Privacy Policy
Last updated and effective as of April 15, 2026
This Privacy Policy describes how Kosha ("we", "us", or "our") collects, uses, and discloses your information when you use our services, accessible via https://kosha.cloudkinshuk.in.
We are committed to maintaining the highest standards of data privacy and security. By accessing our platform, you agree to the collection and use of information in accordance with this policy.
1Information We Collect
We collect information to provide better services to our users. The data we collect depends on how you interact with our platform and the features you use.
1.1 Account & Profile Information
- ◆Email addresses and authentication identifiers provided during registration.
- ◆Display names, profile pictures, and preferences.
- ◆Unique User IDs generated by our authentication providers.
1.2 Infrastructure & Storage Data
- ◆Files, documents, and assets you voluntarily upload to our secure AWS S3 buckets.
- ◆Extracted metadata associated with your files (e.g., file size, MIME type, upload timestamps).
- ◆Storage allocation and usage metrics associated with your workspace.
1.3 Telemetry & Usage Data
- ◆System logs including IP addresses, browser types, and request timestamps.
- ◆Interaction data detailing how you navigate and utilize the platform's features.
- ◆API request metrics to monitor rate limits and ensure service stability.
2How We Use Your Data
The information we collect is strictly utilized to operate, maintain, and improve the Kosha ecosystem. Specific use cases include:
- ◆Authenticating users and safeguarding against unauthorized access or fraudulent activity.
- ◆Provisioning and maintaining your cloud storage resources and database records.
- ◆Enforcing service quotas, rate limits, and terms of service.
- ◆Delivering critical administrative notices, security alerts, and support responses.
- ◆Complying with applicable legal regulations and statutory obligations.
3Data Security & Storage
We implement enterprise-grade security measures to protect your personal information and uploaded assets from unauthorized access, alteration, or destruction.
- ◆All data in transit is encrypted using TLS 1.3.
- ◆Data at rest is secured via AES-256 encryption within AWS S3.
- ◆Database access is strictly governed by role-based access control (RBAC).
- ◆User sessions are managed securely via cryptographic tokens.
Security Disclaimer: While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your credentials.
4Third-Party Subprocessors
We partner with specialized service providers to deliver our core infrastructure. These third parties are bound by strict data processing agreements.
| Infrastructure Provider | Core Purpose | Data Shared / Processed |
|---|---|---|
| Clerk | Identity & Authentication | Email, User ID, Profile metadata |
| AWS S3 | Cloud Object Storage | Raw uploaded files, Storage metrics |
| Neon | Serverless Database | Application state, File metadata |
5Your Data Rights
Depending on your jurisdiction, you may have specific rights regarding your personal data. We provide all users with the ability to:
- ◆Access and export a copy of the personal data we hold about you.
- ◆Request corrections to inaccurate or incomplete information.
- ◆Delete your account and all associated data permanently from our active servers.
- ◆Opt-out of non-essential telemetry and marketing communications.
6Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please contact our Data Protection Office:
Kosha Privacy Team
kinshuk25jan04@gmail.com