KHH Practice HubPrivacy policy
This policy explains how K H Haria & Associates (“we”, “us”) handles personal information through KHH Practice Hub, our workspace for authorised staff and clients.
Information we handle
Account information includes your name, email address, profile image when supplied by your sign-in provider, authentication identifiers and verification status. Depending on your role and the services involved, the hub can hold contact details, client and entity records, tax and compliance information, documents you upload, task activity, invoices and payment records, and staff attendance and leave records. Technical service providers also process connection and security information, such as IP addresses, device/browser information and service logs.
Google sign-in and account access
When you choose Google sign-in, we request basic identity information: your profile, email address and account identifier. This integration does not request access to your Gmail messages, Google Drive files, contacts or calendar. We do not receive your Google password. Clerk provides account authentication and verification. Signing up does not automatically grant access to client or staff records; the firm must authorise your access.
Why information is used
We use information to verify users, administer access, provide agreed professional services, organise documents and work, maintain billing and staff records, respond to requests, prevent misuse and meet applicable recordkeeping obligations. Google identity information is used for account identification, sign-in and access administration.
Sharing and service providers
Authorised firm personnel can access information needed for their work, and authorised clients can access records made available to their account. Clerk processes authentication information; Cloudflare provides hosting, database, document storage and service security for this deployment. Google processes your use of Google sign-in under its own policies. Information may also be disclosed where required by law or to protect legal rights. We do not sell personal information or use Google account information for advertising.
These service providers may process information in countries outside India. Their own privacy notices describe their processing: Clerk, Cloudflare and Google.
Cookies and security
Authentication services use cookies or similar browser storage to maintain sessions and protect sign-in. Blocking them may prevent the hub from working. We use encrypted web connections and account-based access controls. No online service can guarantee complete security; keep your account secure and report suspected unauthorised access promptly.
Retention and deletion
Information is retained for the purposes described above and for applicable professional, accounting, legal or dispute-related requirements. The period depends on the type of record and the engagement. Closing a login account does not automatically delete underlying client or professional records. Records that must be retained may remain after an access or deletion request.
Your choices and requests
Email hariaketan@gmail.com to request access, correction, account closure or deletion, or to raise a privacy concern. We may need to verify your identity and authority before acting and will explain any applicable retention restriction. Do not include passwords or sensitive documents in an initial email. You can also remove the app’s Google connection through your Google Account’s third-party connections settings; this does not by itself erase records held by the firm. Withdrawing access necessary for a feature may prevent us from providing it.
Testing and updates
The current test deployment is intended for evaluation using test records. Please do not upload live confidential client information until the firm confirms it is ready for operational use. We will update this page when our practices change and show the revised effective date.