MountKan by Shatom Private Limited
Effective Date: September 19, 2025
Websites: mountkan.com | mk3.mountkan.com
Contact: contact@mountkan.com
MountKan by Shatom Private Limited (“MountKan”), a private limited company duly incorporated and registered under the provisions of the Companies Act, 2013, operates mountkan.com and mk3.mountkan.com (the “Services”). This policy describes our minimal data practices in compliance with the Digital Personal Data Protection Act 2023 (India), GDPR principles, and our privacy-first commitment.
1. Information We Collect
We collect minimal information by design — only what is strictly necessary for chosen features.
A. Information You Provide (Opt-in / Optional)
– When contacting us (email, form): email address, name, message content.
– If you opt into SMS/WhatsApp fallback: phone number (required for sending/receiving messages).
– If you choose optional login; username/email for authentication (no other mandatory data).
– Language Model improvement: anonymized language patterns (sentence structure, vocabulary) from conversations — never linked to individuals.
B. Automatically Collected (Non-Personal / Anonymized)
– Technical data: anonymized/hashed IP address, browser/device type, language preference, approximate region (for language detection only).
– Usage data: session duration, pages visited, timestamps, conversation metadata (length, detected language) — no content stored after session ends.
– Visitor counter: file-based unique session count (no individual tracking).
We do NOT collect:
– Precise location, health, financial, or sensitive personal data.
– Full conversation transcripts beyond active session.
– Payment details (handled by third-party gateways for features to be added later).
2. Third-Party APIs & Data Handling
– Some features use third-party providers (e.g., LLM, offline mode, messenger mode etc.).
– These partners receive and may store phone numbers, message content, and metadata per their policies. – We have no control over their retention/processing. You consent to this when opting into such services.
3. SLM (Small Language Model) Development
– For future SLM fine-tuning/improvement, we may collect anonymized, aggregated language data (e.g., sentence patterns, vocabulary) from conversations.
– This is opt-in only (explicit consent required).
– Data is anonymized, stripped of identifiers, and used solely for model enhancement. – You can opt out anytime — no impact on core functionality.
4. How We Use Information
– Provide, maintain, and improve the Services (language detection, response quality).
– Debug, secure, and prevent abuse (anonymized IP).
– Generate aggregated analytics (total sessions, language usage) — never linked to individuals.
– Respond to inquiries (if you contact us).
– Comply with legal obligations. We do not use data for marketing, profiling, or selling to third parties.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
5. Data Sharing & Disclosure
– Aggregated/anonymized stats may be shared with partners (e.g., total usage trends).
– Data disclosed if required by law, court order, or government request. – In merger/acquisition, anonymized data may transfer to new entity.
6. Data Storage & Security
– Session data processed in memory — deleted after session ends.
– Phone numbers (SMS/WhatsApp) stored temporarily for delivery only.
– SLM language data (if consented) stored anonymized/aggregated.
– Hosted on Oracle Cloud Infrastructure (OCI) with encryption in transit (HTTPS) & at rest. – Industry-standard security (firewalls, access controls).
7. Cookies & Tracking
– Minimal session cookies for chat continuity.
– No third-party trackers, analytics, or ads. – You can disable cookies (may affect functionality).
8. Children’s Privacy
Services not directed to children under 13. No knowing collection from children under 13.
9. Your Rights Under DPDP Act 2023 and applicable laws, you may request access, correction, deletion, or opt-out of SLM data use. Contact contact@mountkan.com
10. Changes to Policy
Updates posted here with new effective date. Continued use = acceptance.
Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.