Privacy Policy
This policy explains what personal data Nitish Saini, trading as Kinetraq, Noida, Uttar Pradesh, India (“Kinetraq”, “we”, “us”) collects through kinetraq.com and the Kinetraq application, why we collect it, who we share it with and what choices you have. We keep it as plain as we can. We do not sell personal data.
1. What we collect
- Waitlist: your email address, and the name, company and role if you choose to give them.
- Account: your email address, a hashed (not readable) password, workspace name, the country or region you select, and your plan and subscription status. If you turn on two-factor authentication, we store the secret in encrypted form.
- Your research workspace: brands, website addresses, competitors, research questions and settings that you enter, the AI answers and sources we collect for them, and reports and notes we generate. If you connect a Cloudflare token for agent-traffic monitoring, it is stored encrypted and used only to read that traffic data.
- Team members: if you invite someone, we store their email address and role and send them an invitation.
- Billing: Paddle collects your payment details and billing address. We do not see or store your full card number. We receive limited information such as a customer and subscription reference, plan, status and renewal date.
- Technical data: your IP address and request details in server and security logs (for example to stop abuse and enforce rate limits), a session cookie while you are signed in, and the signals our human-check provider uses to tell people from bots.
- Messages: emails you send us, and our emails to you.
2. Why we use it
- To run the service you asked for: create and secure your account, run scans and show reports.
- To take payment and keep your subscription correct, through Paddle.
- To send service emails: waitlist confirmation, account verification, password reset, invitations, receipts, and launch updates to people who joined the waitlist.
- To keep Kinetraq safe: prevent abuse, fraud and unauthorised access, and fix faults.
- To improve the product, using usage and aggregate information that does not identify you.
- To meet legal, tax and accounting duties.
Where privacy law requires a legal basis, we rely on performing our contract with you, our legitimate interest in running and protecting the service, your consent (for example for waitlist updates, which you can withdraw at any time), and legal obligation.
3. Who we share it with
We share data only with the service providers we need to run Kinetraq, and only the data they need:
- Paddle: payments, tax and receipts. Paddle is an independent merchant of record for your purchase and has its own privacy notice.
- AI providers (currently Anthropic, OpenAI, Google, Perplexity and Groq, as enabled): they receive the research questions we send, which can include your brand name, category, competitor names and text from public pages you ask us to analyse. We do not send them your password or billing details. Each provider handles that data under its own API terms.
- Email delivery: Resend sends our service emails. Our support mailbox runs on Titan Email (GoDaddy).
- Cloudflare: human verification (Turnstile) on forms, and the optional agent-traffic feature if you connect your own Cloudflare account.
- Hosting: DigitalOcean hosts the application and its database in the United States.
- Professional advisers, authorities or a buyer of the business, where the law requires it or in a sale of Kinetraq, with the same protection for your data.
4. Where data is processed
Kinetraq is operated from India and our servers are in the United States. Our providers may process data in other countries. Where the law requires safeguards for such transfers, we rely on the contractual protections our providers offer.
5. Cookies
We use one essential cookie that keeps you signed in (HTTP-only, so page scripts cannot read it). The landing page and plan page do not use advertising or analytics cookies. Our human-check provider and Paddle’s checkout may set their own cookies when you use those features; those are covered by their notices.
6. How long we keep data
- Waitlist details: until we have invited the waitlist or you ask us to remove you, whichever is first.
- Account and workspace data: while your account is open. If you ask us to delete your account we delete it, apart from records we must keep for tax, accounting or legal reasons.
- Server and security logs: for a limited period, then deleted or overwritten.
- Billing records: held by Paddle, and by us where the law requires.
7. Your choices and rights
You can ask us to show you the personal data we hold about you, correct it, delete it, or limit or object to how we use it. You can withdraw consent to emails at any time. To remove yourself from the waitlist, reply “remove” to any of our emails. For anything else, email privacy@kinetraq.com. We will reply within a reasonable time, and within the time that your local law requires. You can also complain to your local data protection authority.
8. Security
We use HTTPS, store passwords only as hashes, encrypt two-factor secrets and connection tokens at rest, limit who can reach the servers, and keep logs free of passwords and payment details. No system is perfectly secure, so please use a strong, unique password and turn on two-factor authentication.
9. Children
Kinetraq is for businesses and is not meant for anyone under 18. We do not knowingly collect data from children.
10. Changes and contact
If we change this policy in a way that matters, we will update the date above and tell you by email or in the product. Contact: privacy@kinetraq.com.