Privacy Policy

Kalax Enterprises is operated by Shailesh Madhukar Magar (trading as Sam Magar), its founder, based remotely. Contact: reachme.shailesh@kalaxenterprises.tech or reachme.shailesh@gmail.com.

Kalax Diagnose submissions: When you submit a business problem through Kalax Diagnose, we collect the business problem description, your name, business or company name, optional role, WhatsApp number, optional email address, a business-impact selection, and source/referral context (e.g. how you found us). We also record submission and reference metadata to track and follow up on your enquiry. This information is used to review your submitted problem, contact you, prepare for a diagnostic conversation, and maintain an internal record of the enquiry.

IP address and server logs:When a Kalax Diagnose submission is sent, the server uses your IP address to limit repeated submission attempts. For this it is held only in the running server's memory — it is not written to storage, added to your submission record or its notification, or included in the analytics events we define. Separately, our web server keeps standard request logs (IP address, date and time, the page requested, the referring page and browser type), which are deleted automatically after about two weeks.

Google OAuth (API integrations):Some services we build for clients use Google OAuth to access Google services (e.g., Google Ads, Google Calendar, Google Sheets) on the client's behalf. When you authorise such access, we request only the minimum scopes necessary to perform the specific task. We do not store your Google credentials. Access tokens are handled transiently and never persisted to long-term storage unless explicitly required by the service we are building for you and agreed upon in writing.

Website analytics and cookies: This website uses Google Analytics, a service provided by Google, to understand how visitors use the site so we can improve the site and our services. Google Analytics sets first-party cookies in your browser (for example _ga) to recognise repeat visits, and collects usage information such as the pages you view, the referring website, general location (such as country or city), device and browser type, scrolling, clicks on links to other websites, file downloads, and clicks on our contact email links.

For Kalax Diagnose, we measure only whether the flow was started, which step was completed, whether a submission succeeded or failed (and a broad failure category), and a fixed acquisition label such as “website” or “card”. We do not include what you type into Kalax Diagnose — your name, business name, contact details or problem description — in the analytics events we define. Google signals and ad-personalisation signals are disabled in our analytics configuration.

You can block or delete cookies through your browser settings, or install Google's Analytics opt-out browser add-on. Google explains how it uses this information at policies.google.com/technologies/partner-sites.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request access to Google data that is necessary for the specific feature being used.
• We do not use Google user data to develop, improve, or train generalised AI or ML models.
• We do not sell or transfer Google user data to third parties.
• We do not use Google user data for advertising purposes.
• Human review of Google user data is limited to security, compliance, and debugging purposes where necessary.

Information you provide is used only to:

• Review the business problem you submitted through Kalax Diagnose.
• Contact you and prepare for a diagnostic conversation.
• Maintain an internal business enquiry and relationship record.
• Deliver the automation or development services you have engaged us for.
• Communicate about project scope, deliverables, and support.

We do not use your information for marketing without your explicit consent, and we do not sell your data to any third party under any circumstances.

Kalax Diagnose submissions are stored in a private operational register. Active opportunities and ongoing relationships are retained for as long as legitimately needed. Submissions that do not convert into an engagement are generally retained for up to approximately 12 months, unless we have a legitimate business or legal reason to retain them longer. Records identified as spam, test, or otherwise irrelevant submissions may be removed sooner. If you request deletion of your data, we will honour that request within 30 days.

For client projects: data handling timelines are agreed upon in individual engagement agreements and/or statements of work.

If you have authorised any Google OAuth integration built or operated by Kalax Enterprises, you can revoke access at any time via your Google Account security settings at myaccount.google.com/permissions.

You may also contact us directly to request revocation or deletion of any access we hold.

We take reasonable precautions to protect information you share with us. Credentials and access tokens used in client projects are stored using environment variable injection, not hardcoded in source code, and access is restricted to the minimum necessary parties.

No method of electronic transmission or storage is 100% secure. We will notify you promptly if we become aware of any unauthorised access to information you have shared with us.

This website is hosted on a server operated through Hostinger. Kalax Diagnose submissions are stored in a private operational register and trigger an internal email notification, using service providers required to operate that intake and notification workflow. Website usage is measured with Google Analytics, as described in section 2. These services have their own privacy policies. We do not control their data practices, and we do not use your submission to train AI or ML models, nor is any automated AI diagnosis performed on it — every submission is reviewed by a person.

This website and our services are not directed at children under 13. We do not knowingly collect personal information from children.

We may update this policy from time to time. The effective date at the top of this page reflects the most recent update. Continued use of our website or services after changes constitutes acceptance of the updated policy.