Privacy Policy

Hum kaun hain

Karobar Software (61-B, Faisal Town, Lahore, Pakistan) Karobar operate karta hai — social sellers ke liye ek shared inbox aur CRM.

Hum aap ke Karobar account aur us personal data ke liye data controller hain jo humein service chalane ke liye chahiye hota hai (billing, login, support). Jab aap apne customers ko message karne ke liye Karobar use karte hain, to aap un ke data ke controller hain. Hum wo data sirf aap ki instructions par process karte hain, taake aap ko Service provide kar sakein.

Yeh kis cheez ko cover karta hai

Yeh policy Karobar.io website, Karobar iOS aur Android apps, aur app.karobar.io par web CRM ko cover karti hai.

Hum kya collect karte hain

Hum kya collect karte hain, yeh is baat par depend karta hai ke aap Karobar kaise use karte hain.

• Account details jo aap provide karte hain: name, email address, phone number aur password.
• Business data jo aap workspace mein banate hain: contacts, leads, conversations, orders, bookings, products aur team members.
• Un channels se data jo aap connect karte hain: messages, comments, profile names aur avatars, aur WhatsApp, Instagram, TikTok, Facebook Pages, YouTube aur Google Business Profile se advertising ya engagement metrics.
• Service chalane ke liye zaroori technical data: device push tokens, session identifiers, request ke waqt IP address, aur error logs.
• Jab aap subscribe karte hain to hamare payment partners se payment metadata — billing name, email aur transaction references. Card numbers payment partner ke apne checkout par enter kiye jate hain aur Karobar par kabhi store nahi hote.
• Product ke istemal ka data: web CRM aur apps mein aap kaun si screens kholte hain aur kaun se features istemal karte hain, app ka version aur device ki qisam, aur yeh baat ke app khuli hone ke dauran screenshot ya screen recording ki gayi. Hum sirf screen ka naam record karte hain, tasveer kabhi nahi.
• Taqreebi maqam: aap ke istemal kiye gaye device ke IP address se maloom kiya gaya sheher aur mulk, taake hum dekh saken hamare customers kahan hain. Hum GPS istemal nahi karte, aap ke device se us ka maqam nahi maangte, aur is record ke saath IP address mehfooz nahi karte.

Hamari mobile apps

iOS aur Android apps wohi data collect karti hain jo web CRM karta hai. Is ke ilawa yeh phone ke yeh features sirf tab use karti hain jab aap inhein use karein: wo contacts jo aap apne phone se WhatsApp phonebook mein add karne ke liye chunte hain, aap ki location jab aap business address bharne ke liye Use my location par tap karte hain, aur camera aur microphone un photos aur voice notes ke liye jo aap chat mein bhejte hain.

Apps mein khareedi gayi subscriptions Apple (App Store) ya Google (Google Play) bechte hain aur wohi bill karte hain. Wo hamein purchase ki wohi tafseelat bhejte hain jo aap ka plan activate karne ke liye zaroori hain; hum aap ka card kabhi nahi dekhte. Aap yeh subscriptions apne Apple ya Google account se manage ya cancel karte hain.

iPhone par Facebook ya Instagram connect karne ke liye Meta ka Facebook Login use hota hai. Apps push notifications ke liye Firebase use karti hain.

Google user data

Agar aap Karobar se Google account connect karte hain, to hum Google user data ko sirf is section mein bataye gaye tareeqay se access, use, store aur share karte hain, aur woh bhi tabhi jab aap Google ki consent screen complete kar lete hain.

Jab aap connect karte hain, to Google aap ka name, email address aur profile photo share kar sakta hai taake hum us Google account ko identify kar sakein jisay aap ne authorise kiya hai (userinfo).

Google Business Profile: hum aap ke manage kiye gaye locations, un ke reviews, aur review replies ko access karte hain. Hum isay sirf Karobar mein Google reviews dikhane aur product se aap ke bheje gaye replies ko post ya delete karne ke liye use karte hain.

YouTube: Karobar YouTube API Services use karta hai. Hum aap ke connect kiye gaye YouTube channels ki channel identity, videos, comments aur analytics ko access karte hain. Hum isay sirf Karobar ke andar YouTube inbox, comments, publishing aur insights provide karne ke liye use karte hain. YouTube features use kar ke aap YouTube's Terms of Service se bhi agree karte hain. Google data ko kaise treat karta hai, yeh Google Privacy Policy mein bataya gaya hai.

