KKrafto

Vendor Privacy Policy

Last updated: September 12, 2026

This Vendor Privacy Policy explains how Krafto Digital Technologies Private Limited ("Krafto") collects, processes, stores, and protects commercial, financial, and identity information provided by creators, designers, and developers who sell on the Krafto platform.

1. Vendor Information Collected

To comply with financial regulations and facilitate payouts, we collect:

  • Identity & KYC Documentation: Legal name, business name, date of birth, passport/national ID copy, and authorized signatory details;
  • Tax & Fiscal Identifiers: PAN (Permanent Account Number), GSTIN, Tax Identification Number (TIN), W-8BEN / W-9 details where applicable;
  • Banking & Payout Routing: Bank account holder name, account number, IFSC code, SWIFT/BIC codes, or verified payment processor handle;
  • Store Profile & Bio: Public store name, creator biography, portfolio links, social media handles, and store brand assets;
  • Sales & Transaction Metrics: Historical download counts, gross revenue, commission splits, payout records, and dispute logs.

2. Purpose of Processing Vendor Data

  • To verify vendor identity and enforce anti-money laundering (AML) and anti-fraud safeguards;
  • To disburse monthly revenue payouts and issue tax-deductible remittance statements (TDS / Form 16A);
  • To maintain marketplace transparency and display creator attribution to end buyers;
  • To audit catalog quality and resolve copyright infringement notices (DMCA / Indian Copyright Act).

3. Confidentiality & Financial Data Security

Vendor financial information and tax identifiers are encrypted at rest using AES-256 and transmitted exclusively over TLS 1.3. Bank account details are restricted to authorized financial operations personnel and are never exposed publicly or shared with buyers.

4. Disclosures Mandated by Law

We may disclose vendor fiscal and transaction data to tax authorities (including the Indian Income Tax Department and GST Network) or law enforcement agencies pursuant to lawful subpoenas, statutory compliance mandates, or court orders.

5. Vendor Data Retention & Store Closure

Financial and tax compliance records are retained for a minimum of 8 years following the close of the financial year in which the last transaction occurred, in accordance with the Companies Act and statutory tax obligations.

6. Privacy Contacts for Vendors

For inquiries regarding vendor KYC records or data updates, contact vendors@krafto.app or our Data Protection Officer at privacy@krafto.app.