Legal

Privacy Policy

Last updated: [DATE]

1. Introduction

This Privacy Policy explains how Kaikor Enterprises ("we", "us", or "our") collects, uses, and handles information when you visit kaikorenterprises.com (the "Website"), submit a contact enquiry, or use the on-site chat assistant.

The public name used on this Website is Kaikor Enterprises. The registered legal entity that operates the Website is [COMPANY LEGAL NAME]. That legal name should be confirmed before this policy is treated as final.

By using the Website, you acknowledge the practices described here. This page describes current technical practices as implemented in the Website. It is not a claim that those practices satisfy any particular privacy law.

2. Information We Collect

We collect information you choose to send us, limited technical information related to those submissions, chat messages if you use the assistant, and usage information through analytics services described below.

Information you provide

You may provide name, email address, subject, message text, and, on the contact page, the product or solution you are enquiring about. If you use the chat assistant, you provide the text of your messages.

Information collected automatically

When you submit a contact form, the server records your IP address (from the request's forwarding headers, where present) and browser user-agent string. Analytics services (including Google Analytics, Vercel Analytics, and Microsoft Clarity) may collect usage and device-related information as described in Section 5 and Section 12. The Website's application code does not set first-party cookies; third-party and hosting services may still set cookies.

3. Information Collected Through Contact Forms

The Website has two contact forms: a popup form and the enquiry form on the Contact page. Both send a request to our /api/contact endpoint.

Fields you enter, and that we store:

  • Name (required) — so we know who to reply to.
  • Email (required) — so we can respond to your enquiry.
  • Subject (required) — to identify the topic of your message.
  • Message (required) — the content of your enquiry.
  • Application / product or solution (required on the Contact page only) — this value is not stored as a separate database field. It is prepended to the subject (for example, [Kaikor Energy] …) and included at the start of the message body.

Additional fields stored with each submission:

  • IP address — taken from the request (including x-forwarded-for when present).
  • User agent — the browser or device identifier sent with the request.
  • Status — new submissions are stored with status pending.

Submissions are stored in a Supabase database table named contact_forms. They are written using a server-side administrative database client. We do not send contact-form submissions through a separate transactional email provider in the current application code.

Successful submissions return a confirmation that includes a record identifier, the name and email you submitted, and a timestamp. Form validation errors return validation messages; other failures return a generic error.

4. Chat Assistant

The Website includes an optional chat assistant. If you send a message, the text is posted to /api/chat and processed by Google Gemini so a reply can be generated.

Conversation history (your messages and the assistant's replies) is stored in your browser using localStorage under the key kaikor-chat-history. That history stays on your device unless you clear site data. The chat API, as implemented, does not write messages to our contact-form database. Google processes the message content needed to generate a reply, subject to Google's own terms and privacy practices.

5. Cookies and Similar Technologies

Cookies are small files that a site or a third-party service may store on your device. Similar technologies include scripts and local browser storage.

The Website's application code does not set first-party cookies (it does not use document.cookie or issue Set-Cookie headers). Analytics and hosting services described in this policy — including Google Analytics, Vercel Analytics, and Microsoft Clarity — may set their own cookies or use similar technologies. Microsoft Clarity may use cookies and similar technologies to collect usage data such as pages visited, clicks, scrolls, device and browser information, and session recordings or heatmaps. We do not list cookie names or expiry periods here because those are controlled by those services, not by our application code, and can change without a code change on this Website.

The Website also uses browser localStorage for chat history, as described above. We do not use sessionStorage in the current application code.

This Website does not currently display a cookie consent banner. Whether consent is required depends on where you are located and applicable law. That legal assessment has not been completed as part of this policy.

6. How We Use Information

We use information collected through the Website to:

  • Receive, review, and respond to contact enquiries
  • Understand which product or solution an enquiry relates to
  • Operate the chat assistant and return a reply when you use it
  • Measure how the Website is used, including page views, selected interaction events (for example, contact-form submissions), and session behaviour such as clicks, scrolls, heatmaps, and session recordings, through Google Analytics, Vercel Analytics, and Microsoft Clarity
  • Host, operate, and maintain the Website
  • Support basic operational context for contact submissions (IP address and user agent)

We do not use the information described in this policy to sell advertising based on a profile of you, and we do not use it for purposes unrelated to operating the Website or handling communications you send us, except where we are required to do so by law.

