Privacy Policy

This policy explains what personal data AMPLIFOLD AI PRIVATE LIMITED collects when you use Kryttle, why we collect it, how long we keep it, and the rights you can exercise over it.

Effective 9 September 2026.

Who we are

Kryttle is operated by AMPLIFOLD AI PRIVATE LIMITED, a company incorporated in India with its registered office at A1301, Purva Westend, Service Road, Kudlu Gate, Bommanahalli, Bangalore, Karnataka, 560068, India. For personal data you provide to us directly, we are the Data Fiduciary. For personal data your organisation loads into its Kryttle workspace, your organisation is the Data Fiduciary and we act as its Data Processor under the agreement between us.

What we collect

  • Account data. Name, work email address, organisation name, and role, supplied when an account is created or a teammate is invited.
  • Workspace content. The documents, records, connections, agents, reports and apps you and your teammates create or upload into your workspace.
  • Connected system data. Where you connect a third-party system, the data that connection is scoped to read, plus the credentials or tokens needed to maintain it.
  • Usage and diagnostic data. Log records of requests to the service, including IP address, browser and device type, timestamps, and error traces.
  • Enquiry data. Anything you send us by email or through a form on this website.

Why we process it

  • To provide, operate and secure the service.
  • To authenticate users and enforce workspace permissions.
  • To run the agents, reports, workflows and apps you configure, including sending your content to the model providers those features depend on.
  • To investigate faults, abuse and security incidents.
  • To respond to your enquiries and send service notices. Marketing email is sent only with consent, and every message carries an unsubscribe link.
  • To meet our legal, tax and accounting obligations.

Model providers and workspace content

Kryttle sends workspace content to third-party model providers in order to run the features you invoke. We contract for those providers not to train their models on content submitted through our API access. We do not sell personal data, and we do not use your workspace content to train models of our own.

Sub-processors

We use a limited set of vendors to host and run the service: infrastructure and hosting providers, model providers, error monitoring, and email delivery. Each is bound by contract to confidentiality and security obligations no weaker than those in this policy. Write to privacy@kryttle.com for the current list.

International transfers

Some of our sub-processors operate outside India. Where personal data is transferred abroad, we transfer only to jurisdictions permitted under the DPDP Act and require contractual safeguards equivalent to those we apply ourselves.

How long we keep it

Workspace content is retained for as long as your organisation's account is active. On termination, content is deleted within 30 days unless we are required to retain it by law. Log and diagnostic data is retained for up to 12 months. Enquiry correspondence is retained for up to 24 months.

Security

Data is encrypted in transit with TLS and at rest. Access to production systems is restricted to named personnel, requires multi-factor authentication, and is logged. Workspace data is isolated per organisation. We will notify you and the Data Protection Board of India of a personal data breach as required by the DPDP Act. See our security documentation for more.

Your rights

Under the DPDP Act, 2023 you may:

  • Ask for a summary of the personal data we hold about you.
  • Ask us to correct, complete or update inaccurate data.
  • Ask us to erase your data, where we are not required to keep it.
  • Withdraw a consent you previously gave, at any time.
  • Nominate another person to exercise these rights for you.
  • Raise a grievance, and escalate it to the Data Protection Board of India.

Where your organisation controls the workspace, we will route your request to them and assist them in answering it.

Children

Kryttle is a business product and is not offered to children. We do not knowingly process the personal data of anyone under 18.

Changes to this policy

We will post any revision on this page and update the effective date above. Material changes will also be notified by email to account administrators.

Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made under it, and with the DPDP Act, 2023:

  • Akash Nagar, Grievance Officer
  • grievance@kryttle.com
  • AMPLIFOLD AI PRIVATE LIMITED, A1301, Purva Westend, Service Road, Kudlu Gate, Bommanahalli, Bangalore, Karnataka, 560068, India

We acknowledge grievances within 24 hours and resolve them within 15 days of receipt.

Contact

Privacy questions: privacy@kryttle.com. Everything else: hello@kryttle.com, or the contact page.