Privacy Policy

In this policy, “Kompora”, “we”, “us”, and “our” refer to the operator of the Kompora platform and website. For the purposes of the DPDP Act, we act as the Data Fiduciary for the personal data described below, and you are the Data Principal.

Kompora is currently pre-launch. Today the website mainly collects waitlist sign-ups and serves a public knowledge base. As we open the product, this policy will be updated to reflect the data processed inside founder workspaces.

We collect only what we need:

• Waitlist data. The email you send us when you ask to join the waitlist, including anything you choose to write in that message. It reaches us as an ordinary email; we do not store it in a separate signup database.
• Account data (once the product opens). Your name, email, and authentication details, plus the company details, people, documents, and filings you choose to add to your workspace.
• Usage and technical data. Basic logs such as IP address, browser type, and pages visited, used to keep the service secure and working.

We do not knowingly collect data from anyone under 18 without verifiable consent from a parent or lawful guardian, as required by the DPDP Act.

• To add you to the waitlist and notify you when access opens.
• To provide, personalize, and improve the Kompora service.
• To send service and compliance-related communications you ask for, such as deadline reminders.
• To keep the platform secure and to meet legal obligations.

We process your personal data on the basis of your consent, and for certain legitimate uses permitted under the DPDP Act. You can withdraw consent at any time (see your rights below).

We do not sell your personal data. We share it only with Data Processors who help us run the service, under appropriate safeguards. These currently include:

• Our database and authentication provider (Supabase).
• Our document storage provider (Cloudflare R2).
• Our email delivery provider for transactional messages.
• Our hosting and infrastructure providers.

When you choose to involve a professional (such as your CA or CS), or invite a teammate into your workspace, the relevant data is shared with them so they can do their work for you.

We aim to store data with providers and regions appropriate to Indian users, and to transfer data outside India only where permitted under the DPDP Act and with suitable safeguards. We keep personal data for as long as needed for the purposes above, or as required by law, and then delete or anonymize it. You can ask us to delete your waitlist email at any time.

We use reasonable technical and organizational measures to protect your data, including encryption in transit, access controls, row-level security on our database, and signed, private URLs for documents. No system is perfectly secure, but we work to reduce risk and to respond quickly if something goes wrong.

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you.
• Request correction, completion, or updating of your data.
• Request erasure of your data where it is no longer needed.
• Withdraw consent you previously gave.
• Nominate another person to exercise your rights if you cannot.
• Raise a grievance and, if unresolved, approach the Data Protection Board of India.

To exercise any of these, email us at privacy@kompora.com.

We use only the cookies and similar technologies needed to run the site securely and to understand basic, aggregate usage. We do not use them for cross-site advertising.

We will update this policy as Kompora evolves, especially as we move from waitlist to full product. When we make material changes, we will update the date above and, where appropriate, notify you.

For any privacy question, or to reach our grievance contact, email privacy@kompora.com. We will respond within the timelines required by the DPDP Act.