Privacy policy — Kissflow

Cited by

Facts read from this source

• Effective date Report an error

  “Effective date: 01 September 2026.”

• Controller india Report an error

  “OrangeScape Technologies Private Limited, a company incorporated under the laws of the Republic of India, with its registered office at 1002 and 1003, 10th Floor, Tower-B, World Trade Center, No. 5/142, Rajiv Gandhi Salai (OMR), Perungudi, Chennai - 600096, Tamil Nadu, India, acting as the Data Fiduciary under the DPDPA.”

• Controller outside india Report an error

  “Kissflow Inc., a company incorporated under the laws of the State of Delaware, United States, with its principal place of business at 1000 N West Street, Suite 1200, Wilmington, Delaware, 19801, USA, acting as the Data Controller under the GDPR, UK GDPR, CCPA and other applicable regimes.”

• Subprocessor list location Report an error

  “The complete list of Kissflow's group entities and sub-processors together with the applicable data processing terms, are set out in the Kissflow Data Processing Addendum.”

• Transfer mechanism eea Report an error

  “Transfers from the EEA, the UK or Switzerland are made under the EU Standard Contractual Clauses (Commission Decision (EU) 2021/914), the UK International Data Transfer Addendum (version B1.0), the Swiss adaptation of those Clauses, or an applicable adequacy decision.”

• Transfer india Report an error

  “Transfers of Personal Data of Indian Data Principals are made in accordance with Section 16 of the DPDPA.”

• Security measures Report an error

  “We implement and maintain physical, technical and administrative security measures that comply with applicable law and prevailing industry standards, including encryption in transit, authentication and access controls, and monitoring.”

• Retention principle Report an error

  “We retain your Personal Data only for so long as is necessary for the purposes for which it was collected, or as required by applicable law.”

• Sale Report an error

  “We do not sell your Personal Data in the conventional sense of the term (that is, we do not exchange Personal Data directly for money).”

• No solely automated decisions Report an error

  “We do not make solely-automated decisions that produce legal effects concerning you, or similarly significantly affect you, on the basis of such processing.”

• AI features responsibility Report an error

  “The Kissflow services include artificial-intelligence features which a Subscriber, as controller of the workflow data uploaded by it, may elect to enable. The privacy-notice obligations in respect of those AI features are the Subscriber's, and not those of Kissflow under this Policy.”

• Rights request contact Report an error

  “To exercise any of these rights, contact us at privacy@kissflow.com. We will verify your identity before acting on your request and will respond within the period required by applicable law. No fee will be charged for a reasonable request.”

• Rights india Report an error

  “you have the right to access information about the processing of your Personal Data (Section 11), the right to correction, completion, updating and erasure of your Personal Data (Section 12), the right to grievance redressal (Section 13), the right to nominate another individual to exercise your rights in the event of your death or incapacity (Section 14), and the right to withdraw consent where processing is based on consent.”

• Rights california Report an error

  “you have the right to request disclosure of the categories and specific pieces of Personal Information collected about you, the right to request correction of inaccurate Personal Information, the right to request deletion of Personal Information (subject to exceptions), the right to opt out of the sale or sharing of Personal Information, the right to limit the use of sensitive Personal Information, and the right not to be discriminated against for exercising these rights.”

• Enduser controller Report an error

  “the Subscriber is the Data Fiduciary / Data Controller of that end-user's Personal Data. End-users should direct any data-privacy questions or requests to the Subscriber.”

• Children india Report an error

  “We do not knowingly collect or process Personal Data of children (individuals under 18 years of age) or of persons with disabilities lacking capacity to consent, except with verifiable parental or guardian consent, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children.”

• Payment processor cards Report an error

  “Full payment-card numbers are processed by our payment processor and are not retained by Kissflow.”

• AI features available Report an error

  “The Kissflow services include artificial-intelligence features which a Subscriber, as controller of the workflow data uploaded by it, may elect to enable.”

7 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer Governance, credentials & audit trail
• The Data Protection Officer European sovereignty
• The Data Protection Officer Governance, credentials & audit trail
• The Data Protection Officer European sovereignty
• The Head of IT European sovereignty
• The Head of IT European sovereignty
• The Integration Engineer European sovereignty
• The Integration Engineer European sovereignty
• The Operations Analyst Governance, credentials & audit trail
• The Operations Analyst European sovereignty
• The Operations Analyst Governance, credentials & audit trail
• The Operations Analyst European sovereignty
• The Process Owner Governance, credentials & audit trail
• The Process Owner European sovereignty
• The Process Owner Governance, credentials & audit trail
• The Process Owner European sovereignty
• The Skeptic Governance, credentials & audit trail
• The Skeptic European sovereignty
• The Skeptic Governance, credentials & audit trail
• The Skeptic European sovereignty