1. About Us

KSPB Enterprises LLP ("KSPB", "Company", "we", "us", "our") is a Limited Liability Partnership registered in Rajasthan, India. Our principal place of business is Plot No. 174, Sumer Nagar-1, Jaipur, Rajasthan 302020. GSTIN: 08ABEFK5746N1ZQ. We operate the social media automation platform ("the Platform" or "the Service").

This Policy applies to visitors to our website, business customers who register and use the Platform ("Clients"), and end users of Clients' products whose data flows through the Platform ("Client End Users").

2. Information We Collect

Account and Business Information

When you register as a Client, we collect your business name, contact name, email address, phone number, and payment details necessary to provision and maintain your account.

API Usage Logs

We collect logs of API calls made through the Platform, including request timestamps, endpoints accessed, and response codes. These are used for authentication, rate-limit enforcement, security monitoring, and debugging.

Customer Data via Meta APIs

With your explicit authorization, we access the following data through Meta's official Graph API and WhatsApp Business API on your behalf:

• Instagram: Post comments, direct messages, and basic profile data of users who interact with your Instagram Business account.
• Facebook: Page comments, Messenger messages, and basic profile data of users who interact with your Facebook Business Page.
• WhatsApp: Messages sent to and received from your WhatsApp Business number.

Access is scoped strictly to the permissions you grant when connecting your Meta accounts.

Website Usage Data

We automatically collect pages visited, time spent, browser type, device type, and IP address when you visit our website, for analytics and security purposes.

3. How We Use Your Information

We use collected information for the following purposes only:

• Authentication: Verifying your identity and managing secure access to the Platform.
• Integration: Operating automation flows, processing social media comments and DMs, and populating your CRM.
• Analytics: Analysing aggregated and anonymised usage patterns to improve Platform features and performance.
• Security: Detecting, investigating, and preventing fraud, abuse, or unauthorized access.
• Support: Responding to your support requests and troubleshooting issues.
• Legal compliance: Meeting our obligations under applicable law and responding to lawful requests from authorities.

We do not use Meta Platform Data for advertising purposes, third-party profiling, or any purpose beyond delivering the features you have enabled.

4. Platform Data Usage Policy (Meta APIs)

As a Meta Tech Provider, we are additionally bound by Meta's Platform Terms and Developer Policies. Specifically:

• Data obtained from Meta, Instagram, WhatsApp, and Facebook is used only to provide the authorized functionality you have configured.
• Data is not shared with unauthorized third parties under any circumstances.
• Access permissions are requested using least-privilege principles — we request only the permissions necessary to operate the features you enable.
• Users (Client End Users) can revoke permissions at any time through the relevant Meta platform settings (Instagram, Facebook, or WhatsApp). Upon revocation, we cease processing that user's data.
• We do not build advertising audiences or sell, license, or transfer Meta Platform Data to third parties except to deliver the Service via our infrastructure sub-processors.

5. Data Processing and Retention

Customer data is processed solely to provide the services requested. Data is retained only for operational, legal, and security purposes as follows:

• Active account data and CRM records: retained for the duration of your subscription.
• Meta Platform Data (messages, comments, profiles): deleted within 90 days of account closure.
• API usage logs: retained for 12 months for security and debugging, then deleted.
• Financial records: retained for 7 years as required by Indian tax law.

Upon account closure, all non-legally-required data is deleted within a reasonable period not exceeding 90 days.

Sub-processors

We may engage the following categories of sub-processors who process data on our behalf under contractual data processing agreements:

• Cloud hosting and infrastructure providers
• Analytics and monitoring services
• Email delivery providers
• Payment processors

Sub-processors are bound by equivalent data protection obligations and are not permitted to use your data for their own purposes.

6. Your Rights

You may request the following at any time by emailing r.rawat79@rediffmail.com:

• Access: A copy of the personal data we hold about you.
• Correction: Correction of inaccurate or incomplete data.
• Export: Your data in a commonly used, machine-readable format.
• Deletion: Permanent deletion of your data (see our dedicated Data Deletion page).
• Restriction: Restriction of certain processing activities.
• Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time.

We will respond to all requests within 30 days.

7. Data Security

See our dedicated Information Security Policy for full details. In summary, we implement encryption in transit and at rest, role-based access controls, multi-factor authentication, and regular security audits.

