Khirdo — Privacy Policy

Last updated: 5 July 2026

This is a general Privacy Policy template for a SaaS platform operated from Pakistan and made available to customers in Pakistan and internationally. It is provided for general use and does not constitute legal advice. Khirdo Technologies recommends having this Policy reviewed by a licensed lawyer for your specific circumstances before relying on it.

1. Introduction

This Privacy Policy explains how Khirdo Technologies ("Khirdo", "we", "us", "our") collects, uses, shares, and protects information in connection with the Khirdo platform, including manage.khirdo.com and any subdomain of khirdo.com issued to you (the "Service"). It should be read together with our Terms & Conditions.

2. Two Kinds of Information We Handle

It is important to distinguish between two categories of information:

Account & Billing Information — information you give us directly to create and manage your account (e.g. name, email, phone, company name, subdomain, billing details). For this information, Khirdo is the data controller.
Customer Data — the business data you and your users enter into your own tenant once your account is set up (e.g. your customers' records, invoices, financial data, employee data). For this data, you are the data controller and Khirdo acts only as a data processor/host. We store and process this data on your instructions and do not use it for our own purposes, sell it, or share it with third parties except as needed to provide the Service (e.g. backups, infrastructure) or as required by law.

3. Information We Collect

Category	Examples
Identity & contact	Full name, work email, phone number
Business details	Company name, industry, subdomain, country
Account credentials	Password (stored hashed, never in plain text)
Billing information	Subscription plan, number of users, billing cycle, payment/transaction references from our payment gateway partners
Usage data	Log-in activity, feature usage, device/browser information, IP address
Cookies	Session cookies for login/authentication; may include basic analytics cookies
Customer Data	Any business records you enter into your tenant (see Section 2)

4. How We Use Information

To create, provision, and operate your account and tenant site;
To process billing, generate invoices, and manage subscriptions;
To provide support and respond to inquiries;
To send service-related communications (setup status, invoices, security notices) and, where you consent, product updates;
To maintain the security, stability, and performance of the Service;
To comply with legal obligations.

We do not sell your personal information or Customer Data to third parties.

5. How We Share Information

Service providers — payment gateways (e.g. JazzCash, EasyPaisa, or card processors), email/SMS delivery providers, and cloud hosting infrastructure, solely to operate the Service;
Legal & compliance — where required to comply with a legal obligation, court order, or lawful request from a competent authority in Pakistan or another applicable jurisdiction;
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to continued protection under a policy at least as protective as this one;
We do not share Customer Data with third parties for their own marketing purposes.

6. International & Cloud Hosting

The Service may be hosted using cloud infrastructure that stores or processes data on servers located outside Pakistan. By using the Service, you consent to this transfer and processing, which is necessary to provide the Service to you.

7. Data Security

We use reasonable technical and organizational measures to protect information, including access controls, encrypted password storage, and regular backups. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

8. Data Retention

Account information and Customer Data are retained for as long as your account is active. After termination or cancellation, we may retain data for a limited period (e.g. for backups, legal, or tax record-keeping purposes) before it is deleted or irreversibly anonymized, unless a longer retention period is required by law.

9. Your Rights

Subject to applicable law, you may request to:

Access the personal information we hold about you;
Correct inaccurate information;
Request deletion of your account information, subject to legal/contractual retention needs;
Withdraw consent for optional communications (e.g. marketing emails).

Requests can be sent to the contact details in Section 13.

10. Cookies

We use essential cookies required for login and session management, and may use limited analytics cookies to understand how the Service is used and to improve it. You can control cookies through your browser settings; disabling essential cookies may affect your ability to use the Service.

11. Children's Privacy

The Service is intended for business use by individuals who are at least 18 years old or the age of majority in their jurisdiction. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Service or by email. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Governing Law & Contact

This Policy is governed by the laws of the Islamic Republic of Pakistan. For questions, requests, or concerns about this Privacy Policy or your data, contact us at:

Khirdo Technologies
hello@khirdo.com
support@khirdo.com