K-MailSign
K-MailSign security, privacy and where your data is kept
This page explains how K-MailSign protects your organisation’s data and what it can and cannot access.
Last updated
What you need
- The Owner role to delete the organisation
- Your account email to ask for full deletion
Check who did what
- Click Activity log in the sidebar.
- Read the newest entries at the top.
- Click Load older to see earlier changes.
Delete the organisation
- Sign in as an Owner and open Settings.
- Under Export your data, click Download export (.zip) and keep the file.
- Under Danger zone, click Delete organisation.
- Type the organisation name exactly and confirm. Members lose access at once.
- For full erasure, write from your account email to hello@khanals.in.
Good to know
- Sign-in is through Khanal ID with two-step verification. Each organisation is separate, and every request is checked against your membership of the current organisation.
- Your records are in a K-MailSign database on Khanal Group servers in India. Logos, employee photos and banners are also there, at long random addresses that anyone with the address can open, because your recipients’ mail programs must load them. Every image is re-encoded, which removes its metadata.
- K-MailSign never reads mail. Google access covers Gmail signature settings and reading users and domains. Microsoft access reads user profiles and domains, and writes back profile changes when you use two-way sync. Server-side signatures run inside Exchange. Link tracking stores only a click count per link.
- The activity log cannot be edited or deleted, and it records every data export. The export never contains passwords, Google or Microsoft tokens or add-in keys. Backups are encrypted and kept up to 12 months. See Security and Export or delete your data.
Common errors
"Type the organisation name exactly to confirm."
Type the name exactly as shown in Settings, including capital letters and spaces.
Is a deleted organisation erased at once?
No. Deleting removes access at once, but the data is kept and can be restored on request. To erase it, write to hello@khanals.in; we delete it within 90 days, except what the law requires us to keep.
How do I revoke K-MailSign’s access to Google or Microsoft?
Click Disconnect on Integrations. Then remove the app in Google Admin (API controls) or Microsoft Entra (Enterprise applications).
Can someone else see our employee photos?
Only a person who has the exact image address, such as someone who received an email with the signature. The addresses are long and random and are not listed anywhere.
Still stuck?
Email hello@khanals.in with the app name, what you clicked and the exact message you saw. Do not send passwords, PINs or authenticator codes. You can also use the contact page.