7. How We Store and Protect Information

Contact-form submissions are stored in Supabase. Chat history on your device is stored in localStorage. Chat messages sent to the assistant are processed by Google. The Website is hosted on Vercel. Usage data collected by Google Analytics, Vercel Analytics, and Microsoft Clarity is processed and stored by those providers.

Access to stored contact submissions depends on who has credentials for the Supabase project and related hosting accounts. Those access arrangements are not fully documented in the public Website code.

We take reasonable operational steps to limit access to server-side credentials. No method of transmission or storage over the internet is completely secure, and this policy does not claim a specific encryption standard, certification, or security audit.

8. Data Sharing and Disclosure

We do not sell your personal information.

We do not share your personal information with third parties for their own marketing. Information is processed by service providers where needed to operate the Website or a feature you use:

  • Supabase — stores contact-form submissions.
  • Google (Analytics) — receives usage data through Google Analytics 4 (gtag), including page views and selected events.
  • Microsoft (Clarity) — receives usage data through Microsoft Clarity, a third-party analytics and session-replay service. Clarity may collect pages visited, clicks, scrolls, device and browser information, and session recordings or heatmaps, and may use cookies and similar technologies.
  • Google (Gemini) — processes chat messages so the assistant can generate replies.
  • Vercel — hosts the Website and provides Vercel Analytics.

Those providers process information according to their own terms and privacy policies. We may also disclose information if required by law, legal process, or to protect the rights, security, or property of our users, our business, or others.

9. Data Retention

The Website code does not define a deletion schedule or retention period for contact-form records. Those records remain in the database until they are removed through operational processes that are not specified in the application.

Chat history in localStorage remains until you clear it or clear site data in your browser. We do not control how long Google, Microsoft (Clarity), Vercel, or Supabase retain logs or analytics data on their systems.

Specific retention periods: [CONFIRM RETENTION PERIOD OR PRACTICE].

10. Your Privacy Rights

Depending on where you live and the laws that apply to you, you may have rights relating to your personal information. These may include the ability to ask for access, correction, deletion, or information about how your personal information is handled.

To make a privacy-related request, contact us at [PRIVACY CONTACT EMAIL]. We may need to verify your identity before completing certain requests. This policy does not claim that any specific statutory rights (including under GDPR, CCPA, or India's DPDP Act) apply or have been assessed.

11. Children's Privacy

The Website is not directed at children and is not intended to collect personal information from children where that is prohibited. If you believe a child has submitted personal information through the Website, contact us at [PRIVACY CONTACT EMAIL].

12. Third-Party Services

The following third-party services are used by the current Website implementation:

  • Google Analytics 4, loaded via the gtag script from googletagmanager.com (not a separate GTM container snippet), with a measurement ID supplied by environment configuration or a built-in fallback. The application records page views on route changes and selected interaction events.
  • Microsoft Clarity, loaded via the official Clarity script from clarity.ms, with a project ID supplied by environment configuration or a built-in fallback. Clarity is a third-party analytics and session-replay service. It may use cookies and similar technologies and may collect usage data such as pages visited, clicks, scrolls, device and browser information, and session recordings or heatmaps.
  • Vercel Analytics, included in the site layout.
  • Google Gemini, used by the chat API to generate assistant replies.
  • Supabase, used to store contact-form submissions.
  • Vercel, used to host and deliver the Website.

You should review the privacy documentation of those providers for details of their processing, cookies, and retention. The Website does not include Meta Pixel, Google Tag Manager container snippets beyond gtag, or other advertising pixels in the current application code.

13. International Processing

Depending on where you are located, information you submit or that is collected through analytics and hosting may be processed in countries other than your own, because our service providers (including Google, Microsoft, Vercel, and Supabase) operate internationally. The precise processing locations are determined by those providers and are not fully specified in the Website code.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Website, our practices, or legal requirements. When we do, we will update the "Last updated" date at the top of this page.

15. Contact Information

If you have questions about this Privacy Policy or our privacy practices, contact:

  • Public site identity: Kaikor Enterprises
  • Registered legal entity: [COMPANY LEGAL NAME]
  • Privacy email: [PRIVACY CONTACT EMAIL]
  • Website: kaikorenterprises.com

A general contact email is published elsewhere on the Website for business enquiries. It is not used as the privacy contact address in this policy until the owner confirms the correct privacy mailbox.