Privacy policy

This policy explains what personal data Krate collects, why we collect it, who we share it with, how long we keep it, and how you can ask to see, correct or delete it. It covers our website, our console, and the calls and WhatsApp messages Krate handles for our customers.

Who we are

Krate is run from India. In this policy, “we” and “us” mean Krate. You can write to us about privacy at support@krate.si.

Our customers are real-estate developers and their sales teams. Krate calls and messages the people who enquire about their projects (we call them “leads”), answers their questions, and books site visits.

Our two roles

• For leads’ data, we act for the developer. The developer who received your enquiry decides why and how your data is used. Under India’s Digital Personal Data Protection Act, 2023 (the DPDP Act), the developer is the Data Fiduciary and we are its Data Processor. We use your data only on the developer’s instructions. The developer is responsible for having your consent to call you and to message you.
• For our customers’ staff and our website’s visitors, we decide. When you sign in to our console or book a demo on our website, we are the Data Fiduciary for that data.

What we collect

About leads, for the developer:

• your name and phone number, and the enquiry details the developer gives us, such as the project, your budget, where you want to buy and when;
• the WhatsApp messages you exchange with the developer’s number;
• recordings and written transcripts of calls, and short summaries of them;
• what came of each conversation, such as a booked site visit, and whether you asked not to be contacted.

About our customers’ staff: your name, your work email, and what you do in the console, such as the tasks you complete.

About website visitors: if you book a demo, the name, email, company and (if you give it) phone number you enter. Our analytics counts visits without cookies and stores no personal data.

Why we use it

• to call and message leads for the developer, answer their questions and book site visits;
• to show the developer’s sales team each conversation and its result, so a person can follow up;
• to keep a record of each lead’s choices, such as a request to stop messages, and respect them;
• to keep the service secure, and to find and fix faults;
• to run our customers’ accounts and to arrange the demos visitors book.

Calls and WhatsApp replies may come from an AI agent that acts for the developer. We do not sell personal data, and we do not use it for advertising.

WhatsApp data and AI models

We never use WhatsApp messages, or any data that comes from them, to train or improve AI models, as Meta’s terms for the WhatsApp Business Platform require. This holds even when the data is combined with other data or has names removed. We use AI model providers only under terms that stop them from training their models on the data we send them.

How to stop messages

Reply STOP to any WhatsApp message a developer sends you through Krate, and we stop messaging you from that number. On a call, say that you do not want to be contacted. We keep a record of your request, so that you are not contacted again.

Who we share it with

We share personal data only with the service providers that run Krate for us, and only what each one needs:

• Meta Platforms, which delivers WhatsApp messages;
• Supabase, which holds our database and files and runs sign-in to the console;
• our AI model provider, which writes the agent’s replies and the summaries of calls and chats;
• our voice provider, which places calls, records them and turns speech into text;
• Cloudflare, which serves our websites and protects our servers.

When you book a demo on our website, Cal.com receives your booking details to arrange it, and Plausible counts the visit without cookies. We also share data when the law requires it, for example on a valid order from a court or a government authority.

Where your data is processed

Some of our service providers, such as our AI model provider, may process data outside India. We send data abroad only as the DPDP Act allows, and only to providers who are bound by contract to protect it.

How long we keep it

• A lead’s data stays while the developer uses Krate, unless the developer deletes it sooner or you ask the developer to.
• When a developer stops using Krate, we give them the chance to export their data, then delete it within the period our contract with them sets.
• If you ask us to delete your data, we keep only your phone number and your request not to be contacted, so that we never contact you by mistake.
• We keep our customers’ account data while the account is open, and afterwards only as long as the law requires, for example for tax records. We keep demo bookings only as long as we need them to arrange and follow up the demo.

Your rights

Under the DPDP Act, you can:

• ask what personal data we hold about you, how we use it, and who we shared it with;
• ask us to correct, complete or update it;
• ask us to erase it, and withdraw any consent you gave;
• name another person to use these rights for you if you die or cannot act yourself;
• complain to us and, if our answer does not settle your complaint, to the Data Protection Board of India.

To use any of these rights, write to support@krate.si. Leads, please include the phone number the developer contacted; customers, your work email. We may ask you to confirm who you are before we act. We answer every request within the time the DPDP Act and its rules allow.

If you are a lead, the developer you enquired with decides about your data. You can ask the developer directly, or write to us: we pass your request to the developer and help them act on it.

How we protect it

• Data is encrypted when it travels over the internet and when it is stored.
• Each developer’s data is kept apart: the database checks every request, so one company can never read another company’s data.
• Only the people who need personal data to run the service can reach it.
• If a breach affects your data, we tell the developers concerned and, as the law requires, the Data Protection Board of India and you.

Children

Krate is for businesses and for adults who want to buy property. We do not knowingly collect data about anyone under 18. If you think we have, write to support@krate.si and we will delete it.

Cookies and your browser

Our website sets no cookies. It remembers your sound setting in your own browser and never sends it to us. The console keeps you signed in with a token it stores in your browser.

Changes to this policy

When we change this policy, we change the date at the top. If a change matters, we tell our customers before it takes effect.

Contact

Krate, India. Email: support@krate.si.