This policy explains how KARODIAL, operated by Avycore Tech Private Limited, handles personal information when you browse karodial.com, create an account, send a project enquiry or use our embedded assistant.
1. Who we are
KARODIAL provides website design and AI-assisted website-development services. For questions about information handled through this website, contact support@karodial.com. A separate project agreement may contain additional information about data we handle while building or maintaining your website.
2. Information we handle
- Accounts: your name, email address, account identifier, sign-in method, verification status and account timestamps. With Google sign-in, we receive the profile information made available for that sign-in, such as your name, email address, Google/Firebase identifier and profile-image URL. We do not receive your Google password. For email/password registration, our application stores a password hash.
- Project enquiries: your name, email address, business name, message and, when you explicitly choose one, your selected design. An enquiry may be associated with your signed-in account. General Contact enquiries do not automatically inherit an earlier design selection.
- Technical and security information: hosting and security systems may handle IP addresses, browser information, requested URLs, timestamps and sign-in-attempt information. Our application's sign-in-attempt records use hashed identity and IP values.
- Chat: information you choose to send through the WeBot assistant, together with technical information used to deliver the widget and conversation. Do not send passwords, payment-card details, identity documents or other sensitive information through the public contact form or chatbot.
- Approximate city: a city estimated from your internet connection, as explained below. We do not ask for GPS or device-location permission.
3. How we use information
We use information to operate your account, respond to enquiries, discuss and deliver agreed work, provide support, secure the website, prevent misuse and meet applicable record-keeping or legal requirements. We do not sell or rent personal information collected through this website. Sending an enquiry is not permission for unrelated marketing.
Where applicable law requires consent for a particular activity, that consent must be separate from choices needed to request or receive our services. You may contact us to withdraw consent where the processing depends on it; this does not undo processing already lawfully carried out.
4. City greeting & your choice
When enabled, pages with a city greeting request an approximate location from ipapi.is. That request discloses your IP address to the service. Its response can include other network or location fields; KARODIAL's greeting code uses only the city name and does not save that response to our application database.
The city can be inaccurate, particularly with mobile networks, VPNs or shared connections. A recent city result is reused from your tab's session storage for up to 30 minutes. If a lookup fails, the greeting stays neutral. We skip this lookup when your browser exposes Global Privacy Control or you turn the greeting off below.
Your city greeting preference
This preference applies to this browser. Turning it off stops future city lookups by our greeting feature; it does not remove information already processed by a service provider.
You can turn the city greeting off without affecting the catalogue, contact form or sign-in.
5. Cookies & browser storage
We use a first-party session cookie to maintain sign-in, protect forms against forged requests, remember an explicit design selection and show enquiry confirmations. Blocking essential cookies can prevent these features from working.
The city cache uses session storage. Your city-greeting preference uses local storage and stays in this browser until you change it or clear browser data. The WeBot widget can use browser storage for panel size, placement and its consent interface. Authentication providers can also use their own cookies or storage during sign-in. Clearing browser data may reset these choices.
6. Services we use
We share information needed to run the features you use. Relevant services include:
| Service | Purpose & information involved |
|---|---|
| Hostinger | Website hosting, application/database storage and related technical logs. |
| Google / Firebase Authentication | Google sign-in, account identifiers and authentication/security processing. See Firebase's privacy information. |
| ipapi.is | IP-based approximate city lookup when the greeting is enabled. See its privacy policy. |
| WeBot (webot.online) | Embedded assistant delivery and chat processing, including conversation content you submit and technical data. Configured AI service providers may also process conversation data to provide responses. |
| Google Fonts | Font files requested by your browser; these requests reveal technical connection information to Google. See Google's privacy policy. |
Loading third-party resources can disclose your IP address and normal request information before you actively use a feature. Service providers may process information in countries other than yours, according to their infrastructure and applicable terms. Independent websites reached through links have their own privacy practices. We may also disclose information when required by law, to protect legal rights or to address fraud and security incidents.
7. Retention & security
Retention depends on why a record is needed: maintaining an account, responding to an enquiry, performing a project, handling a dispute or meeting legal and accounting obligations. There is no single automatic deletion period for all account and enquiry records. Contact us to request closure or deletion; we will explain any information that must be retained. Backup copies may remain until the relevant backup cycle replaces them.
Our application uses HTTPS, password hashing, access controls, protected sessions and form safeguards. No website or transmission method can guarantee absolute security. Keep your sign-in credentials private and notify us if you suspect misuse.
8. Your choices & requests
You can browse the catalogue without creating an account, use the Contact form without choosing a design, turn off the city greeting, control browser storage, or choose not to use the chatbot.
Depending on applicable law and the circumstances, you may request access to information we hold about you, correction, account closure, deletion, information about disclosures, or withdrawal of consent. Send requests to support@karodial.com. We may ask for proportionate verification of your identity or account control. Please do not send a password or unnecessary identity documents. Some requests may be limited by legal, security or record-keeping requirements; where relevant, we will explain the reason.
Children
Our account and project services are intended for adults and business representatives. We do not knowingly seek personal information from children. If you believe a child has provided information, contact us so we can review and address it.
9. Changes, questions & concerns
We may update this policy when our services or practices change. The date at the top identifies the current version; changes requiring a separate notice or consent will be handled as applicable. For privacy questions, requests or a grievance, email support@karodial.com and identify KARODIAL in the subject. This policy does not restrict rights or remedies available under applicable law.
See also our Terms of Service.