Guru Brothers Ltd ("we", "us", "our") operates KK WiFi Tickets. This Privacy Policy describes how we collect, use, and share information when you use our Service.
Account information (name, email, phone, role, business name, country); Usage data (sales, expenses, vouchers, clients, subscriptions you create); Technical data (IP address, browser/device type, log data); and Communications (support messages, feedback you send).
We use data to operate the Service, authenticate users, process sales, send transactional emails, troubleshoot issues, detect fraud, and improve the product. We do not sell personal data to third parties.
We share data only with: (a) service providers strictly needed to operate the platform (hosting, email, SMS); (b) authorities when legally required; or (c) a successor entity in a merger or acquisition. All providers are bound by confidentiality and data processing agreements.
We use essential cookies and local storage to keep you signed in, remember preferences (dark mode, active branch), and protect against abuse. We do not use third-party advertising cookies. You can disable cookies in your browser, but some features may not work.
If you are in the European Economic Area, you have the right to: access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. You can exercise these rights by contacting support@gurubrothersltd.com. Tenant administrators can also export their data directly from Settings > Data & Privacy.
We retain account data for as long as your account is active. After termination, data is kept for up to 90 days to allow recovery, then permanently deleted. Audit logs may be retained longer for compliance purposes.
We encrypt data in transit (TLS) and at rest where sensitive (e.g., voucher passwords). We use bcrypt for password hashing, enforce row-level tenant isolation, and follow the OWASP Top 10 guidelines. No system is 100% secure, and we cannot guarantee absolute security.
Your data may be processed in countries other than your own. We rely on Standard Contractual Clauses or adequacy decisions to ensure equivalent protection.
The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this Policy from time to time. Material changes will be notified via email or in-app notice. The "Last updated" date at the top reflects the most recent revision.
For questions about this Policy or to submit a data subject request, email support@gurubrothersltd.com.