Privacy Policy.

Kova Labs Ltd. ("Kova Labs," "we," "us," or "our") is a B2B software development and SaaS agency headquartered in Islamabad, Pakistan. We are committed to protecting the privacy and confidentiality of the personal data entrusted to us by our clients, partners, website visitors, and prospective customers.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, interact with our services, or communicate with us. Please read this policy carefully. By accessing our website or using our services, you acknowledge the practices described herein.

We collect information that you voluntarily provide to us, as well as information automatically collected when you interact with our digital properties.

a. Information You Provide

• Contact details: Name, business email address, phone number, and company name when you submit an intake form, request a consultation, or communicate with us.
• Project requirements: Details about your project scope, technical specifications, budget preferences, and timelines shared through our intake or discovery process.
• Communication records: Correspondence via email, phone, or messaging platforms, including recordings where permitted by applicable law.
• Billing information: Invoice details, tax identifiers, and payment processing information handled securely through our third-party payment processors.

b. Information Collected Automatically

• Usage data: Pages visited, time spent on pages, referral sources, navigation paths, and interaction patterns.
• Device data: IP address, browser type, operating system, device type, and screen resolution.
• Analytics data: Aggregated behavioural data collected via third-party analytics tools (see our Cookie Policy for details).

We use the collected information for the following purposes:

• Service delivery: To evaluate project feasibility, develop and deliver software solutions, provide ongoing support, and manage client relationships.
• Communication: To respond to inquiries, send project updates, share relevant technical documentation, and coordinate delivery timelines.
• Business improvement: To analyse website usage patterns, improve our service offerings, and enhance user experience.
• Legal compliance: To comply with applicable laws, regulations, and legal processes, and to enforce our agreements and policies.
• Marketing (with consent): To send occasional communications about our services, case studies, and industry insights where you have opted in to receive such information.

We do not sell your personal information. We may share your data under the following circumstances:

• Service providers: With trusted third-party vendors who assist us in operating our business — such as cloud infrastructure providers, payment processors, analytics services, and communication tools — provided they enter into data processing agreements that safeguard your data.
• Legal obligations: When required by law, court order, or government regulation, or to protect the rights, property, or safety of Kova Labs, our clients, or others.
• Business transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, with reasonable notice to you where practicable.
• Client consent: With your explicit consent or at your direction.

We treat all client information and project materials as strictly confidential. Our engagements are governed by Non-Disclosure Agreements (NDAs) that prohibit unauthorised disclosure of:

• Proprietary source code, architecture designs, and technical documentation.
• Business strategies, product roadmaps, and competitive data.
• Client employee, customer, or partner information.
• Financial arrangements, pricing, and contractual terms.

We implement industry-standard access controls, encryption practices, and internal policies to ensure that confidential information is accessible only to personnel with a legitimate need.

We retain personal information only as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Retention periods vary based on the nature of the data:

• Client project data: Retained for the duration of the engagement plus seven (7) years for legal and tax compliance.
• Inquiry and intake data: Retained for up to two (2) years following the last contact.
• Analytics data: Retained in aggregated, anonymised form for up to twenty-six (26) months.

We employ administrative, technical, and physical safeguards to protect your personal information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
• Role-based access controls and multi-factor authentication for internal systems.
• Regular security audits and vulnerability assessments.
• Strict internal data handling policies and employee training programmes.

Notwithstanding these measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but will promptly notify you in the event of a data breach affecting your personal information as required by applicable law.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected.
• Restriction: Request restriction of processing under certain circumstances.
• Portability: Request a structured, commonly used format of your data.
• Objection: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please contact us using the details in Section 11. We will respond to your request within thirty (30) days.

Our website and services may utilise third-party tools and platforms that operate under their own privacy policies. These may include:

• Analytics providers (e.g., Google Analytics) for website usage tracking.
• Cloud infrastructure providers for hosting and data storage.
• Payment processors for billing and invoicing.
• Communication platforms for client correspondence and project management.

We encourage you to review the privacy policies of these third-party services. Kova Labs is not responsible for the data practices of third-party providers.

All source code, design assets, technical documentation, and deliverables created by Kova Labs for our clients are the intellectual property of the respective client upon full payment, subject to the terms of our Master Services Agreement.

Kova Labs retains the right to display completed projects in our portfolio, case studies, and marketing materials unless otherwise agreed in writing. We respect all third-party intellectual property rights and require our clients to warrant that they have the necessary rights to any materials provided to us for project execution.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational context. Material changes will be communicated via our website or direct written notice to active clients.

Last updated: June 1, 2026