SF
State Filter
Sign inGet Started

Privacy Policy

Last updated: 21 April 2026

This Privacy Policy explains how KAKUS ENTERPRISES PRIVATE LIMITED (“we”, “us” or “our”) collects, uses, discloses and safeguards information when you use State Filter (the “Service”), accessible at https://statefilter.in. We are committed to complying with the Digital Personal Data Protection Act, 2023 (India) and the Information Technology Act, 2000 and its allied rules.

1. Information We Collect

a) Information you provide

  • Account data: full name, email address, phone number (optional), password (stored hashed).
  • Payment data: when you purchase credits, your payment details (card, UPI, net-banking, etc.) are entered directly on the payment gateway (Razorpay or Stripe). We do not store your full card number or CVV. We receive and store only the transaction identifier, amount, gateway reference and success/failure status.
  • Uploaded files: CSV/XLSX files containing Indian mobile numbers and any other columns you include. You are responsible for ensuring you have the lawful basis to process this data.
  • Support communications: any information you send us by email, contact form or through the dashboard.

b) Information collected automatically

  • Device & log data: IP address, browser type, operating system, referring URL, pages visited, and timestamps.
  • Cookies & local storage: we use essential cookies and localStorage to store authentication tokens (JWT), session preferences, and analytics. No third-party advertising cookies are used.

2. How We Use Your Information

  • To create and manage your account and provide the Service.
  • To process payments and allocate purchased credits to your account.
  • To parse, filter and return processed files to you.
  • To send transactional emails (verification, password reset, processing-complete, invoices).
  • To monitor, secure, debug and improve the Service.
  • To enforce our Terms and comply with legal obligations.

3. Legal Basis for Processing

We process your personal data on the following legal bases: (i) performance of a contract (providing the Service you signed up for); (ii) your consent (where applicable, e.g., for optional communications); (iii) our legitimate interests (e.g., fraud prevention, service improvement); and (iv) compliance with legal obligations.

4. Sharing and Disclosure

We do not sell your personal data. We share it only with:

  • Payment gateways (Razorpay Software Private Limited, Stripe, Inc.) to process your transactions.
  • Cloud and hosting providers that host our servers, databases and object storage, under contractual confidentiality obligations.
  • Email delivery providers for transactional email (e.g., verification and password reset).
  • Law enforcement or regulators, when required by applicable law, court order or valid legal request.
  • A successor entity in the event of a merger, acquisition or sale of assets, subject to this Privacy Policy.

5. Data Retention

  • Uploaded and processed files: automatically deleted 30 days after upload, or earlier upon your request.
  • Account data: retained for as long as your account is active. You may delete your account at any time.
  • Payment and transaction records: retained for up to 8 years to comply with tax, GST and accounting laws in India.
  • Server logs: typically retained for up to 90 days for security and troubleshooting.

6. Security

We implement reasonable security measures including TLS/HTTPS in transit, password hashing, JWT-based authentication with short-lived access tokens, rate limiting, MIME-type and file-signature validation for uploads, and role-based access controls. Despite these measures, no transmission over the Internet or method of electronic storage is 100% secure.

7. Your Rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your personal data (“right to erasure”).
  • Withdraw consent where processing is based on consent.
  • Object to or restrict certain processing.
  • Request a copy of your data in a portable format.
  • Lodge a complaint with the Data Protection Board of India or other competent authority.

To exercise any of these rights, write to admin@statefilter.in. We will respond within the timelines prescribed by applicable law.

8. Cookies

We use essential cookies and local-storage entries strictly required to run the Service (for example, authentication tokens). You can clear cookies and local storage through your browser settings, but doing so may affect your ability to log in or use the Service.

9. Children’s Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International Transfers

Your data is primarily stored and processed on servers located in India. Some sub-processors (for example, Stripe) may process data outside India. Where such transfers occur, we rely on appropriate safeguards as required by applicable law.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Material changes will be notified by email or a prominent notice in the Service.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of the Grievance Officer are provided below:

  • Designation: Grievance Officer, KAKUS ENTERPRISES PRIVATE LIMITED
  • Email: admin@statefilter.in
  • Response time: acknowledgement within 48 hours; resolution within 30 days of receipt of the grievance.

13. Contact

For privacy-related questions, email admin@statefilter.in or visit our Contact page.