KaryaFlow1. How we keep sharing to a minimum
- We never sell personal data and never use it for advertising.
- Each company receives only what its job needs. For example, map services get an address or a point on the map, and LocationIQ gets map points with no names attached.
- Technicians' GPS trails and the travel distance on tracking reports are processed on our own routing engine.
- The dashboard has no advertising, analytics or crash-reporting tools.
- Private documents such as invoices, payslips and identity documents are not public. Our apps open them through short-lived signed links. A document you share from KaryaFlow opens for anyone with its link until you turn the link off.
- AI features receive only what they need: the odometer photo, or the question you type.
2. Hosting and storage
The certifications listed here belong to our providers, not to KaryaFlow.
Cloud hosting providers
- What it does for us
- Run our application, database, routing engine and test environment, and store uploaded files and backups.
- What it receives
- All data stored in KaryaFlow. When we refresh our test environment, a copy of our database is restored there and personal details are then masked before testing.
- Certifications
- Our main hosting provider, which runs our application and database, is certified to ISO/IEC 27001:2022 and holds a BSI C5:2020 Type 2 attestation for its cloud servers.
Network and security provider
- What it does for us
- Protects our network and secures connections between your devices and our servers.
- What it receives
- All traffic to and from KaryaFlow.
- Certifications
- ISO/IEC 27001:2022, ISO/IEC 27701 and ISO/IEC 27018 certified, with SOC 2 Type II, PCI DSS Level 1 and C5:2020 attestations.
3. Maps and location
Technicians' GPS trails and the travel distance on tracking reports are worked out on our own routing engine, not by a map company.
Google Maps Platform
- What it does for us
- Shows maps in the dashboard and the technician app, suggests addresses while you type, and turns addresses into map pins and map pins into addresses. Directions and road distances between points, such as finding the nearest technician, also use Google.
- What it receives
- The address text or map points it needs, and the viewer's IP address. Addresses are sent as typed, so a name or phone number typed into an address line reaches Google too. We do not send attendance records.
- Where
- Worldwide
- Privacy policy
LocationIQ
- What it does for us
- Names the places where a technician stopped, on tracking reports.
- What it receives
- Map points only, without names or other identity.
- Where
- United States
- Privacy policy
- LocationIQ
4. Messages and notifications
Google Firebase Cloud Messaging (and Apple's push service on iPhones)
- What it does for us
- Delivers push notifications to the technician app.
- What it receives
- The device's notification token and the notification text, for example a job number with the customer's name, a message preview or a salary payment amount.
- Where
- Worldwide
- Privacy policy
- Firebase
Google Firebase Crashlytics
- What it does for us
- Reports technician app crashes so we can fix them.
- What it receives
- Crash details, device model, operating system and app version. No name, email, location or photos.
- Where
- Worldwide
- Privacy policy
- Firebase
Brevo
- What it does for us
- Sends account and billing emails: password resets, invoices, receipts, welcome emails and quotations.
- What it receives
- The recipient's email address and the email content.
- Privacy policy
- Brevo
5. AI features
Both features reach the AI model through OpenRouter, a service that connects to AI model providers.
OpenRouter, then Google (Gemini)
- What it does for us
- Reads the kilometre reading from odometer photos on travel expense claims.
- What it receives
- The odometer photo only.
- Privacy policy
- OpenRouter · Google
OpenRouter, then Anthropic (Claude)
- What it does for us
- Answers questions in the help centre chat.
- What it receives
- What you type into the chat.
- Privacy policy
- OpenRouter · Anthropic
6. Payments
Cashfree Payments
- What it does for us
- Takes payment for your KaryaFlow subscription.
- What it receives
- Billing contact name, email, phone number and the amount. Card and UPI details are entered on Cashfree's own payment page, never on ours.
- Where
- India
- Privacy policy
- Cashfree
7. Our website (karyaflow.in)
These tools run only on our public website, not in the dashboard or the technician app.
Microsoft Clarity
- What it does for us
- Website analytics: session replays, heatmaps, clicks and scrolls.
- What it receives
- How visitors use the website, and an approximate location from the IP address. Text typed into forms is masked.
- Privacy policy
- Microsoft
PostHog
- What it does for us
- Website analytics: page views and events.
- What it receives
- Page views and events with a random visitor ID. Session recording is turned off.
- Where
- United States
- Privacy policy
- PostHog
YouTube (Google)
- What it does for us
- Plays our product videos on the website's video pages.
- What it receives
- The visitor's IP address and browser details, as soon as a video page opens.
- Privacy policy
8. Links you choose to open
- WhatsApp: chat buttons open WhatsApp only when you tap them. WhatsApp then receives what you choose to send, for example the customer's phone number to start a chat.
- Google Maps navigation: the technician app opens Google Maps with the job's address or location only when the technician chooses to navigate there.
9. Changes to this list
We update this page whenever we add or remove a company. See our Privacy policy for how we collect and use data.
10. Contact us
- Company
- Human Reasoning Labs Private Limited
- [email protected]
- CIN
- U63990OD2026PTC052715
- Business location
- Bhubaneswar, India