PRIVACY POLICY

This Privacy Policy describes how Pandyx, a division of Karlo Consulting Group (“Company,” “we,” “us,” or “our”), collects, uses, processes, stores, discloses, and protects personal information in connection with our websites, software platforms, applications, automation systems, AI agents, consulting services, and any related services or products (collectively, the “Services”). By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

Pandyx provides custom system design, CRM infrastructure, automation solutions, AI-powered voice and chat agents, white-labeled SaaS environments, and business consulting services. In delivering these Services, we may collect personal information directly from users, indirectly through automated technologies, and from third-party service providers.

We collect information that you voluntarily provide to us, including your name, email address, telephone number, company information, billing details, account credentials, and any information submitted through forms, surveys, support requests, onboarding processes, or communications with us. If you purchase Services, payment information is processed through third-party payment processors and is not stored directly on our servers except as permitted for billing records and compliance.

We automatically collect certain technical information when you access the Services, including IP address, browser type, device information, operating system, usage data, session activity, referral source, interaction behavior, and cookie identifiers. This information helps us maintain security, analyze performance, improve functionality, and enhance user experience.

If you are a client utilizing our CRM or white-labeled SaaS platform, we may process data that you upload or collect from your own customers, including contact information, communication logs, marketing data, SMS and email messages, call recordings where enabled, appointment data, and related business information (“Client Data”). We process Client Data solely on your behalf as a service provider or data processor and do not claim ownership over such data. You are solely responsible for ensuring that you have obtained all required consents and that your collection and use of Client Data complies with applicable laws including but not limited to TCPA, CAN-SPAM, GDPR, and other privacy regulations.

We use collected information to provide, operate, maintain, improve, and secure the Services; to create and manage accounts; to process transactions; to communicate administrative or promotional information; to provide customer support; to prevent fraud, abuse, and unauthorized access; to comply with legal obligations; and to develop or enhance features, including AI-driven functionalities. Where AI features are used, data may be processed to improve performance in aggregated or anonymized form.

If you are located in the European Economic Area or other jurisdictions with similar protections, we process personal data based on contractual necessity, legitimate interests, legal obligations, or your consent, as applicable. You may withdraw consent at any time where processing is based on consent.

We do not sell personal information. We may share information with trusted third-party service providers that perform services on our behalf, including hosting providers, infrastructure providers, communication platforms, analytics services, payment processors, and legal or compliance advisors. These third parties are contractually obligated to protect data and may only use it to provide services to us. We may also disclose information where required by law, regulation, subpoena, court order, or governmental request, or where we believe disclosure is necessary to protect our rights, enforce agreements, prevent fraud, or ensure safety.

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, to comply with legal obligations, resolve disputes, enforce agreements, or maintain legitimate business interests. We reserve the right to delete or anonymize data after account termination or prolonged inactivity, subject to applicable law.

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, alteration, disclosure, or destruction. These measures may include encrypted transmission, role-based access controls, authentication requirements, and infrastructure-level protections. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, and to request data portability. Requests may be submitted to [Insert Contact Email]. We may require verification of identity before fulfilling such requests.

Our Services are not intended for individuals under the age of eighteen. We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal information without parental consent, we will take steps to delete such information.

Data may be transferred to and processed in the United States or other jurisdictions where our service providers operate. By using the Services, you acknowledge and consent to such transfers.

We may update this Privacy Policy from time to time. Continued use of the Services after any modification constitutes acceptance of the revised Policy.

ADDITIONAL U.S. STATE PRIVACY RIGHTS INCLUDING CALIFORNIA

This section applies to residents of California and other U.S. states that have enacted consumer privacy laws granting similar rights, including but not limited to the California Consumer Privacy Act and California Privacy Rights Act (collectively “CCPA”), the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, and the Utah Consumer Privacy Act.

For purposes of this section, “personal information” has the meaning given under applicable state law and includes information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer or household.

Categories of Personal Information Collected

In the preceding twelve months, we may have collected the following categories of personal information: identifiers such as name, email address, IP address, and account credentials; commercial information including records of Services purchased; internet or electronic network activity information including browsing behavior and system interactions; geolocation data derived from IP address; audio data where call recording features are enabled; and professional or employment-related information where voluntarily provided.

Sources of Personal Information

We collect personal information directly from you, automatically through your interaction with our Services, and from service providers or third parties that assist in providing the Services.

Business and Commercial Purposes for Collection

We collect and process personal information for the purposes described in this Privacy Policy, including providing and maintaining the Services, processing transactions, improving platform performance, securing accounts, communicating with users, complying with legal obligations, and supporting business operations.

Disclosure of Personal Information

We may disclose personal information to service providers, contractors, analytics providers, payment processors, infrastructure providers, and other vendors who assist in operating our Services. Such disclosures are made pursuant to written agreements requiring appropriate confidentiality and data protection safeguards.

Sale or Sharing of Personal Information

KCG System does not sell personal information as defined under the CCPA or CPRA. We also do not share personal information for cross-context behavioral advertising in a manner that constitutes “sharing” under California law. We do not knowingly sell or share the personal information of individuals under sixteen years of age.

If our practices change in the future, we will update this Privacy Policy and provide a clear and conspicuous “Do Not Sell or Share My Personal Information” link where required by law.

Your California Privacy Rights

If you are a California resident, you have the right, subject to certain limitations, to request the following:

The right to know what personal information we collect, use, disclose, or process about you, including the categories and specific pieces of personal information.

The right to request deletion of personal information we have collected from you, subject to legal exceptions.

The right to request correction of inaccurate personal information.

The right to opt out of the sale or sharing of personal information, although we do not currently sell or share personal information as defined by law.

The right to limit the use and disclosure of sensitive personal information where applicable.

The right not to receive discriminatory treatment for exercising your privacy rights.

Exercising Your Rights

To exercise your rights, you may submit a verifiable consumer request by contacting us at [email protected]. Or a mail can be send to the address at 529 Thatford ave, Brooklyn, NY, 11212. We may require you to verify your identity before processing your request. Authorized agents may submit requests on your behalf where permitted by law and upon verification of authority.

We will respond to verifiable requests within the timeframe required by applicable law. We reserve the right to deny requests where permitted by law, including where necessary to comply with legal obligations, complete transactions, detect security incidents, protect against fraud, or exercise free speech rights.

Retention and Sensitive Personal Information

We retain personal information only as long as reasonably necessary to fulfill the purposes described in this Policy or as required by law. We do not use sensitive personal information for purposes other than those permitted under applicable law, including providing requested Services and ensuring security and integrity.

Appeals and Additional State Rights

Residents of certain states may have additional rights to appeal a denial of a privacy request. If your request is denied and you reside in a state that provides a right to appeal, you may contact us to submit an appeal in accordance with applicable law.

OPTIONAL WEBSITE FOOTER TEXT

If you want to add a visible footer line for extra compliance strength, you may include:

California Residents: To exercise your privacy rights under the CCPA or CPRA, please contact us at [Insert Email]. We do not sell or share personal information as defined under California law.