Privacy Policy

Last updated: July 2026

Future Simple Solutions ("we", "us", "our", "Data Fiduciary") operates Klean Profit AI at kleanprofit.com (the "Service"). This policy explains what personal data we collect as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (India), why we collect it, and your rights as a Data Principal.

1. Data Fiduciary

Future Simple Solutions is the Data Fiduciary for personal data processed through the Service, as defined under the Digital Personal Data Protection Act, 2023 (India). Contact: [email protected]

2. Data we collect

• Account data: name, email address, organisation name, hashed password.
• Billing data: handled entirely by Cashfree Payments (our payment gateway). We store only a subscription status and plan identifier — no card or bank details reach our servers.
• Business data you import: order records, product SKUs, purchase costs, and related business data you upload or sync via connectors. This data belongs to your organisation.
• Usage data: pages visited, features used, timestamps of sync runs — used to improve the product and diagnose issues.
• Analytics data: Google Analytics may collect page views, device and browser information, approximate location, referrer, and interaction events so we can understand site usage and improve the Service.
• Session data: one httpOnly session cookie is set on login. See the cookies section of our Terms of Use.

3. Legal basis and purpose

We process personal data only for the purposes for which consent was given or as permitted under Section 7 of the Digital Personal Data Protection Act, 2023.

4. Data retention

We retain your personal data for as long as your account is active. After account deletion:

• Account and business data is permanently deleted within 90 days.
• Backup copies are purged within a further 30 days.
• Anonymised aggregate statistics (no personal identifiers) may be retained indefinitely.

We will not retain personal data beyond the period necessary for the purpose for which it was collected, as required by the DPDP Act 2023.

5. Third parties

• Cashfree Payments — payment gateway. Cashfree's privacy policy governs payment data.
• Google Analytics — website and product usage analytics. Google may process analytics data according to Google's privacy policies.
• Cloud hosting provider — servers and databases run in Indian or certified data centres.
• Connector platforms (OpenCart, Zoho Books/Inventory, Google Merchant) — data is fetched from these platforms on your instruction using credentials you provide.

We do not sell personal data. We do not use your business data for advertising.

6. Cross-border data transfers

We store and process data primarily in India. Where data is transferred outside India (for example, through cloud infrastructure or connector platforms), we ensure such transfers comply with the DPDP Act 2023 and are not made to countries notified as restricted by the Government of India. Our infrastructure providers process data in accordance with applicable data protection standards.

7. Your rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access — obtain a summary of personal data we hold about you and how it is being processed.
• Correction — correct or update inaccurate or incomplete personal data.
• Erasure — request deletion of your personal data where it is no longer necessary for the purpose it was collected.
• Withdraw consent — at any time (this does not affect processing carried out before withdrawal).
• Nomination — nominate another individual to exercise your data rights in the event of your death or incapacity.
• Grievance redressal — lodge a complaint with our Grievance Officer (see section 11) or escalate to the Data Protection Board of India (DPBI).

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. Security

Passwords are stored as bcrypt hashes. Session tokens are transmitted only via httpOnly cookies over HTTPS (TLS 1.2+). Business data at rest is encrypted. We apply rate limiting and account lockout to prevent brute-force attacks. We follow responsible disclosure practices for security vulnerabilities.

9. Children's data

The Service is intended for business users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] for immediate deletion.

10. Changes to this policy

We will notify active users by email of material changes at least 14 days before they take effect. The "last updated" date at the top of this page reflects the most recent revision.

11. Contact & Grievance Officer

For general privacy questions: [email protected]

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, privacy grievances may be directed to our Grievance Officer:

Grievance Officer: Future Simple Solutions
Email: [email protected]
Address: Future Simple Solutions, 5th Floor, No.71, Brigade Plaza, Gubbi Veeranna Road, SC Road, Gandhi Nagar, Bengaluru – 560009

We will acknowledge your grievance within 24 hours and resolve it within 15 days, as required by applicable Indian law. If unresolved, you may escalate to the Data Protection Board of India (DPBI).