Last updated April 2026 · DPDP Act Compliant
Trust & Transparency.
Here is exactly what we collect, why, and what you can do about it. No legalese traps.
Information We Collect
Only what we need — name, email, usage patterns.
Account info — Your name and email address when you sign up via magic link authentication.
Payment info — Processed securely through Razorpay. We never store your card numbers, UPI IDs, or banking credentials.
Usage data — Pages visited, products viewed, and interactions to help us improve our offerings.
Cookies & Analytics
Essential cookies only. No ad tracking.
Essential cookies — Keep you signed in and remember your preferences. Cannot be disabled.
Error tracking — Sentry monitors errors and performance — collects browser type, device info, error logs.
No advertising — We do not use cookies for advertising or cross-site tracking. Manage preferences anytime.
Third-Party Services
Razorpay, Supabase, Resend, Sentry.
Razorpay — Processes all payments securely. Subject to Razorpay's Privacy Policy.
Supabase — Stores your account data and product access records securely.
Resend — Sends transactional emails — purchase confirmations and magic link logins.
Sentry — Monitors application errors and performance.
How We Use It
Delivery, support, improvements, compliance.
Product delivery — Deliver digital products you purchase and manage your account.
Communications — Send purchase confirmations and product access details.
Support — Respond to your support inquiries.
Improvements — Improve our platform, products, and user experience.
Legal — Comply with legal obligations.
Data Retention
Active accounts only. 30-day deletion.
Active accounts — We retain your info as long as your account is active or needed for product access.
Deletion — Request account deletion and we remove personal data within 30 days.
Legal holds — GST records retained for 7 years. Analytics data for 2 years. Session data for 30 days.
Your Rights
Access, correct, delete, withdraw consent.
Access — Access the personal data we hold about you.
Correction — Request correction of inaccurate data.
Deletion — Request deletion of your account and personal data.
Consent — Withdraw consent for promotional communications at any time.
Data Security
PCI DSS Level 1. 256-bit encryption.
Payment security — All payment processing handled by Razorpay — PCI DSS Level 1 compliant.
Encryption — All transactions encrypted using 256-bit SSL. 3D Secure for card payments.
Limitations — No method of internet transmission is 100% secure. We cannot guarantee absolute security.
No guaranteed results — AI-generated outputs depend on the platform, your inputs, and current model capabilities. Results may vary.
User responsibility — You are responsible for reviewing and validating all AI-generated content before use in professional or business contexts.
No liability for outputs — KreatiVishAI is not liable for errors, inaccuracies, or 'hallucinations' in AI-generated outputs from our skill packs or templates.
Tool, not advice — Our AI skill packs are educational tools, not professional advice. Consult qualified professionals for critical decisions.
Affiliate links — Some links in our ebooks, templates, and blog posts to third-party tools (like Claude, Midjourney, Vercel, Notion) may be affiliate links.
Commission — If you purchase through these links, we may earn a small commission at no additional cost to you.
Independence — Affiliate relationships do not influence our product recommendations. We only link to tools we genuinely use and trust.
Transparency — Affiliate links are clearly marked where required by law. This disclosure applies to all KreatiVishAI content.
Changes to This Policy
We notify you of significant updates.
Updates — We may update this Privacy Policy from time to time. Changes will be posted with a new date.
Notification — Significant changes are communicated by email or by a prominent notice on our website.
Acceptance — Continued use of KreatiVishAI after changes are posted constitutes acceptance of the updated policy.
Data Fiduciary — KreatiVishAI (operated under automatewithpriya.com) is the Data Fiduciary responsible for your personal data.
Processing basis — Order processing & authentication (contractual necessity). Analytics & marketing (with your explicit consent).
Retention — Transactions: 7 years (GST). Analytics: 2 years. Sessions: 30 days. Consent logs: indefinite (audit).
Your DPDP rights — Access, correction, erasure, withdraw consent, and nominate a representative to exercise your rights.
Grievance Officer — Contact kreativish.ai@gmail.com. We acknowledge within 48 hours and resolve within 30 days.