Privacy policy
Kkosh is a workspace for chartered accountancy firms, provided by Kkosh (“we”), Mumbai, India. This policy explains what personal data we handle, why, and the choices you have. It is written for the firms that use Kkosh, the people who work in them, their clients, and anyone who asks us for a demo.
Who decides what happens to client data
A firm that uses Kkosh decides what information about its clients it puts into Kkosh and who in the firm can see it. For that information we act on the firm’s instructions, as its processor. Questions about a firm’s handling of a client’s data should first go to that firm.
What we collect
- Demo requests: your name, firm, mobile number, email, city, firm size and anything you write in the form.
- Accounts: the name, email and mobile number of each person a firm invites, and their role in the firm.
- Firm work: the client list, documents, messages and records a firm puts into Kkosh or receives through its connected WhatsApp number.
- Usage and security records: sign-ins, which files were opened and by whom, and the technical logs needed to run and secure the service.
How we use it
- To respond to a demo request and set up a pilot.
- To run Kkosh for the firm: preparing returns and workings, tracking requests, sending the messages the firm asks for, and keeping its records.
- To keep the service secure, fix problems and meet our legal obligations.
We do not sell personal data, and we do not use a firm’s client data to advertise to anyone.
Where it is stored
Kkosh runs on Google Cloud in Mumbai (asia-south1). Firm data, documents and backups are stored there, encrypted in transit and at rest.
The AI
Kkosh uses an AI model on Google Cloud in Mumbai only to understand what people type in other languages and to translate replies. Before anything is sent, amounts, GSTINs, PANs, phone numbers and email addresses are replaced with placeholders; files and the figures Kkosh calculates are never sent. A firm can also mask client and staff names, or turn the AI off. If a partner turns on reading scanned bills, the image or PDF of each purchase bill a firm attaches on the Bills page is sent to the same AI in Mumbai to be read, with the reading instructions and nothing else; a person checks every bill before it is used. Partners can see a record of what was sent, which is kept for 90 days.
Who else handles it
- Google Cloud hosts the service and the AI model.
- Meta (WhatsApp Business Platform) carries WhatsApp messages between a firm and its clients when the firm connects its number.
We share data with authorities only when the law requires it.
How long we keep it
A firm’s records are kept while it uses Kkosh and for as long as it needs them for its own record-keeping obligations; when a firm leaves, we return or delete its data as agreed with it. Demo requests are kept for up to two years unless you ask us to delete them sooner.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can ask to see, correct or delete the personal data we hold about you, and withdraw consent you have given. Write to us at the address below. If your data was entered by a CA firm, we will pass your request to that firm.
Contact and grievances
Kkosh, Mumbai, India · bala@mykkosh.in · +91 87794 83370
We will update this policy as Kkosh changes, and show the date of the latest version above.