Privacy Policy

Kruti.io ("the Service") is an AI-powered LinkedIn content generation platform operated by Cinute Digital Pvt. Ltd. This Privacy Policy describes how the Service collects, uses, stores, shares and protects your personal information. It applies to every user of the Service, whether on a free trial or a paid subscription. By using Kruti.io you agree to the practices described here.

Account Information via LinkedIn OAuth

When you sign in, Kruti.io receives information from LinkedIn through LinkedIn's OAuth 2.0 and OpenID Connect protocol, using the scopes openid, profile, email and w_member_social. The information received is: your full name; your email address; your profile picture URL; your professional headline; and your LinkedIn profile identifier. Kruti.io never receives or stores your LinkedIn password.

Profile Data You Provide

Information you enter to shape your content: your professional summary and industry; your skills and expertise topics; your content positioning and tone preferences; your content goals and styles; a description of your target audience; your posting schedule preferences; your post signature or sign-off text; and your Human Mode preference, which is a writing-style setting.

Content Data

The material the Service generates and stores for you: AI-generated content plans, including weekly strategies, pillars and themes; posts, including titles, body text, hashtags, AI image prompts and generated images; newsletter drafts, including titles, subjects and bodies; and content repurposing outputs such as social threads, blog posts and emails.

Payment Information

Payments are processed by Razorpay. Kruti.io stores only: your Razorpay customer identifier; your Razorpay subscription identifier; your selected plan and currency preference (INR or USD); and your subscription status and billing period dates. Kruti.io does NOT store your credit card numbers, bank account details, UPI IDs, or any payment instrument information. All sensitive payment data is handled exclusively by Razorpay.

Technical Data

Session tokens used for authentication (JWT-based); server access logs, which include IP addresses, timestamps and user agent strings; and error logs used for debugging and service improvement.

AI Content Generation

Your profile data and preferences are used to generate content plans, posts, images and newsletter drafts tailored to you.

Personalization

Your headline, skills, industry, tone preferences and audience description are used to shape the strategy and the voice of what is generated.

LinkedIn Posting

Posts you have approved are published to your LinkedIn account using the w_member_social scope authorization you granted at sign-in.

Payment Processing

Your Razorpay identifiers, plan, currency and subscription status are used to manage your subscription, billing and renewals.

Transactional Emails

Your email address is used to send service messages such as account, billing and subscription notifications.

Service Improvement

Aggregated usage and error information is used to diagnose problems and improve the platform.

Legal Compliance

Information may be used or retained where necessary to comply with applicable law and to enforce the Terms of Service.

Models Used

Kruti.io uses Google Gemini 2.5 Pro for text generation and Google Imagen 3 for image generation.

Data Sent to Google

The following is sent to Google's APIs to generate content on your behalf: your professional headline, skills and industry; your tone preferences, content goals and positioning; content context, such as previous posts used for continuity; your target audience description; and image generation prompts for Imagen 3. Google's Generative AI Terms of Service and Privacy Policy govern how Google handles this data.

No Model Training

Kruti.io does not use your data to train AI models. Google's API services are used solely to generate content on your behalf.

LinkedIn Corporation

Authentication via OAuth 2.0 and publishing of approved content to your LinkedIn account.

Google (Gemini & Imagen)

AI text and image generation.

Razorpay

Payment processing for subscriptions.

Resend

Transactional email delivery service.

Kruti.io uses essential cookies for authentication and session management. Full details are set out in the Kruti.io Cookie Policy at kruti.io/cookies.

Security Measures

Data is encrypted in transit using HTTPS and TLS; authentication uses a secure JWT strategy; database access is restricted through application-level controls; payment data is handled exclusively by PCI-DSS compliant Razorpay; and LinkedIn OAuth tokens are stored securely and used only for authorized actions.

No Sale of Data

Kruti.io does not sell, rent, or trade your personal data to third parties for marketing or any other purpose.

Account data

Retained for as long as your account remains active.

Content data

Posts, content plans and newsletters are retained so that you can continue to access and use them.

Upon account deletion

All user data, content plans, posts and newsletters are permanently deleted from the database, and the deletion cascades through all related records.

Payment records

Razorpay may retain transaction records in accordance with its own policies and applicable financial regulations.

Server logs

Access and error logs are retained for up to 90 days.

Under Indian Law (IT Act, 2000 & SPDI Rules, 2011)

You have the right to access the personal information held about you; the right to correct information that is inaccurate; and the right to withdraw consent for the processing of sensitive personal data.

Under GDPR (for users in the European Union)

If you are located in the EU or EEA, you additionally have the right to data portability; the right to erasure; the right to restriction of processing; the right to object to processing based on legitimate interests; and the right to lodge a complaint with a supervisory authority.

How to Exercise Your Rights

To delete your account, email support@kruti.io. To export your data, email support@kruti.io. To revoke Kruti.io's access to your LinkedIn account, use LinkedIn's own Settings, under Data Privacy and Permitted Services.

Kruti.io is not intended for individuals under the age of 18. Kruti.io does not knowingly collect personal information from minors.

Google (United States)

AI content and image generation via the Gemini and Imagen APIs.

Razorpay (India)

Payment processing.

Infrastructure providers

Hosting and CDN services.

Kruti.io may update this Privacy Policy from time to time. The "Last Updated" date will be revised when it does. For significant changes, users will be notified by email or through an in-app notification. Continued use of the Service after a change constitutes acceptance of the revised policy.

Cinute Digital Pvt. Ltd. Email: support@kruti.io Website: kruti.io

Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the Grievance Officer can be contacted at support@kruti.io. Grievances are acknowledged within 24 hours and resolved within 30 days.