Cookie Policy
This Cookie Policy (“Policy”) is issued by Megamax Services Pvt. Ltd. (“Megamax”, “we”, “us”, “our”) and explains, in more detail than Section 5 of the Privacy Policy, how the Kasturi HR App and KasturiHR.com (collectively, the “Platform”) use cookies and similar tracking technologies. This Policy forms part of, and should be read alongside, the Privacy Policy and the Terms and Conditions of Service. Capitalised terms not defined in this Policy have the meaning given to them in the Privacy Policy.
1. What are Cookies
Cookies are small text files placed on a user’s device when the user visits a website or uses an application. Similar technologies include web beacons, pixel tags, software development kit (SDK) identifiers, and local storage objects. This Policy uses the term “cookies” to refer collectively to all such technologies, consistent with Section 2.5 of the Privacy Policy.
2. How Megamax Uses Cookies
The Kasturi HR App and KasturiHR.com use cookies and similar technologies to ensure Platform functionality, improve performance, personalise user experience, and support analytics, consistent with Section 5 of the Privacy Policy. The table below sets out the categories of cookies used, with illustrative examples.
| Category | Purpose | Can Be Disabled? | Illustrative Examples |
|---|---|---|---|
| Essential Cookies | Necessary for the Platform to function, including session management, load balancing, login authentication, and security. | No — required for Platform operation. | Session ID, authentication token, CSRF protection token. |
| Functional Cookies | Retain user settings and preferences, including language, display settings, and session data. | Yes, via browser settings or the cookie consent banner. | Language preference, dashboard layout preference. |
| Analytical / Performance Cookies | Track user interaction patterns to support Platform improvement, including page views, time spent, and feature usage. | Yes, via browser settings, the cookie consent banner, or the opt-out tools listed in Clause 5 below. | Google Analytics, Firebase Analytics. |
| Advertising / Targeting Cookies | Used only in connection with Megamax’s own marketing website (not within the Customer’s Platform tenant), to measure marketing campaign effectiveness. | Yes, via the cookie consent banner or the opt-out tools listed in Clause 5 below. | Campaign tracking pixels on KasturiHR.com marketing pages. |
3. First-Party and Third-Party Cookies
Some cookies are set directly by Megamax (“first-party cookies”), while others are set by third-party service providers that deliver functionality on Megamax’s behalf (“third-party cookies”), such as analytics providers. Third-party cookies are governed by the respective third party’s own privacy and cookie practices, in addition to this Policy. Megamax does not control the data practices of independent third-party cookie providers, consistent with Section 12 of the Privacy Policy.
4. Cookie Consent
On first visiting the Website or App, users are presented with a cookie consent banner allowing them to accept or reject non-essential cookies, and to manage their preferences by category. Essential cookies cannot be disabled, as they are required for Platform operation. Users may change their cookie preferences at any time through the cookie settings link available on the Platform, or through their browser settings.
5. Do Not Track Signals
Megamax respects “Do Not Track” (DNT) signals transmitted by a user’s browser. Where a DNT signal is received, Megamax will not associate new data collected during that session with the user’s stored profile for targeted advertising purposes. Certain data may continue to be collected for non-marketing purposes, including security monitoring and analytics, consistent with Section 5.2 of the Privacy Policy.
6. Mobile App Identifiers
The Kasturi HR App may use mobile device identifiers and SDK-based analytics tools in a manner equivalent to website cookies, which users can manage directly through their device’s privacy settings. When a client enables our live tracking feature for their employees, the app collects specific device information—including the device name, operating system version, battery percentage, and location data (latitude and longitude)—strictly during an active login session. No data tracking or collection occurs once the application is closed (killed) or the user logs out.
7. Retention of Cookie Data
Cookie data is retained only for as long as necessary for the purpose for which it was collected, consistent with the “Website analytics and security logs” retention category in Section 9 of the Privacy Policy. Session cookies are deleted automatically when the browser session ends; persistent cookies remain until they expire or are deleted by the user.
8. Changes to This Policy
Megamax may amend this Policy from time to time to reflect changes in its products, services, applicable law, or industry standards, consistent with Section 15 of the Privacy Policy. The revised Policy will be published on the Platform with an updated “Last Updated” date.
9. Contact
Questions regarding this Policy or cookie practices should be directed to support@kasturihr.com, or, for compliance and regulatory matters, legal@megamaxservices.com.