Privacy Policy
Transparency & Trust.

1. Company Identity & Scope

This Privacy Policy applies to Jatta M Kommerce Pvt. Ltd. (“JMK”, “we”, “our”, or “us”), a private limited company incorporated in 2021 and headquartered in Bangalore, Karnataka, India.

This policy governs all digital services, websites, APIs, and SaaS platforms engineered and operated by JMK, including but not limited to: KratuChat.ai, NeoMoneyPay.com, IAMKratu.ai, HandLoan.ai, TripGalileo.com, and VirtualBees.ai.

2. Information We Collect

We collect information strictly necessary to provide, secure, and improve our software platforms:

• Account & Profile Information: Name, work email address, organization name, phone number, and billing touchpoints provided during registration or inquiry.
• Communication & Workflow Data: Inquiries submitted via contact forms, customer service interactions, and configuration settings for automation tools like KratuChat.
• Technical & Log Telemetry: IP addresses, browser types, API call volume, timestamps, and diagnostic error logs used solely for uptime maintenance and fraud prevention.
• Payment Credentials: All financial transactions on platforms like NeoMoneyPay are processed through certified, PCI-DSS compliant payment gateways. We never store raw payment card numbers on our servers.

3. Purpose of Processing & Use of Information

We process personal and organizational data for verified, legitimate business purposes:

• To deploy, maintain, and deliver our intelligent SaaS platforms and requested features.
• To authenticate authorized API clients and secure developer integration tokens.
• To communicate service updates, invoices, security advisories, and feature releases.
• To comply with applicable statutory laws, financial regulations, and judicial orders.

4. Data Sovereignty & Zero Resale Commitment

We do not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances.

Your business data remains your proprietary intellectual property. Data processed through our custom database architectures adheres to transparent governance, isolated tenant permissions, and industry-standard AES-256 encryption at rest and TLS 1.3 encryption in transit.

5. User Rights & Data Control

In accordance with applicable data protection laws, you retain clear rights regarding your personal information:

• Right of Access: You may request a copy of the personal information stored in your account.
• Right to Rectification: You may correct inaccurate or incomplete operational records.
• Right to Erasure: You may request the deletion of non-statutory account data upon terminating service.
• Data Portability: You may request your operational datasets in standard structured formats (e.g., JSON or CSV).

6. Grievance Officer & Contact

For privacy inquiries, data deletion requests, or compliance questions, please contact our designated privacy desk: