Privacy Policy
Who we are
kryotta.ai (the “Service”) is a product of Exavibes Services Private Limited (“Exavibes”, “we”, “us”, “our”), a private limited company incorporated under the Companies Act, 2013 and registered with the Ministry of Corporate Affairs (MCA), India, having its registered office at 912 Gold Crest Business Center, LT Road, Borivali West, Mumbai 400092, Maharashtra, India. Exavibes is the data fiduciary responsible for the personal data processed through the Service.
Scope of this policy
This Privacy Policy explains what information we collect when you visit kryotta.ai or use the Service, how we use and share it, how long we keep it, and the rights and choices available to you. It applies to our website, web application, and any related channels we operate. By using the Service you agree to the practices described here; if you do not agree, please do not use the Service.
Information we collect
Account information: your name, email address, phone number, company name and password when you register. Content: the prompts, files, documents, images and other material you submit to the Service, and the outputs generated for you. Billing information: your plan, transaction history and payment identifiers — card and payment credentials are handled by our payment processors and are never stored on our servers. Technical information: device type, browser, IP address, approximate location, pages visited, and usage events collected through cookies and similar technologies to operate, secure and improve the Service. Communications: messages you send us through the contact form, support channels or email.
How we use your information
We use your information to create and manage your account; provide the Service, including routing your prompts to AI models and returning results; process subscriptions and payments; pool and meter token usage across your workspace; respond to support requests; send service and billing communications; monitor for fraud, abuse and security incidents; improve features and performance; and comply with applicable law. We process personal data on the legal bases of contract performance, legitimate interest, consent (where required), and legal obligation. We do not sell your personal data.
AI processing & third-party model providers
Prompts and content you submit are transmitted to trusted third-party AI model providers (such as the providers of Claude, ChatGPT, Gemini, Llama, Mistral, DeepSeek and similar models, or cloud platforms that host them) solely to generate the responses you request. These providers process your content as our processors or independent providers under their own enterprise terms. We do not permit your business content to be used to train third-party foundation models, and we do not use it to train models of our own.
Payments
Payments are processed by regulated third-party payment providers appropriate to your market (for example card networks, UPI, M-Pesa, Pix or bank transfer providers). Your payment credentials are collected and processed directly by those providers under their own privacy policies. We receive only confirmation of payment, limited transaction metadata and, where you use the AI Back Office features, the statements you choose to import.
Cookies & analytics
We use strictly necessary cookies to keep you signed in and secure the Service, and analytics cookies to understand aggregate usage so we can improve the product. You can control cookies through your browser settings; disabling necessary cookies may prevent parts of the Service from working.
Sharing & disclosure
We share personal data only with: (a) the AI model and cloud infrastructure providers needed to deliver the Service; (b) payment processors; (c) service providers such as email delivery and analytics vendors bound by confidentiality obligations; (d) professional advisers, regulators, courts or law-enforcement agencies where required by applicable law; and (e) a successor entity in the event of a merger, acquisition or restructuring, subject to this policy. Workspace administrators can see the members, usage and content within their own workspace.
Data storage, security & retention
Data is encrypted in transit (TLS) and at rest, and stored with reputable cloud providers. We apply role-based access controls, audit logging, and the principle of least privilege internally. We retain personal data for as long as your account is active and thereafter only as long as needed for legitimate business or legal purposes, after which it is deleted or anonymised. You may delete individual conversations and content from your workspace at any time.
International transfers
Our infrastructure and model providers may process data in countries other than your own. Where personal data of Indian users is transferred outside India, we do so in accordance with the Digital Personal Data Protection Act, 2023 and other applicable law, using providers that offer appropriate contractual and security safeguards.
Your rights
Subject to applicable law — including the Digital Personal Data Protection Act, 2023 for users in India and the GDPR for users in the EEA/UK — you may request access to, correction of, export of, or deletion of your personal data; withdraw consent; and nominate a person to exercise your rights in case of death or incapacity. Write to privacy@kryotta.ai and we will respond within the timelines prescribed by law. You also have the right to complain to your supervisory authority, including the Data Protection Board of India.
Children's privacy
The Service is intended for business use and is not directed to children. You must be at least 18 years old (or the age of majority in your jurisdiction) to create an account. We do not knowingly collect personal data from children; if you believe a child has provided us data, contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email, and the “Last updated” date above will always reflect the current version. Continued use of the Service after a change takes effect constitutes acceptance of the revised policy.
Grievance officer & contact
In accordance with the Information Technology Act, 2000, the rules made thereunder and the Digital Personal Data Protection Act, 2023, you may address privacy questions, requests or grievances to our Grievance Officer: Exavibes Services Private Limited, 912 Gold Crest Business Center, LT Road, Borivali West, Mumbai 400092, Maharashtra, India · Email: privacy@kryotta.ai (or legal@kryotta.ai). We acknowledge and resolve grievances within the timelines prescribed by applicable law.