Privacy Policy

Effective Date: January 1, 2024 | Last Updated: 7/5/2026

1. Introduction and Scope

Khoj Digital ("we," "our," or "us") is committed to protecting your privacy and ensuring that your personal data is handled in a safe, transparent, and legally compliant manner. This Privacy Policy outlines our practices regarding the collection, use, processing, and disclosure of your information when you visit our website (khojdigital.com), engage with our marketing services, or utilize our proprietary software applications.

This policy is designed to comply with applicable data protection regulations, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (India), the Digital Personal Data Protection Act, 2023 (DPDP Act, India), and where applicable, the General Data Protection Regulation (GDPR) for our international clients. By accessing our services, you acknowledge that you have read, understood, and agree to the data practices described in this document.

2. Information We Collect

We collect information in three primary ways: information you provide to us directly, information we collect automatically when you use our services, and information we obtain from third parties.

2.1. Information You Provide Directly

• Contact Information: When you fill out a form to request an SEO audit, download a whitepaper, or contact our sales team, we collect your name, business email address, phone number, company name, and job title.
• Project Specifications: Information regarding your current digital infrastructure, marketing budgets, login credentials for CMS platforms (provided securely), and business goals necessary for us to fulfill our service obligations.
• Financial Information: Billing details, tax identification numbers (GSTIN), and payment preferences required to process invoices and manage our financial relationship.

2.2. Information Collected Automatically

• Device and Log Data: We automatically log information about your device and how you interact with our website. This includes your IP address, browser type, operating system, referring URLs, pages viewed, and the duration of your visit.
• Cookies and Tracking Technologies: We utilize cookies, web beacons, pixels, and similar tracking technologies to analyze trends, administer the website, track users' movements around the site, and gather demographic information. This is crucial for our Conversion Rate Optimization (CRO) and retargeting efforts.
• Interaction Data: Through tools like Microsoft Clarity, we may record session data such as mouse movements, scrolling behavior, and clicks to understand how users navigate our interface and to identify UX bottlenecks.

2.3. Information from Third Parties

We may receive information about you from third-party sources, such as lead generation partners, publicly available databases (like LinkedIn), or integrated platforms (e.g., if you interact with our Meta Ads or Google Ads). This helps us update, expand, and analyze our records and identify new prospects.

3. How We Use Your Information

We process your personal data only when we have a valid legal basis to do so. The primary purposes for processing your data include:

• Service Delivery: To execute the contracts we enter into with you, including building web applications, running ad campaigns, and performing SEO audits.
• Communication: To respond to your inquiries, send administrative information (such as changes to our terms or policies), and provide customer support.
• Marketing and Promotions: To send you newsletters, industry insights, and promotional materials about our services, provided you have given your explicit consent or where we have a legitimate interest to do so. You can opt-out of these communications at any time.
• Analytics and Improvement: To analyze how our website and services are used, allowing us to debug errors, improve performance, and develop new features or service offerings.
• Security and Fraud Prevention: To protect our platforms against unauthorized access, malicious activities, and to comply with our legal obligations.

4. Cookies and Tracking Technologies

Our website utilizes various types of cookies to enhance your experience. Essential cookies are necessary for the website to function properly (e.g., maintaining your session). Analytical cookies (such as Google Analytics) help us understand how visitors interact with the site. Marketing cookies (such as the Meta Pixel) are used to track visitors across websites to display relevant advertisements.

Upon your first visit to our site, you will be presented with a cookie consent banner allowing you to manage your preferences. You can also configure your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some portions of our website may not function optimally.

5. Data Sharing and Third-Party Processors

We do not sell, rent, or lease your personal data to third parties. We only share your data with trusted third-party service providers (sub-processors) who assist us in operating our business. These include:

• Cloud Infrastructure: Platforms like Vercel, AWS, and Google Cloud where our applications and databases are hosted.
• Analytics and Marketing: Google Analytics, Meta Ads, LinkedIn Ads, and CRM platforms used to track performance and manage client relationships.
• Payment Processors: Third-party gateways used to process transactions securely. We do not store your raw credit card information on our servers.

All our third-party processors are bound by strict data processing agreements and are required to maintain appropriate security measures to protect your data.

6. Data Security and Retention

Khoj Digital employs enterprise-grade security protocols to protect your data from unauthorized access, alteration, disclosure, or destruction. This includes end-to-end SSL encryption for all data in transit, encrypted databases (AES-256) for data at rest, strict role-based access control (RBAC) for our employees, and regular vulnerability assessments.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (such as for tax, legal, or accounting purposes). Once the data is no longer necessary, it is securely deleted or anonymized.

7. Your Privacy Rights

Depending on your jurisdiction, you have specific rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data under certain conditions.
• Right to Restrict Processing: You can request that we temporarily halt the processing of your data.
• Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to the processing of your data for direct marketing purposes.

To exercise any of these rights, please contact our Data Protection Officer at legal@khojdigital.com. We will respond to your request within the timeframe stipulated by applicable law (typically 30 days).

8. International Data Transfers

While Khoj Digital is headquartered in India, our digital infrastructure utilizes global cloud providers. Your data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country. However, we ensure that adequate safeguards (such as Standard Contractual Clauses) are in place to protect your data during international transfers.

9. Children's Privacy

Our services are strictly B2B (Business-to-Business) and are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take immediate steps to delete such information from our servers.

10. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technological advancements, or legal requirements. When we make material changes, we will revise the "Last Updated" date at the top of this page and may notify you via email or a prominent notice on our website. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Khoj Digital
Bihar, India
Email: legal@khojdigital.com
Phone: +91 8178848310 / +91 6295 470 005