1. What this covers
This policy covers two different things: the krtiq website, which anyone can browse, and a krtiq workspace, which holds the contracts a customer uploads. They are treated separately throughout, because almost nothing we collect on the website has anything to do with the documents in a workspace, and the two are never combined. krtiq is operated from India. Write to info@krtiq.com with anything raised here.
2. The website: analytics, only if you accept
We use PostHog to count page visits and see which pages actually help people evaluate krtiq. Nothing analytics-related runs until you accept it in the cookie banner: the script is not downloaded, no cookie is set, and no request is made. If you decline, or simply never answer, that stays true for the whole visit. If you accept, PostHog sets cookies under the ph_ prefix and records the pages you view, the site that referred you, an approximate location derived from your IP address, your browser and device type, and a random visitor identifier. It is processed on PostHog's European infrastructure. We do not sell it, use it for advertising, share it with advertising networks, or connect it to anything in a workspace.
3. Changing your mind
Choose Cookie settings in the footer of any page to change your answer at any time. Declining stops collection immediately, clears the analytics cookies from your browser, and discards the visitor identifier. Withdrawing is meant to be exactly as easy as accepting, and it costs you nothing: every page and every feature behaves identically either way. Your browser's own cookie controls and tracking-protection settings work as well.
4. The cookies we set without asking
Only the ones the service cannot run without: the cookie that keeps you signed in, and the record of the cookie choice you made. Neither tracks you across other websites and neither has an advertising function. There is no version of an account that works without a session cookie, which is why these are not offered as a choice.
5. Contacting us and requesting a demo
The demo request form collects your name and work email, and optionally your company, your approximate contract volume, and what you would like to understand. We use it to reply to you and to prepare for that conversation. We do not add you to a mailing list on the strength of a demo request, and we do not pass your details to anyone else.
6. Contracts and content in your workspace
Documents you upload, the values extracted from them, and anything reached through a Google Workspace or Microsoft 365 connector remain yours. We process them for one purpose: running the service for you — extraction, comparison, search, and the answers the assistant returns with their citations. Your contracts are not used to train models, are not shared with other customers, are not used for our own product analytics, and are not read by us except where you ask for support and we need to look at a specific document to help. Connector credentials are stored encrypted and you can revoke them from your side at any time.
7. Who else processes data for us
A short list, each bound to use the data only to provide their service to us: Supabase for authentication, the application database, and storage of the original files you upload; Azure OpenAI for extraction and assistant responses, on terms that do not permit your content to be used to train their models; Sanity for the articles published on this website; and PostHog for the website analytics described above. The search index and the relationship graph built from your documents run on krtiq's own server rather than a third party's. We will tell you the current list, with locations, if you ask before uploading anything.
8. Where processing happens
Website analytics are processed in the European Union. Service infrastructure and model processing may take place in other regions, including the European Union, the United States, and India, under the contractual protections each provider offers for international transfers. If your organisation requires a specific region, raise it before you upload anything rather than after.
9. How long we keep things
Website analytics events are retained for twelve months. Demo requests and related correspondence are kept for twenty-four months unless you ask us to delete them sooner. Workspace content is kept for as long as the workspace exists; when a workspace is deleted, its documents and extracted data are removed from live systems within thirty days and from backups within ninety days. Records we are required by law to retain are kept for the period the law specifies and nothing longer.
10. Your rights
Under India's Digital Personal Data Protection Act, 2023, and under the EU or UK GDPR where it applies to you, you can ask for a copy of your personal data, ask us to correct or erase it, ask us to restrict or stop a particular use, ask for it in a portable form, and withdraw any consent you have given. Send the request to info@krtiq.com; we will respond within thirty days. You may nominate another person to exercise these rights on your behalf. If you are not satisfied, you may complain to India's Data Protection Board or to your local supervisory authority.
11. Security
Traffic is encrypted in transit, credentials and connector tokens are encrypted at rest, and each workspace's data is separated from every other. No system is perfectly secure, and we will not pretend otherwise. If a breach affects your data we will notify you and the relevant authority without undue delay, and tell you what we know rather than what is comfortable.
12. Children
krtiq is a tool for businesses and is not directed at anyone under eighteen. We do not knowingly collect their personal data, and will delete it if we discover we have.
13. Changes, and how to reach us
When this policy changes we update the date at the top of this page. If what we collect changes materially, we will ask for your consent again rather than rely on the answer you gave to an earlier version. Questions, requests, and complaints: info@krtiq.com. This policy is governed by the laws of India, and any dispute arising from it will be referred to arbitration seated at Haridwar, Uttarakhand.