How Khata1 Protects Your Business Records & Customer Data
We treat the security of your ledger entries, customer contacts, and transaction histories with the utmost technical rigor. Below is an honest, transparent breakdown of the technical controls and compliance policies implemented across the Khata1 platform.
Certified Non-Lending Financial Declaration
Khata1 is an independent digital bookkeeping, ledger, and business management application designed solely for record-keeping and billing convenience. Khata1 is not a bank, non-banking financial company (NBFC), lending institution, or financial credit intermediary. Khata1 does not disburse loans, offer credit facilities, or collect financial interest.
Digital Personal Data Protection (DPDP) Act 2023
In accordance with Indian data protection legislation:
- Purpose Limitation: We collect customer phone numbers and transaction notes solely to display them on your ledger and dispatch WhatsApp reminders upon your command.
- No Third-Party Data Monetization: We never sell, rent, or trade merchant customer lists or transaction records to marketing agencies, brokers, or third parties.
- Right to Erasure & Account Deletion: You have the absolute right to purge your entire business account and customer records via our Account Deletion portal.
256-Bit TLS Encryption & Sandboxing
All data in transit between your mobile app and our servers is encrypted using Transport Layer Security (TLS 1.3) with modern cryptographic cipher suites. On your Android phone, local SQLite database files are sandboxed by the Android operating system, preventing access by other installed applications.
Indian Data Residency (AWS Mumbai ap-south-1)
All production databases, cloud backups, and API services are physically deployed in the Amazon Web Services (AWS) Asia Pacific (Mumbai) region. Your business data remains firmly under Indian sovereign data jurisdiction.