Privacy Policy

1. Scope

This policy explains how Khotan ("Khotan", "we", "us") handles personal information collected through khotan.com, our demo and scheduling flows, and direct business communications.

When a customer gives Khotan access to personal information as part of a project or service, the customer controls that information and the applicable customer agreement governs our processing. This policy does not replace that agreement.

2. Information we collect

We collect information you provide, information generated when you use the website, and information supplied by the services that operate the website.

• Contact information, including your first name, work email address, company, and any details you send us when you request a demo or contact us.
• Website activity, including pages viewed, links and buttons used, scroll depth, time on page, referring pages, and campaign parameters.
• Device and connection information, including browser and device characteristics, language, time zone, screen and viewport size, IP address, and approximate location derived from it.
• Analytics identifiers and session recordings. Form inputs are masked in recordings, but other content visible on a page may be captured.
• Attribution information. A campaign link may associate a visit with a campaign, company, or intended recipient so we can understand which outreach led to a visit or demo request.
• Correspondence and business information you provide during a demo, meeting, support request, or customer relationship.

3. Cookies and similar technologies

We use cookies and browser storage to operate the website, remember attribution, measure engagement, and understand return visits.

• kh_vid is a random visitor identifier. It may remain on your device for up to 24 months.
• kh_ref records the first Khotan campaign link associated with your visit. It may remain on your device for up to 24 months.
• Local and session storage record first-touch campaign information and a session identifier.
• When enabled, PostHog uses cookies and browser storage for analytics and session replay.

4. How we use information

We use personal information to:

• Respond to enquiries, arrange demos and meetings, and communicate with prospective and current customers.
• Operate, maintain, troubleshoot, and secure the website and our services.
• Measure website use, understand which content is useful, and improve the website.
• Attribute visits and demo requests to campaigns, partners, and outreach.
• Detect spam, fraud, misuse, and security incidents.
• Meet legal obligations and establish, exercise, or defend legal claims.

5. How we share information

We share personal information only where needed to operate Khotan, provide a requested service, complete a business transaction, or comply with law.

• Infrastructure and storage providers, including Vercel and Neon.
• Analytics and session-replay providers, including PostHog.
• Email and scheduling providers, including Resend and Cal.com.
• Professional advisers, contractors, and other service providers that need the information to perform work for us.
• Authorities or other parties when required by law, necessary to protect rights and safety, or connected with a merger, financing, acquisition, or sale of assets.

6. Sale and advertising

We do not sell or rent personal information. We do not use personal information collected through this website for cross-context behavioural advertising.

7. Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including to maintain business records, meet legal obligations, resolve disputes, and enforce agreements. We then delete or anonymise it where practicable. Backup copies may remain for a limited period before being overwritten.

8. International processing

Khotan and our service providers may process personal information in countries other than the one where you live. Where required, we use contractual or other safeguards for international transfers.

9. Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

10. Your choices and rights

You can block or delete cookies through your browser settings, although parts of the website may not work as intended. Depending on where you live, you may also have rights to access, correct, delete, or receive a copy of your personal information; object to or restrict processing; withdraw consent; or complain to a privacy regulator.

We may need to verify your identity before completing a request. Some information may be retained where the law permits or requires it.

11. Children

The website and services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children under 16.

12. Changes to this policy

We may update this policy as our practices, services, or legal obligations change. We will post the revised policy here and update the date above. If a change materially affects how we use personal information, we will provide additional notice where required.

13. Contact

If you have a question about this policy or want to make a privacy request, please contact us.

Email: adeep@pollinate.tech