8. Cookies

Our website uses essential cookies (required for functionality), analytics cookies (to understand usage patterns, opt-out available via browser settings), and functional cookies (to remember your preferences). Disabling non-essential cookies does not affect your ability to use the Platform.

9. Children's Privacy

The Platform is intended for business users only and is not directed to individuals under 18. We do not knowingly collect data from minors. Contact r.rawat79@rediffmail.com if you believe we have inadvertently done so.

10. Changes to this Policy

Material changes will be communicated via email at least 14 days before they take effect. The effective date above always reflects the most recent version. Continued use of the Service after an update constitutes acceptance.

11. Contact

1. Definitions

• "KSPB", "we", "us", "our" — KSPB Enterprises LLP, GSTIN: 08ABEFK5746N1ZQ, Jaipur, Rajasthan, India.
• "Service" / "Platform" — The social media automation and lead generation software operated by KSPB.
• "Client" / "you" — The business entity or individual registering for and using the Service.
• "Client End User" — Any individual who interacts with your connected social media accounts and whose data is processed through the Platform.
• "Meta Platform Data" — Data obtained through Meta's Instagram, Facebook, and WhatsApp APIs, including comments, messages, and user profiles.

2. Permitted Use

KSPB grants you a limited, non-exclusive, non-transferable licence to access and use the Service for your internal business purposes, including automating social media responses, qualifying leads, managing CRM records, and analysing automation performance.

3. User Responsibilities

Users must comply with all applicable laws and platform policies. You are responsible for:

• The content you connect or process through the platform, including automation messages and templates.
• Obtaining any required consents from Client End Users before processing their data through the Platform.
• Ensuring your use complies with Meta's Platform Terms, Developer Policies, and Community Standards.
• Keeping your account credentials confidential and notifying us immediately of any unauthorized access.

4. Prohibited Use

You must not use the Service to:

• Send spam, unsolicited bulk messages, or engage in mass messaging not initiated by genuine user interaction.
• Violate Meta's Platform Terms, Developer Policies, or Community Standards.
• Collect, store, or process data of individuals without their knowledge or a lawful basis.
• Build advertising audiences using Meta Platform Data or sell/transfer such data to third parties.
• Harass, threaten, deceive, or mislead any person.
• Reverse-engineer, decompile, or extract the source code of the Platform.
• Resell or sublicense access to the Service without our written consent.
• Engage in fraud, abuse, or any activity that damages KSPB's infrastructure or reputation.

KSPB reserves the right to suspend or terminate accounts involved in abuse, fraud, spam, or policy violations, with or without prior notice depending on severity.

5. Service Availability

Services are provided on a commercially reasonable basis without guarantees of uninterrupted availability. KSPB will use reasonable efforts to maintain uptime but is not liable for disruptions caused by:

• Meta API changes, restrictions, or outages.
• Scheduled maintenance (communicated in advance where possible).
• Force majeure events beyond our reasonable control.

6. Meta Platform Compliance

By connecting your Meta accounts, you acknowledge that:

• KSPB operates as a Tech Provider and accesses your Connected Accounts solely on your behalf.
• You are responsible for ensuring your use complies with Meta's policies applicable to your account.
• Meta may at any time modify or revoke API access; KSPB is not liable for resulting feature disruptions.
• You will not use Meta Platform Data for any purpose prohibited by Meta's Platform Terms.

7. Fees and Payment

Access requires a paid subscription. Fees are in INR (exclusive of GST), due in advance, and non-refundable except as required by law. Pricing changes will be communicated with 30 days' notice. Accounts suspended for non-payment for more than 60 days may be terminated.

8. Intellectual Property

All intellectual property rights in the Platform are owned by KSPB Enterprises LLP or its licensors. You retain ownership of your data and content. Nothing in these Terms transfers IP rights to you.

9. Disclaimer of Warranties

The Service is provided on an "as is" and "as available" basis. KSPB disclaims all implied warranties to the maximum extent permitted by law, including warranties of merchantability, fitness for a particular purpose, and uninterrupted operation. KSPB does not warrant that any specific revenue outcome will be achieved.

10. Limitation of Liability

KSPB's total liability for any claim shall not exceed the fees paid by you in the 12 months preceding the event. In no event will KSPB be liable for indirect, incidental, consequential, or punitive damages including loss of profits or data. Nothing excludes liability for death, personal injury, or fraud.

