Data & Privacy Policy
Kaam & Khata is designed to operate sensitive business workflows. This page summarizes the main data categories and handling principles for the platform.
Privacy Contact
Privacy and data access requests: privacy@b2bm.net. Security disclosures that may affect customer data should go to security@b2bm.net.
Business Data
Kaam & Khata processes company, accounting, inventory, HR, payroll, document, compliance and filing data to provide the platform.
People Data
Employee records, attendance, leave, payroll, bank details, statutory identifiers, documents, expenses and assets are processed for HR, payroll, compliance and accounting workflows.
Government Portal Data
Where authorized, Ventra and related connectors may process portal sessions, notices, filing statuses, acknowledgements, deadlines and related compliance records.
AI and OCR
AI and OCR features process documents, notices, invoices and business data to classify records, summarize content, detect risks and produce drafts. Customers should review AI outputs before relying on them.
Storage and Retention
Storage is governed by plan credits and any purchased storage packs. Primary operational records are retained for the active customer relationship and any statutory retention period. Backups, audit logs and connector traces may be retained longer where required for security, accounting, tax, dispute handling or legal compliance.
Security
Credentials, tokens, documents and sensitive records should be stored using encrypted systems and tenant-scoped access controls. Kaam & Khata uses encryption in transit over TLS and encrypted storage for sensitive platform records and provider credentials. Customers must keep portal credentials and user access current.
Subprocessors
The platform may rely on third-party subprocessors for cloud hosting, storage, email delivery, observability, payment processing, AI/OCR and messaging. The active processor list is maintained by Kaam & Khata and may include infrastructure and communications vendors necessary to operate the service.
Data Rights and DSAR
Data subjects may request access, correction or deletion review for personal data processed through Kaam & Khata, subject to statutory retention and business record obligations. Requests should be sent to the privacy contact below.