Access: hum yeh data Google OAuth ke zariye retrieve karte hain jab aap Connect par click karte hain. Use: hum isay sirf un matching Karobar features ko chalane ke liye use karte hain jo aap ne on kiye hain. Store: hum encrypted access tokens aur connected Google Business Profile aur YouTube data ki aik synced copy aap ke workspace mein store karte hain. Share: hum Google user data ko sell nahi karte. Hum isay advertising ke liye use nahi karte. Hum isay sirf Stripe ya PayFast, Cloudflare R2, Google Cloud (Vertex AI), hamare doosre AI providers, Firebase, aur hamare email provider ke saath tabhi share karte hain jab unhein yeh features chalane ke liye is ki zaroorat ho, ya connected Google service ke saath jab aap koi action lete hain (jaise review reply post karna), ya jahan qanoon ke mutabiq zaroori ho.

Aap Karobar Settings mein Google Business Profile ya YouTube ko disconnect kar sakte hain. Aap kisi bhi waqt apne Google Account permissions se Karobar ka access revoke bhi kar sakte hain. Disconnect ya revoke karne se naya access ruk jata hai; pehle se synced copies ke saath kya hota hai, is ke liye neeche retention ka section dekhein.

Google user data ka Limited Use

Google APIs se milne wali information ka Karobar ka use Google API Services User Data Policy ke mutabiq hai, jis mein Limited Use requirements bhi shamil hain.

Google user data sirf Karobar mein prominent user-facing features ko provide aur improve karne ke liye use kiya jata hai — aaj ke waqt mein, Google Business Profile reviews aur YouTube inbox, comments, publishing aur insights.

Hum Google user data ko third parties ko transfer nahi karte, siwaye un features ko chalane ke liye (aap ki consent ke saath), security aur abuse ki investigation ke liye, qanoon ki compliance ke liye, ya aap ki pehle se li gayi consent ke baad Karobar ke kisi merger ya sale ke hissay ke taur par.

Hum ads serve karne ke liye Google user data use nahi karte, jis mein retargeting ya personalised advertising bhi shamil hai. Hum isay data brokers ko sell nahi karte aur na hi credit-worthiness check karne ke liye use karte hain.

Insaan Google user data ko nahi parhte, siwaye is ke ke aap humein support ke liye kisi makhsoos item ko dekhne ka kahein, security ya abuse ke maslay ki investigation ke liye yeh zaroori ho, qanoon ke mutabiq zaroori ho, ya data ko internal operations ke liye aggregate kiya gaya ho.

Hum isay kaise istemal karte hain

Product chalane ke liye: messages deliver aur sync karna, jahan aap kahein wahan AI se replies draft karna, orders aur contacts manage karna, aur aap ki enabled ki gayi notifications bhejna. Aap ko bill karne aur abuse (jaise automated signups aur credential stuffing) ko rokne ke liye. Jab aap humse contact karein to support provide karne ke liye.

Hum aap ka data ya aap ki customer lists sell nahi karte, aur na hi aap ke business data ko third-party AI models ko train karne ke liye use karte hain.

AI features

Jab aap koi AI feature use karte hain, to response generate karne ke liye mutaliqa message ya content hamare AI providers ko bheja jata hai. Aaj kal yeh Google Cloud (Vertex AI aur Gemini) aur hamare doosre technology partners hain. Wo aap ke liye result wapas bhejne ke liye isay process karte hain; unhein apne models ko train karne ke liye isay use karne ki ijazat nahi hai.

Woh Google Cloud processing darasal Karobar ki taraf se us content ko bhejna hai jo pehle se product mein mojood hai — yeh aap ke Google Account ka access nahi hai. AI features optional hain aur sirf tabhi invoke hote hain jab aap unhein use karte hain.

Product ke istemal ka analysis aur session recordings

Hum record karte hain ke Karobar kaise istemal hota hai taake dekh saken log kahan atakte hain aur product behtar bana saken: kholi gayi screens, istemal kiye gaye features, sign-ins, connected channels, aur screenshot ya screen recording ke waqiat. Yeh hamare apne servers par mehfooz hota hai, aap ke account se juda hota hai, zyada se zyada 180 din rakha jata hai aur sirf Karobar ka staff dekh sakta hai. Hum aap ke messages, comments, media, contacts ya customer details ka mawad kabhi record nahi karte.

Web CRM aur apps mein hum session recordings ke liye Microsoft Clarity bhi istemal kar sakte hain: aap ke taps, clicks, scrolling aur screens ke darmiyan aane jane ka replay. Aap ke device ya browser se kuch bhi jane se pehle product ke andar ka text aur tasaveer chhupa di jati hain, aur chats, customers, media aur jo kuch aap type karte hain woh kabhi record nahi hota. Microsoft yeh recordings hamari taraf se service provider ke taur par Microsoft Privacy Statement ke tehat process karta hai.

