Privacy Policy

1. Who we are

Kokatta is a software and digital services agency based in Islamabad, Pakistan. This Privacy Policy explains how we collect and use information when you visit kokatta.com, submit inquiry forms, request pricing, or communicate with us by email or chat.

2. Information we collect

• Contact details you submit (name, work email, phone, company)
• Project details, budget range, and messages you send through our forms
• Technical data such as IP address, browser type, and pages visited
• Cookie and analytics data used to understand site performance

3. How we use your information

• Respond to project inquiries, quotes, and consultation requests
• Provide proposals, contracts, NDAs, and delivery communications
• Improve our website, services, and marketing effectiveness
• Comply with legal obligations and protect against fraud or abuse

4. Legal bases for processing

Where GDPR or UK GDPR applies, we process information to respond to your request or perform a contract, based on our legitimate interests in operating and securing our business, to meet legal obligations, or with your consent for optional analytics and marketing technologies. You may withdraw consent at any time through Cookie settings.

5. Service providers and data sharing

6. AI chat and automated processing

Messages entered into our AI chat are sent to Groq to generate a response. A random chat session identifier is stored in your browser; it is not intended to identify you directly. Do not submit passwords, payment details, health information, trade secrets, or other sensitive data through the chat. The chat provides general information and does not make decisions that produce legal or similarly significant effects.

7. International data transfers

Kokatta operates from Pakistan and uses providers that may process data in the United States and other countries. Where required, transfers are handled through provider data-processing terms and recognized transfer safeguards such as Standard Contractual Clauses. We can provide a DPA for client projects that involve processing personal data.

8. Data security and retention

We use reasonable technical and organizational measures to protect inquiry and project data, including secure transport and limited access. Inquiry records are generally kept for up to 24 months after the last communication. Contract, invoice, and delivery records may be kept longer where required for accounting, legal claims, or contractual obligations. We then delete or anonymize records when no longer needed.

9. Your privacy rights

10. Children and policy updates

This business website is not directed to children under 16, and we do not knowingly collect their personal information. We may update this policy as our services or providers change; the effective date above shows the latest revision.

11. Contact