Privacy Policy

Keetu holds data about you, the business using it — and data about your customers, which you collected at your own counter.

For your own data we are the controller. For your customers' data you are the controller and we are the processor: it is your data, we hold it on your behalf, and we act on your instructions. We do not sell it, rent it, or use it to build products for anyone else.

• Your account: business name, GSTIN, address, city, and the name, email and role of each login.
• What your counter records: bills and their line items, payment mode, GST, inventory movements, purchases and expenses.
• Your customers as you entered them: name, phone, and email if given, plus loyalty points and purchase history.
• Your staff, if you use HR: names, roles, phone numbers, attendance, leave and salary figures needed to run payroll.
• Operational logs: request errors with an event id and your business id, kept to diagnose faults.

We do not store card numbers, UPI PINs or bank credentials. When payments are collected online they are handled by a licensed payment gateway, and those details go to them, not to us.

On Amazon Web Services in the Mumbai region(ap-south-1) — your data stays in India. Backups stay in the same region. Connections between your device and Keetu, and between Keetu and its database, are encrypted in transit.

• You and the logins you create. Each account sees only its own data; the database enforces that separately from the application.
• Anyone you deliberately connect — most often your CA or accountant, through an API key you generate and can revoke at any time. That access is read-only.
• Our engineers, only when diagnosing a fault you have reported or an outage we have detected, and only as far as the problem requires.

We disclose data to authorities only where the law requires it, and we will tell you unless we are legally prevented from doing so.

Keetu uses a small number of providers to do things it cannot do alone. Each receives only what that job needs:

• Amazon Web Services — hosting, database and storage (Mumbai).
• Amazon SES — sending email you ask us to send, such as campaigns and password resets.
• A WhatsApp/SMS business provider — delivering the messages your counter triggers, such as bills and booking confirmations.
• A payment gateway — collecting your subscription, and handling card and UPI details we never see.

Campaigns, receipts and reminders go to your customers under your business name. You are responsible for having a lawful basis to contact them. We keep a suppression list of addresses that bounced or complained and will not message them again, on any account — that protects every business sending through Keetu.

For as long as your account is open. If you close it, tell us and we will delete your data within 90 days, except records we are required to retain — invoicing and tax records typically for eight years under Indian law. Deactivated logins are kept so their past actions remain attributable, not to keep billing you for them.

It is yours and you can take it. Invoices and transactions export to CSV from inside Keetu, and the Partner API returns your accounting and GST data in a machine-readable form. Ask us at support@keetu.in and we will export the rest.

You can also ask us to correct anything wrong, or to delete data we are not required to keep.

If data is exposed in a way that puts you or your customers at risk, we will tell affected businesses without undue delay, describe what happened, and say what we are doing about it.

If this policy changes materially we will update the date above and tell account owners by email. Questions, requests and complaints go to support@keetu.in, or by post to BrightLabs Infrasoft Solutions Pvt. Ltd., Hyderabad, Telangana, India.

See also our Terms of Service and Refund & Cancellation Policy.