Privacy Policy

Last updated 26 August 2026

Cancel Desk (cancel.klairlabs.com) is operated by Klair Technology Solutions Private Limited (Klair Labs), Hyderabad, India , and is a hosted cancel flow that subscription businesses put in front of their own "Cancel subscription" button. This policy covers two different people, because Cancel Desk plays two different roles depending on who you are.

You run a business using Cancel DeskWe act as a data processor on your instructions for the cancellation sessions your customers go through — you remain the controller of your own customers' data. This policy explains what we store about your account and the sessions flowing through it on your behalf.

You went through someone's cancel flowThe business whose flow you used is the controller of your data, not us — direct any question about your subscription or your data to them. We are a processor storing your session on their behalf. See "If you went through a cancel flow" below.

1. Information we collect from account holders (businesses)

What	Why	How long
Your email address. Created the first time you sign in — there is no password, only a signed emailed link.	To identify your account and sign you in.	Until you ask us to delete your workspace
Product/flow name, and optionally a logo and accent colour (logo/colour is a Pro feature).	Shown on your public cancel page so your customers know whose flow they're in.	Until you change or remove it
Subscription records — plan, status and renewal dates, from Razorpay.	To provide what you've paid for.	As required for tax and accounting records
An internal audit trail of actions on your account and flows (e.g. an offer changed, a licence issued) — timestamp and actor, not full message content.	Accountability and security.	Currently kept indefinitely alongside the account
An anonymous usage beacon when a page loads — page path, an event name, and the referring host. No email addresses or session content are included.	To know which parts of the product actually get used.	Indefinitely, as aggregate counts

2. Information we collect from your customers (processed on your behalf)

When one of your customers goes through your Cancel Desk flow, we store, on your instructions and for your use in acting on it:

Their email address (either passed in by your app, or typed in if you didn't pass one)
The reason they picked, and any free-text feedback they typed
Whether they took an offer (paused / discounted) or cancelled outright
Timestamps for when the session opened and closed

We do not read, use or share this data for our own purposes — it exists so you can act on the outcome (apply the pause, apply the discount, stop billing) and see the aggregate pattern in your reasons. We email you when a session closes; we do not otherwise contact your customer.

If you went through a cancel flow:

Your session lives in the account of the business whose flow you used, not in an account of ours. We can't act on it or change your subscription — that's the business's decision, since they're the controller. If your concern is with Cancel Desk itself rather than the business, email hello@klairtech.com and we'll look into it.

3. What we don't do

We carry no advertising on Cancel Desk, so there is no ad-tracking and no data shared with ad networks.
We do not sell personal information, and using the free tier does not put anyone on a marketing list.
We do not read session content to train models or market to your customers.

4. Cookies and local storage

Cancel Desk uses localStorage, not a persistent tracking cookie, to hold your signed-in session token (cd_lic) on your own device. There is no advertising or third-party analytics cookie on any Cancel Desk page. A small first-party beacon reports anonymous page-view counts; it sets no cookie and carries no identifying value.

5. Payments

Subscriptions are processed by Razorpay. Card, UPI and bank details are entered on Razorpay's own checkout and go directly to them — Cancel Desk never receives or stores your card number, CVV, UPI PIN or bank credentials. We receive only a subscription identifier, its status, and the email address you signed up with.

6. Email

We send transactional email only — sign-in links, save/cancellation notices, and account notices — through Amazon Simple Email Service. We do not send marketing email.

7. Sub-processors

The canonical, dated list of third parties we use to run Cancel Desk — Amazon Web Services, Amazon SES, Razorpay, and Amazon CloudFront, each with what it does and where it runs — lives on its own page: cancel.klairlabs.com/subprocessors.html. That page also carries our commitment to announce any addition at least 14 days before it starts handling personal data, and a change log of every revision to the list.

If your organisation needs a Data Processing Addendum for its own compliance records, our self-serve DPA applies to every workspace automatically and explains how to get a countersigned copy.

8. Data retention and deletion

You can delete your own workspace at any time from Settings in the app — this removes your account, every session record, every flow and any branding you've set, immediately, with no need to email us. Where we must keep a record of a payment for tax purposes, we keep only that. Being honest about where else this stands today: you can choose a retention window in Settings (6, 12 or 24 months, or indefinitely), but the automated job that purges closed sessions once they pass it is built and not yet switched on — until it is, records are kept until you either delete the workspace yourself or ask us to remove specific data. Email hello@klairtech.com for the latter.

9. Where data is held

Account, session, and subscription records are stored in AWS's Asia Pacific (Mumbai) region. Pages are served through a global content delivery network for speed; that network caches and serves pages, it does not store the personal data described above.

10. Your rights

If you're an account holder, you can ask what we hold about you and ask us to correct or delete it, the same way described in section 8. If you went through a cancel flow, your rights run against the business whose flow you used, as explained in section 2 — we'll still help if your concern is with Cancel Desk specifically rather than that business.

11. Children

Cancel Desk is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 18 as an account holder.

12. Changes

If this policy changes we'll update the date at the top. Material changes to how we handle personal data will be announced on this page.

13. Contact

Klair Labs — hello@klairtech.com. This policy is a description of what Cancel Desk does, not a substitute for legal advice about your own obligations as a business — see our Terms for that distinction spelled out.