Privacy Policy
Last Updated: January 1, 2025
At Krab.ai, we take your privacy seriously. This Privacy Policy explains how Krab.ai Technologies Pvt. Ltd. (India) and Krab Inc. (US) collect, use, disclose, and safeguard your information when you use our services.
1. Information We Collect
1.1 Personal Information
- Name, phone number, and email address
- Aadhaar number and PAN card details (for KYC compliance)
- Business registration details (GST number, trade license)
- Bank account information
- Vehicle registration details
- Driver license information
1.2 Business Information
- Revenue and transaction history
- Fleet details and trip records
- Invoice and billing information
- Tax returns and financial statements
- Business relationships and customer data
1.3 Technical Information
- IP address and device information
- Browser type and version
- Location data (GPS coordinates for fleet tracking)
- App usage analytics
- Cookie data and similar technologies
2. How We Use Your Information
We use the collected information for:
- Processing loan applications through our AI/ML algorithms
- Providing fleet management and tracking services
- Managing digital ledger and accounting features
- Conducting KYC and credit assessments
- Improving our services through analytics
- Communicating important updates and offers
- Complying with legal and regulatory requirements
- Preventing fraud and ensuring security
3. Information Sharing and Disclosure
We may share your information with:
3.1 Financial Partners
RBI-licensed NBFCs and banks for loan processing and disbursement. This includes sharing your financial data, business information, and KYC documents as required for credit assessment.
3.2 Service Providers
Third-party vendors who help us provide our services, including cloud hosting providers, SMS gateways, payment processors, and analytics services.
3.3 Legal Requirements
Government authorities, law enforcement, or other parties when required by law or to protect our rights and safety.
4. Data Security
We implement industry-standard security measures including:
- 256-bit SSL encryption for data transmission
- Encrypted storage of sensitive information
- Regular security audits and penetration testing
- Access controls and authentication mechanisms
- AI-powered fraud detection and monitoring
- ISO 27001 compliance standards
5. Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Typically:
- Active account data: As long as you use our services
- Financial records: 7 years as per regulatory requirements
- Technical logs: 90 days
- Marketing data: Until you opt-out
6. Your Rights
Under applicable data protection laws, you have the right to:
- Access your personal information
- Correct inaccurate data
- Request deletion of your data (subject to legal obligations)
- Opt-out of marketing communications
- Data portability
- Withdraw consent for data processing
7. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance user experience, analyze usage patterns, and personalize content. You can manage cookie preferences through your browser settings.
8. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
9. International Data Transfers
As we operate in both India and the US, your data may be transferred and processed in either country. We ensure appropriate safeguards are in place for international data transfers.
10. Third-Party Links
Our services may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.
11. Updates to Privacy Policy
We may update this policy periodically. We will notify you of significant changes through email or in-app notifications.
12. Contact Us
For questions about this Privacy Policy or to exercise your rights, contact us at:
Data Protection Officer
Krab.ai Technologies Pvt. Ltd.
Email: privacy@krab.ai
Phone: +91 1800-123-KRAB
For users in specific regions, you may also contact relevant data protection authorities.