11. Indemnification

You agree to indemnify KSPB against claims arising from your violation of these Terms, your violation of Meta's policies, your automation content, or your failure to obtain required consents from Client End Users.

12. Term and Termination

Either party may terminate: you at any time by cancelling your subscription; KSPB with 30 days' notice or immediately for material breach or prohibited use. Upon termination, data is deleted per our Privacy Policy. Sections 8, 9, 10, and 11 survive termination.

13. Governing Law

These Terms are governed by the laws of India. Disputes shall first be resolved through good-faith negotiation, then by arbitration under the Arbitration and Conciliation Act 1996, with seat at Jaipur, Rajasthan. Courts at Jaipur have exclusive jurisdiction over non-arbitrable matters.

14. Changes

Material changes will be communicated via email at least 14 days before taking effect. Continued use after an update constitutes acceptance.

15. Contact

1. Access Controls

Access to customer data and production systems is restricted to authorized personnel only. We enforce the following controls:

• Role-based access control (RBAC) — employees access only the data necessary for their job function.
• Multi-factor authentication (MFA) is required for all internal systems and administrative access.
• Access rights are reviewed and updated regularly, and promptly revoked upon employee departure.
• Passwords are securely stored using industry-standard hashing algorithms. Plaintext passwords are never stored.

2. Data Encryption

• In transit: All data transmitted between clients, the Platform, and Meta APIs is encrypted using TLS 1.2 or higher.
• At rest: Customer data stored in our databases and object storage is encrypted using AES-256.
• API keys and secrets: All third-party credentials including Meta API tokens are stored in encrypted secret management systems, never in source code or plaintext configuration files.

3. Monitoring and Abuse Detection

Systems are monitored continuously for abuse and unauthorized access. Measures include:

• Automated alerting on anomalous API usage patterns and failed authentication attempts.
• Log aggregation and retention for security audit purposes (12 months).
• Rate limiting and abuse prevention controls on all public-facing API endpoints.
• Regular vulnerability scanning of infrastructure and application code.

4. Incident Response

Security incidents are investigated and remediated promptly. Our process:

• Incidents are triaged within 24 hours of detection.
• Affected customers are notified of material breaches in accordance with applicable law (India's DPDP Act 2023 and other relevant regulations).
• Root cause analysis is conducted for all significant incidents, with corrective actions documented and implemented.
• We cooperate fully with Meta's security requirements and data protection assessment processes.

5. Third-Party Security

Sub-processors and infrastructure providers are selected based on their security posture. We require that all sub-processors:

• Maintain security standards equivalent to or exceeding those described in this Policy.
• Process customer data only as instructed by KSPB and not for their own purposes.
• Notify KSPB promptly of any security incidents affecting customer data.

6. Contact for Security Issues

To report a security vulnerability or incident:

How to Request Data Deletion

Follow these steps to submit a deletion request:

What Gets Deleted

Upon a verified deletion request, we will permanently delete:

• Your account and profile information.
• All CRM records and lead data processed through the Platform.
• Meta Platform Data — messages, comments, and user profiles obtained via Instagram, Facebook, and WhatsApp APIs.
• Automation flow configurations and message templates associated with your account.
• API usage logs associated with your account (beyond the 12-month security retention window).

What May Be Retained

In limited circumstances, some data may be retained even after a deletion request:

• Financial transaction records required by Indian tax and accounting law (retained for 7 years).
• Data required to comply with a legal obligation or court order.
• Anonymised, aggregated data that cannot be linked back to any individual.

We will inform you of any data we cannot delete and the reason why.

Revoking Meta Platform Access

If you connected your Meta accounts to our Platform and wish to revoke access independently of a full deletion request, you can do so directly through Meta:

• Instagram: Settings → Security → Apps and websites → Remove KSPB Enterprises.
• Facebook: Settings → Security and Login → Apps and Websites → Remove KSPB Enterprises.
• WhatsApp Business: Contact us at r.rawat79@rediffmail.com to disconnect your WhatsApp Business number from the Platform.

Revoking platform access will immediately stop the Platform from processing new data from those accounts. Existing data held by us will be handled according to our retention policy unless you submit a full deletion request.

Contact