Privacy Policy

Welcome to Kruti.io (“we,” “us,” or “our”), an AI-powered LinkedIn content generation platform operated by Cinute Digital Pvt. Ltd., a company incorporated under the laws of India.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our platform at kruti.io (the “Service”). By accessing or using Kruti.io, you acknowledge that you have read and understood this Privacy Policy.

We are committed to protecting your privacy and handling your data transparently. This policy applies to all users of the Service, including those on free trials and paid subscriptions.

We collect the following categories of information:

a) Account Information via LinkedIn OAuth

When you sign in using LinkedIn, we receive and store the following through LinkedIn’s OAuth 2.0 / OpenID Connect protocol (scopes: openid, profile, email, w_member_social):

• Full name
• Email address
• Profile picture URL
• Professional headline
• LinkedIn profile identifier

b) Profile Data You Provide

During onboarding and in your Settings, you may provide additional information to personalize your content generation experience:

• Professional summary and industry
• Skills and expertise topics
• Content positioning and tone preferences
• Content goals and styles
• Target audience description
• Posting schedule preferences
• Post signature / sign-off text
• Human Mode preference (writing style setting)

c) Content Data

We store the content you create and generate using our platform:

• AI-generated content plans (weekly strategies, pillars, themes)
• Posts (titles, body text, hashtags, AI image prompts, generated images)
• Newsletter drafts (titles, subjects, bodies)
• Content repurposing outputs (Twitter threads, blog posts, emails)

d) Payment Information

Subscription payments are processed by Razorpay. We store only:

• Razorpay customer identifier
• Razorpay subscription identifier
• Selected plan and currency preference (INR or USD)
• Subscription status and billing period dates

We do NOT store your credit card numbers, bank account details, UPI IDs, or any payment instrument information. All sensitive payment data is handled exclusively by Razorpay.

e) Technical Data

• Session tokens (JWT-based authentication)
• Server access logs (IP addresses, timestamps, user agent strings)
• Error logs for debugging and service improvement

We use your information for the following purposes:

• AI Content Generation: Your profile data, preferences, and content history are used to generate personalized LinkedIn posts, content strategies, images, and newsletters via Google’s Generative AI services.
• Personalization: To tailor content recommendations, tone, and strategy to your professional profile and goals.
• LinkedIn Posting: To post content to your LinkedIn profile on your behalf using the w_member_social scope authorization.
• Payment Processing: To manage your subscription, process payments via Razorpay, and handle billing-related communications.
• Transactional Emails: To send account-related notifications and newsletter deliveries.
• Service Improvement: To monitor platform performance, fix issues, and improve features.
• Legal Compliance: To comply with applicable laws and respond to legal requests.

Kruti.io uses Google Gemini 2.5 Pro for text generation and Google Imagen 3 for image generation. When generating content, we send the following data to Google’s AI APIs:

• Your professional headline, skills, and industry
• Your tone preferences, content goals, and positioning
• Content context (e.g., previous posts for continuity)
• Your target audience description
• Image generation prompts (for Imagen 3)

This data is transmitted securely to Google’s servers for processing. Google’s Generative AI Terms of Service and Privacy Policy govern how Google handles this data.

Kruti.io does not use your data to train AI models. We use Google’s API services solely for generating content on your behalf.

We integrate with the following third-party services, each governed by their own privacy policies:

• LinkedIn Corporation: Authentication (OAuth 2.0) and content posting. Subject to LinkedIn’s Privacy Policy.
• Google (Gemini & Imagen): AI content and image generation. Subject to Google’s Privacy Policy.
• Razorpay: Payment processing for subscriptions. Subject to Razorpay’s Privacy Policy.
• Resend: Transactional email delivery service.

We use essential cookies for authentication and session management. We do not use third-party advertising or analytics cookies.

For a detailed breakdown of cookies and similar technologies we use, please refer to our Cookie Policy.

We implement appropriate technical and organizational measures to protect your data:

• All data is transmitted over HTTPS (TLS encryption in transit)
• Authentication managed via secure JWT (JSON Web Token) strategy
• Database access restricted through application-level controls
• Payment data handled exclusively by PCI-DSS compliant Razorpay
• LinkedIn OAuth tokens stored securely and used only for authorized actions

We do not sell, rent, or trade your personal data to third parties for marketing or any other purpose.

• Account data is retained for as long as your account is active.
• Content data (posts, plans, newsletters) is retained for your continued access and use.
• Upon account deletion: All user data, content plans, posts, and newsletters are permanently deleted from our database. This deletion cascades through all related records.
• Payment records: Razorpay may retain transaction records in accordance with their data retention policies and applicable financial regulations.
• Server logs: Access and error logs are retained for up to 90 days for debugging and security purposes.

Under Indian Law (IT Act, 2000 & SPDI Rules, 2011)

As a user based in India, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate personal data
• Withdraw consent for processing your sensitive personal data

Under GDPR (for users in the European Union)

If you are located in the EU/EEA, you additionally have the right to:

• Data portability — receive your data in a structured, machine-readable format
• Erasure (“right to be forgotten”) — request deletion of your data
• Restriction of processing
• Object to processing based on legitimate interests
• Lodge a complaint with a supervisory authority

How to Exercise Your Rights

• Delete your account: Contact us at support@kruti.io to request complete account and data deletion.
• Export your data: Request a copy of your data by emailing support@kruti.io.
• Revoke LinkedIn access: You can disconnect Kruti.io from your LinkedIn account at any time via LinkedIn’s Settings > Data Privacy > Permitted Services.

Kruti.io is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us at support@kruti.io, and we will promptly delete such information.

Your data may be processed in jurisdictions outside your country of residence:

• Google (United States): AI content generation via Google Gemini and Imagen APIs
• Razorpay (India): Payment processing
• Infrastructure providers: Hosting and CDN services

Where data is transferred internationally, we ensure appropriate safeguards are in place, including compliance with applicable data protection regulations.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page
• Notify you via email or an in-app notification for significant changes

Your continued use of Kruti.io after changes are posted constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Grievance Officer: In accordance with the Information Technology Act, 2000 and the rules made thereunder, the Grievance Officer can be contacted at support@kruti.io. We will acknowledge your grievance within 24 hours and resolve it within 30 days.