Privacy Policy
This policy explains what personal data we collect through karooli.ai, why we collect it, how we use and protect it, and your rights with respect to it.
It applies to the Website only. It does not apply to individual Karooli.ai products (such as Vesspr), which operate under their own product-specific privacy policies.
Introduction
Karooli.ai Private Limited (“Karooli.ai”, “we”, “us”, or “our”) is committed to protecting the privacy of everyone who visits and interacts with the Karooli.ai website (karooli.ai). This Privacy Policy explains what personal data we collect through the Website, why we collect it, how we use and protect it, and your rights with respect to it.
This Privacy Policy applies to the Website only. It does not apply to individual Karooli.ai products (such as Vesspr), which operate under their own product-specific privacy policies. If you use any Karooli.ai product, please refer to that product's privacy documentation.
Karooli.ai is the data controller for personal data collected through the Website. We process personal data in accordance with applicable law, including India's Digital Personal Data Protection Act, 2023 (DPDP Act), the EU General Data Protection Regulation (GDPR), the UK GDPR, and equivalent legislation in other applicable jurisdictions.
Karooli.ai is a company founded to serve people, not to extract value from their data.
We collect the minimum data necessary. We use it only for the purposes stated. We never sell it.
This is not a policy written to protect the company from its users. It is a policy written to protect users.
Data We Collect
2.1Data You Provide Directly
When you interact with the Website, you may provide us with the following types of personal data:
Waitlist Registration Data. Your name and email address, and optionally your country or city, submitted when joining a product waitlist.
Newsletter Subscription Data. Your email address (and optionally your name) submitted when subscribing to Karooli.ai communications.
Contact and Enquiry Data. Your name, email address, company or organisation (if applicable), and the content of any message submitted through a contact form or email directed to Karooli.ai.
Investor / Partner Enquiry Data. Professional information provided when expressing interest in partnering with or investing in Karooli.ai.
2.2Automatically Collected Data
When you visit the Website, certain technical data is automatically collected by our hosting and analytics infrastructure:
IP Address. Collected for security, fraud prevention, and approximate geographic compliance. Not used for persistent tracking.
Browser and Device Information. Browser type and version, operating system, and device type, collected in aggregate for website performance optimisation.
Usage Data. Pages visited, time spent on pages, and navigation paths, collected in aggregate and anonymised form to understand how the Website is used.
Referral Source. How you arrived at the Website (e.g., search engine, direct link, social media), in anonymised aggregate form.
2.3Cookie Data
The Website uses a strictly limited set of cookies, described fully in Section 9.
2.4Data We Do Not Collect Through the Website
Unless you use a Karooli.ai product (which has its own privacy policy), we do not collect through the Website:
Conversation content or emotional data of any kind.
Financial information or payment data.
Health or medical information.
Social media profile content or private messages.
Device location beyond city/country level.
Information from your contacts, camera, or microphone.
Legal Bases for Processing
For users in the EEA and UK, our legal bases for processing personal data collected through the Website are:
- Consent
- Newsletter subscriptions and marketing communications. You may withdraw consent at any time.
- Contractual Necessity
- Processing your waitlist registration data in connection with your interest in receiving access to a Karooli.ai product.
- Legitimate Interests
- Website security, fraud prevention, and aggregate analytics to improve the Website. We ensure these interests are proportionate and do not override your rights.
- Legal Obligation
- Responding to lawful requests from authorities and meeting applicable compliance requirements.
For users in India, processing is based on your consent given at the point of data submission, and on legitimate uses under the DPDP Act, including fulfilling your request to join a waitlist or receive communications.
How We Use Your Data
We use the personal data collected through the Website for the following purposes only:
- Waitlist Management
- To maintain and manage waitlists for Karooli.ai products; to notify you of launch updates; to transfer your registration data to the relevant product system upon launch (with notice).
- Communications
- To send you newsletters, product updates, and communications to which you have subscribed. Each communication includes an unsubscribe option.
- Responding to Enquiries
- To respond to questions, partnership enquiries, press enquiries, and investor interest submitted through the Website.
- Website Improvement
- To understand in aggregate how the Website is used and to improve its performance and content. Analytics data is anonymised and never used to build individual user profiles.
- Security and Compliance
- To detect and prevent fraudulent, abusive, or illegal use of the Website; to respond to lawful legal requests; to enforce our Terms.
We do not use Website data for advertising, profiling, sale to third parties, or any purpose not listed above.
Sharing Your Data
5.1Service Providers
We use a small number of carefully selected third-party service providers who process data on our behalf and strictly under our instructions. These may include:
Website Hosting and Infrastructure. For operating and securing the Website.
Email and Communications Platform. For delivering newsletters and waitlist notifications.
Analytics Provider. For aggregate, anonymised website analytics. We use privacy-respecting analytics tools that do not build individual user profiles or share data with advertising networks.
Customer Relationship Management. For managing enquiries and contact form submissions.
All service providers are contractually bound to process your data only for the purposes specified by Karooli.ai, to maintain appropriate security standards, and not to use your data for their own purposes.
