Privacy Policy

KotiSync Technologies ("KotiSync", "we", "us") operates kotisync.com — a platform for smart home consultation, installation and warranty services in Pakistan. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have.

By using our website or services, you agree to the practices described here. If you do not agree, please do not use our services. For any privacy questions, contact us at automate@kotisync.com.

We collect information you provide directly and information gathered automatically:

• Identity & Contact: full name, mobile / WhatsApp number, email address, city and delivery area.
• Project Details: home type, preferred ecosystems, message notes you submit through forms.
• Verification Data: 6-digit codes sent via SMS or email to verify your phone number and email.
• Account Data: member ID, purchase records, product name, amount paid and warranty dates for registered members.
• Technical Data: browser type, pages visited, and usage patterns collected via standard analytics.

We use your information to:

• Respond to inquiries and schedule free consultations.
• Verify your phone number and email before delivering account credentials or processing forms.
• Design and install smart home systems and arrange site visits.
• Process warranty claims and provide after-sales support.
• Send service updates and, with your consent, marketing communications you can opt out of anytime.
• Maintain security, prevent fraud, and comply with legal obligations.

To confirm that phone numbers and email addresses belong to you, we send one-time verification codes via SMS (using our messaging provider, Twilio) and email. Standard message and data rates from your mobile carrier may apply. You can stop verification messages by not requesting further codes.

We never sell or rent your contact details. SMS and email are used strictly for verification, service delivery, and communications you request.

Member passwords are stored only as salted PBKDF2 hashes — never in plain text. Active member sessions are held in browser sessionStorage (cleared when the browser closes) with a one-hour inactivity timeout. All data in transit is encrypted over HTTPS.

Access to personal data is limited to authorised personnel and is protected by administrative, technical and physical safeguards appropriate to the sensitivity of the information.

We use browser localStorage and sessionStorage to remember your shopping cart and keep you logged in during a session. We do not use third-party advertising cookies. You can clear stored data anytime through your browser settings.

We do not sell, trade or rent your personal information. We share data only with trusted service providers who help us operate — such as Twilio for SMS delivery and email delivery services — under confidentiality obligations, and when required by Pakistani law.

We keep your information for as long as needed to provide services and meet legal obligations. Warranty and purchase records are retained for the warranty duration plus two years. Inquiry data is retained for the period needed to respond and follow up, after which it is removed or anonymised.

You have the right to:

• Request access to or a copy of your personal data.
• Correct inaccurate or incomplete information.
• Request deletion of your data, subject to legal retention requirements.
• Withdraw consent for marketing communications at any time.

To exercise these rights, email automate@kotisync.com.

Our services are not directed at individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this Privacy Policy. The "Last updated" date above reflects the latest revision. Continued use of our services after changes constitutes acceptance of the updated policy.

For privacy questions or requests, email automate@kotisync.com. Phone and WhatsApp support will be available from November 30.