Privacy Policy

Kalax Enterprises is operated by Shailesh Madhukar Magar (trading as Sam Magar), an independent AI systems and automation consultant based remotely. Contact: reachme.shailesh@kalaxenterprises.tech or reachme.shailesh@gmail.com.

Contact form submissions: When you fill out the contact form on this website, we collect your name, email address, and the message content you provide. This information is used solely to respond to your enquiry.

Google OAuth (API integrations):Some services we build for clients use Google OAuth to access Google services (e.g., Google Ads, Google Calendar, Google Sheets) on the client's behalf. When you authorise such access, we request only the minimum scopes necessary to perform the specific task. We do not store your Google credentials. Access tokens are handled transiently and never persisted to long-term storage unless explicitly required by the service we are building for you and agreed upon in writing.

Analytics and cookies: This website does not currently use tracking cookies or third-party analytics scripts. If this changes, this policy will be updated.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request access to Google data that is necessary for the specific feature being used.
• We do not use Google user data to develop, improve, or train generalised AI or ML models.
• We do not sell or transfer Google user data to third parties.
• We do not use Google user data for advertising purposes.
• Human review of Google user data is limited to security, compliance, and debugging purposes where necessary.

Information you provide is used only to:

• Respond to your contact form enquiries.
• Deliver the automation or development services you have engaged us for.
• Communicate about project scope, deliverables, and support.

We do not use your information for marketing without your explicit consent, and we do not sell your data to any third party under any circumstances.

Contact form messages are retained only as long as necessary to complete the associated enquiry or project. If you request deletion of your data, we will honour that request within 30 days.

For client projects: data handling timelines are agreed upon in individual engagement agreements and/or statements of work.

If you have authorised any Google OAuth integration built or operated by Kalax Enterprises, you can revoke access at any time via your Google Account security settings at myaccount.google.com/permissions.

You may also contact us directly to request revocation or deletion of any access we hold.

We take reasonable precautions to protect information you share with us. Credentials and access tokens used in client projects are stored using environment variable injection, not hardcoded in source code, and access is restricted to the minimum necessary parties.

No method of electronic transmission or storage is 100% secure. We will notify you promptly if we become aware of any unauthorised access to information you have shared with us.

This website is hosted on Vercel. Contact form submissions are processed via a Google Apps Script webhook. These services have their own privacy policies. We do not control their data practices.

This website and our services are not directed at children under 13. We do not knowingly collect personal information from children.

We may update this policy from time to time. The effective date at the top of this page reflects the most recent update. Continued use of our website or services after changes constitutes acceptance of the updated policy.