5.2Legal Disclosure
We may disclose your personal data if required to do so by law or in good faith belief that such action is necessary to: comply with a legal obligation or lawful government request; protect the rights or safety of Karooli.ai, our users, or the public; or detect, investigate, or prevent fraud or illegal activity. We will inform you of any such disclosure to the extent permitted by law.
5.3Business Transfers
In the event of a merger, acquisition, or sale of Karooli.ai, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and will have the option to delete your data prior to the transfer.
5.4No Sale of Data
Karooli.ai will never sell, rent, or lease your personal data to any third party for any purpose. This commitment is absolute and non-negotiable.
International Data Transfers
Karooli.ai is incorporated in India. Personal data collected through the Website may be stored and processed in India and, where our service providers operate, in other countries.
For users in the EEA and UK, we ensure that any transfer of personal data outside the EEA/UK is subject to appropriate safeguards, including Standard Contractual Clauses (SCCs) or other legally recognised mechanisms. For users in India, data is processed in accordance with the DPDP Act.
You may request information about the safeguards governing any specific transfer by contacting privacy@karooli.ai.
Data Retention
We retain your personal data only for as long as necessary for the purposes described in this policy:
- Waitlist Data
- Until you withdraw from the waitlist, the product launches and your data is transferred (with notice), or 2 years of inactivity, whichever comes first.
- Newsletter Subscription
- Until you unsubscribe. Unsubscribed addresses are retained on a suppression list to prevent resubscription.
- Contact and Enquiry Data
- For 2 years from the date of the enquiry, or longer if an ongoing relationship develops.
- Security and Log Data
- For up to 90 days, then automatically purged.
- Legal Records
- For as long as required by applicable law.
Upon deletion of your data following a request or inactivity, data will be removed from active systems within 30 days and from backup systems within 60 days.
Your Rights
8.1GDPR / UK GDPR Rights (EEA and UK Users)
If you are located in the EEA or UK, you have the following rights:
Right of Access. To receive a copy of the personal data we hold about you.
Right to Rectification. To correct inaccurate or incomplete data.
Right to Erasure. To request deletion of your personal data.
Right to Restriction. To request that we limit our processing in certain circumstances.
Right to Data Portability. To receive your data in a structured, machine-readable format.
Right to Object. To object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent. Where processing is consent-based, to withdraw at any time via the unsubscribe mechanism or by contacting us.
8.2DPDP Act Rights (Indian Users)
Under India's Digital Personal Data Protection Act, 2023, you have the right to:
Access. Request a summary of the personal data we process and the purposes of processing.
Correction and Erasure. Request correction of inaccurate data and erasure of data no longer required for the purpose it was collected.
Grievance Redressal. Have your grievances addressed in a timely manner.
Nomination. Nominate an individual to exercise your rights on your behalf in case of incapacity.
8.3How to Exercise Your Rights
To exercise any of the above rights, please contact us at privacy@karooli.ai with your name, the email address associated with your data, and the specific right you wish to exercise. We will respond within 30 days (or sooner if required by applicable law). We may ask you to verify your identity.
If you are an EEA user and are dissatisfied with our response, you have the right to lodge a complaint with your national data protection supervisory authority.
Cookies and Tracking
The Karooli.ai website uses a strictly limited set of cookies. We do not use advertising cookies, behavioural tracking cookies, or third-party data-sharing cookies of any kind.
- Strictly Necessary
- Session management and security. Essential for the Website to function. Cannot be disabled. No personal data is retained beyond the session.
- Analytics (Optional)
- Aggregate, anonymised data on how the Website is used. No individual profiling. No advertising networks. Opt-out available in the cookie settings banner.
- Functional (Optional)
- Used to remember your preferences (e.g., cookie consent choice). Persistent but privacy-preserving.
- No Advertising Cookies
- Karooli.ai does not use advertising cookies, retargeting pixels, or cross-site tracking of any kind — on this Website or on its products.
You may manage your cookie preferences at any time through the cookie settings banner displayed on your first visit to the Website, or by clearing cookies through your browser settings. Note that disabling functional cookies may affect your experience.
Children's Privacy
The Website is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has submitted personal data to the Website, we will delete it promptly.
Contact us at privacy@karooli.ai if you believe a child has submitted data to the Website.
Security
Karooli.ai implements industry-standard technical and organisational security measures to protect personal data collected through the Website, including:
HTTPS encryption for all Website traffic.
Access controls limiting internal access to personal data on a need-to-know basis.
Regular security reviews of Website infrastructure.
Data minimisation practices limiting collection to what is strictly necessary.
No system is entirely secure. In the event of a data breach that creates a material risk to your rights, we will notify you and relevant authorities as required by applicable law.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, our services, or applicable law. Where changes are material, we will endeavour to notify you via email (if we hold your email address) or a prominent Website notice at least 14 days before the changes take effect. The “Last Updated” date at the top of this document reflects the date of the most recent revision.
Continued use of the Website after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms.
Contact
For all privacy-related enquiries, requests, or complaints regarding the Website:
- Privacy Contact
- admin@karooli.ai
- General Legal
- admin@karooli.ai
- Support
- support@karooli.ai
- Company
- Karooli.ai Private Limited
- Jurisdiction
- India
- Registered Address
- Bengaluru, India