Privacy Policy

Who is responsible

Ruut Labs, a brand of Srishukla Rtlabs Pvt Ltd runs RUUT FLOW. For your account data we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023. For the personal data of your clients and contacts that you add to a workspace, your agency decides why it is used and we process it on your behalf.

Data we collect

• Account: name, email and password (stored only as a one-way hash). With Google sign-in we get your name, email and picture, never your Google password, Gmail or Drive.
• Workspace content: brands, Brand Brain files, drafts, images and videos, CRM contacts, deals, tasks and call notes your team adds.
• Connected accounts: access tokens from Meta, LinkedIn, WhatsApp or Google, stored encrypted and used only for what you ask.
• Billing: plan, payments and UPI reference numbers. Card and UPI details stay with Razorpay or your bank.
• Support: the questions you ask Support and what it checked in your workspace to answer them.
• Security and usage: sign-in times, IP address and basic logs.

How we use it

• To run the service: sign you in, keep your workspace, and write content grounded in your brand.
• To bill your plan and count AI Actions and credits.
• To keep the service secure, stop abuse and fix problems.
• To answer support requests and tell you about your account or important changes.

We do not sell your data, and we do not use your workspace content to train AI models.

AI processing

When you ask RUUT FLOW to write, check or create something, only the text needed for that task (your request and relevant brand passages) is sent to AI providers through our own gateway. They process it to return the result and do not keep it to train their models. Our monitoring records speed, cost and errors, never your prompts or content.

Where data is stored

Your workspace is stored on Google Cloud in Mumbai, India, in a private network, encrypted in transit and at rest. Every agency workspace is isolated from every other one inside the database itself, not only in our code.

Who we share it with

Only the service providers needed to run RUUT FLOW, under contract and confidentiality:

We also disclose data when the law requires it.

Retention and deletion

We keep your data while your account is active. When you ask us to delete your workspace, we delete it within 30 days, except records we must keep for tax, billing or legal reasons. Copies in our backups disappear as those backups expire.

Your rights

Under the DPDP Act, 2023 you can:

• see a summary of the personal data we hold about you and how it is used;
• correct, complete or erase it;
• withdraw consent for optional processing;
• name someone to use these rights for you;
• complain to our Grievance Officer, and then to the Data Protection Board of India.

Ask through Support or by email. You can also remove RUUT FLOW's access from your Google, Meta or LinkedIn account settings at any time.

Google user data

RUUT FLOW's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Changes

If we change this policy in a meaningful way, we tell workspace owners by email or in the app before the change takes effect.

Grievance Officer

Ajeet Shukla, Ruut Labs, a brand of Srishukla Rtlabs Pvt Ltd, India · contact@ruutlabs.in. We acknowledge within 24 hours and resolve within 15 days.