Agar aap European Economic Area, UK ya Switzerland mein hain to session recording shuru hone se pehle hum aap se poochte hain, aur jab tak aap "Ijazat dein" na chunein yeh band rehti hai. Baqi jagahon par yeh pehle se on hoti hai. Koi bhi ise kisi bhi waqt Settings → Account → Session recordings mein band kar sakta hai.

Hum kis ke saath share karte hain

Sirf wohi providers jo service chalane ke liye zaroori hain, jin mein se har aik aik makhsoos kaam sambhalta hai: payment partners (Pakistan ke liye PayFast jab enabled ho, baqi markets ke liye Stripe), stored media ke liye Cloudflare R2, AI features ke liye Google Cloud (Vertex AI) aur hamare doosre technology partners, push notifications ke liye Firebase, aur transactional email ke liye hamara email provider. Aap jo messaging aur social platforms connect karte hain unhein sirf wohi milta hai jo aap ki taraf se send aur receive karne ke liye zaroori hai. Kuch providers Pakistan se bahar data process kar sakte hain. Jahan qanoon ke mutabiq zaroori ho wahan hum data zahir bhi karte hain.

Jab session recordings on hon to Microsoft Clarity ko upar bayan ki gayi chhupi hui recordings milti hain. Microsoft ko aap ke messages, customers ya media nahi milte.

Cookies

Marketing site aur web CRM cookies aur is tarah ka doosra data store karte hain jo aap ko signed in rakhne, language aur theme yaad rakhne, aur — sirf marketing site par — visits count karne ke liye zaroori hota hai. Details, jis mein unhein block karne ka tareeqa bhi shamil hai, hamari Cookie Notice mein hain.

Hum kitni der rakhte hain

Business data tab tak rakha jata hai jab tak aap ka account active hai. Jab aap account delete karte hain to poora workspace deletion ke liye schedule hota hai aur 14 din ke liye roka jata hai taake aap ka irada badalne par restore ho sake, us ke baad permanently destroy ho jata hai. Kuch records, jaise invoices, tax ya accounting law ke mutabiq zyada der tak rakhe jate hain. Channel history jo aap import karte hain channel settings se pehle purge ho sakti hai.

Agar aap Google Business Profile ya YouTube ko disconnect karte hain, to hum access tokens ko foran revoke kar dete hain. Synced Google aur YouTube data disconnect karne ya Google access revoke hone ke 30 days ke andar delete ya refresh kar diya jata hai.

Product ke istemal ke waqiat 180 din baad delete kar diye jate hain. Microsoft Clarity session recordings 30 din rakhta hai, siwaye un recordings ke jinhein hum rakhne ke liye mark karein, jo zyada se zyada 13 maah rakhi jati hain.

Aap ke huqooq

Aap jahan bhi hain, aap ke paas personal data ko access, correct, export ya delete karne, consent withdraw karne, aur kisi supervisory authority ke paas complaint darj karwane ka right ho sakta hai. Karobar mein aap kisi bhi waqt Settings se, app se, ya hamare account deletion page se kuch bhi install kiye baghair apni account details ko access aur correct kar sakte hain, apna data export kar sakte hain, aur apna account delete kar sakte hain.

Google access withdraw karne ke liye, Settings mein channel ko disconnect karein ya Google Account permissions use karein. Kisi bhi doosre right ko use karne ke liye, ya agar aap ke paas hamare data handle karne ke baare mein koi sawalat hain, to humse support@karobar.io ya 03054410164 par contact karein.

Security

Data transit mein encrypted hai. Passwords hashed hain aur kabhi readable form mein store nahi hote. Connected channels ke access tokens encrypted store hote hain aur jab aap channel disconnect karein ya account delete karein to revoke ho jate hain. Sessions server-side revoke ho sakte hain, aur password badalne se har existing session khatam ho jata hai.

International transfers

Kuch providers Pakistan se bahar data process karte hain, jis mein United States aur European Union shamil hain — un mein Stripe, Cloudflare, Google Cloud aur Firebase shamil hain. Hum unhein sirf Service chalane ke liye use karte hain.

Microsoft Clarity ki session recordings America mein process ho sakti hain.

Children

Karobar aik business product hai aur yeh 18 saal se kam umr ke logon ke liye nahi hai. Hum jaan boojh kar bacchon se data collect nahi karte.

Is policy mein tabdeeliyaan

Hum is page par updates post karte hain. Agar hum Google user data ko use karne ka tareeqa badalte hain, to hum us data ko naye tareeqay se use karne se pehle is policy ko update karenge.

Contact

Is policy ke baare mein sawalat, ya aap ke data ke baare mein koi request support@karobar.io, 03054410164 par bheji ja sakti hai, ya 61-B, Faisal Town, Lahore, Pakistan par post ki ja sakti hai.