What we never collect
We do not collect, process, transmit or store end-customer identity documents, Aadhaar numbers, PAN numbers or biometric data. There is no upload capability anywhere on this site and no demo that accepts real identity data. This is a deliberate design constraint, not a policy we could quietly change.
What we do collect
If you email us, the only personal data we hold is what you chose to put in that email. If you use the enquiry form, we collect only what qualifies an enquiry: your name, work email, company, role, an optional phone number and an optional message, plus which page you came from and how you found us. Where our edge network tells us the country a request came from, we store that country — never your IP address, which we neither record nor pass on. There is no field anywhere on this site that accepts an Aadhaar number, a PAN number, or any identity document.
Who processes it
- Amazon Web Services — Hosting and enquiry API, ap-south-1 (India)
- Neon — Enquiry database, ap-southeast-1 (Singapore)
- Resend — Sending enquiry confirmation email
- HubSpot — Customer relationship record of enquiries
- Cloudflare — Turnstile spam protection on the enquiry form
- Google Analytics — Site analytics, post-consent only
How long we keep it
Enquiry data is retained for 24 months from your last interaction with us and then deleted. Once enquiry capture ships this runs as a scheduled job, not as an intention.
Your rights
You may ask us what personal data we hold about you, ask us to correct it, and ask us to erase it. Write to hello@kycapis.com from the address you contacted us on, or tell us which address to look under. We acknowledge within two business days and complete the request within thirty days, and we will tell you if anything prevents us from doing so.
Erasure is genuine deletion from our database rather than a flag, and it propagates to the processors listed above. If we are required to retain something, we will say what and why.
The same address reaches our grievance contact under the Digital Personal Data Protection Act. If you are not satisfied with how we have handled a request, say so in reply and it will be escalated rather than closed.
Analytics and consent
No analytics or third-party script runs before you consent to it. Decline, and no third-party request is made from your browser at all. There is no tag manager on this site.
Data residency
Our application tier runs in AWS ap-south-1, in India. Our enquiry database currently runs in ap-southeast-1, in Singapore, and we are moving it to India. We would rather tell you exactly where your data is than round it up to a better answer.