Last updated: August 2026
All traffic to and from the Platform is protected with TLS 1.2+ (HTTPS, Let's Encrypt certificate, automatic renewal) — data in transit is encrypted end to end. Sensitive fields are encrypted at rest, and credentials are stored only as salted hashes (bcrypt/argon2-class) — we cannot recover your password, only reset it.
Subscriber data is stored on servers located in Bangladesh (cPanel hosting, Dhaka), keeping your property and tenant records inside the country. Backups are encrypted before transfer to off-site storage.
Every organization's data is scoped to its own account: owners, managers, tenants, service partners and legal consultants see only the records their role permits. The platform enforces role-based access control on every API call, not just in the UI. You can review your data at any time with the built-in GDPR/data export tool.
Accounts are protected by email verification and optional two-factor authentication (TOTP). Login attempts are throttled and monitored for abuse. Sessions expire automatically and can be revoked from Settings at any time.
The database is backed up daily to off-site storage, and a monthly restore drill verifies the backups can actually be restored. Uptime is monitored every minute with automated alerts on any outage.
KR, the AI assistant, processes only the data you explicitly send it within your account. Prompt/response pairs are logged for audit and abuse prevention; you can disable AI features from Settings if you prefer not to use them. See our Privacy Policy for details.
We do not store card numbers. Card and wallet payments are processed by licensed gateways (SSLCommerz, bKash) in their own PCI-DSS-compliant environments; we only record the reference and amount of each transaction.
We take security reports seriously. If you find a vulnerability in the Platform, please email security@krtaker.com with a description and steps to reproduce. We will respond within 5 business days, keep you informed as we fix it, and will not take legal action against good-faith researchers who follow responsible disclosure (no data exfiltration, no disruption, no public disclosure before we release a fix).
Questions about security or data protection: security@krtaker.com or via the contact form.
Join property owners managing ৳75.55 Cr in property with KRTaker.
45+ vetted service partners across Dhaka — one pipeline for quotes, QC and payouts.
Every partner is background-checked, rated by tenants, and paid only after QC passes.