have the right to lodge a complaint with a supervisory authority.

Your information may be processed and stored in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards such as standard contractual clauses to protect it in accordance with applicable law.

The platform is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can take appropriate action.

The platform may contain links to or integrations with third-party websites and services that are governed by their own privacy policies. We are not responsible for the practices of those third parties and encourage you to review their policies.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the platform after changes take effect constitutes acceptance of the updated policy.

If you have questions or requests regarding this Privacy Policy or your personal information, please contact us:

KuraDesk
Privacy team: privacy@kurasika.tech
Support: support@kurasika.tech
Website: desk.kurasika.tech