Privacy Policy

1.1This policy covers the Khata mobile app, the web dashboard, and the lskhata.com website, all operated by Lacspace Corporation Pvt. Ltd.

1.2It explains what we collect, why, who we share it with, and what you can do about it. It forms part of the Terms of Use.

2.1Information you give us directly: your name, email address, phone number and business details when you create an account or contact support.

2.2Business records you create in the app: customers, suppliers, products, stock levels, orders, expenses, staff records and ledger entries.

2.3Technical data collected automatically: IP address, device and operating system information, and app usage and error data, used to keep the service working and to diagnose faults.

2.4Where you enable them, device permissions such as camera access for barcode scanning. These are used only for the feature you enabled them for, and you can withdraw them in your device settings at any time.

2.5We do not collect or store payment card details. Khata has no checkout: neither the app nor this website asks for payment information, and no payment is processed through them. Any commercial matter is handled directly with our team.

3.1To provide and operate the Service, including storing your records, syncing them between your devices, and producing the reports and documents you ask for.

3.2To communicate with you about the Service, respond to support requests, and send notifications you have enabled.

3.3To keep the Service secure, prevent abuse, and enforce our Terms.

3.4To diagnose faults and improve the product.

3.5We do not use your business records to target advertising. Khata contains no advertising and no ad network.

4.1We process your data to perform our agreement with you, to meet legal obligations, and for the legitimate interest of keeping the Service secure and working.

4.2We keep your records for as long as your account is active. If you ask us to delete your account, we delete or irreversibly anonymise your data except where we are required to retain something by law.

4.3Backups are retained on a rolling basis and are overwritten in the ordinary course. Data removed from the live service may persist in a backup for a limited period before it is cycled out.

5.1We use the following service providers. Each processes data only to provide its service to us, under contract.

• MongoDB Atlas — hosts the database holding your business records.
• Amazon Web Services (EC2) — runs the application servers.
• Amazon Web Services (S3) — stores files and images you upload.
• Vercel — serves the lskhata.com website.
• Google (Gemini) — powers the in-app AI assistant. Content you send to the assistant is processed by Google to generate a reply.
• Email delivery (SMTP) — sends account and notification email.
• Expo — delivers push notifications to your device where you have enabled them.

5.2We do not sell or rent your personal data to anyone.

5.3We may disclose information where required by law, or to protect the rights, property or safety of Lacspace, our users, or the public.

6.1The lskhata.com marketing website runs no analytics and sets no advertising or tracking cookies. There is no Google Analytics, no advertising pixel, and no third-party session recording.

6.2The only cookie the website may set is a functional one remembering whether a navigation panel is expanded. It carries no identifier and is not used to track you.

6.3The app and web dashboard store an authentication token so you stay signed in, and cache your records on the device so the app works without a connection.

7.1Account passwords are stored as salted hashes, never in plain text. Sessions use signed tokens.

7.2Traffic between your device and our servers is encrypted in transit. Our API applies standard hardening, request rate limiting and a restricted origin allowlist.

7.3No system is perfectly secure. We cannot guarantee absolute security, and you are responsible for keeping your own credentials and staff logins safe.

7.4If you believe you have found a security issue, report it to security@lacspace.com. We will not pursue action against good-faith research that respects user privacy and does not degrade the service.

8.1You can access and correct your information from your account settings.

8.2You can request an export of your data, or its deletion, by contacting privacy@lacspace.com. We will respond within a reasonable period.

8.3You can opt out of promotional messages at any time. Service and security messages are not promotional and will continue.

8.4You can manage device permissions, such as camera access, in your device settings.

9.1Khata is a business tool and is not directed at children. We do not knowingly collect data from anyone under the age of majority in their jurisdiction. If you believe we have, contact privacy@lacspace.com and we will delete it.

10.1Khata serves businesses in India and Nepal. The providers named in section 5 may process data in other countries. Where that happens, we rely on the contractual protections those providers offer.

11.1We may update this policy. Material changes are published in the Legal Centre with a new version number, an effective date, and a record of what changed.

12.1Privacy questions and data requests: privacy@lacspace.com. Security reports: security@lacspace.com.