1. Introduction

This Privacy Policy explains how Auctra, operated by Keshiha Services Private Limited, collects, uses, stores, discloses, and protects personal data when you access or use our website, application, content generation tools, verification features, publishing workflows, and related services.

Keshiha Services Private Limited is located at:

In this Privacy Policy, “Auctra,” “Keshiha,” “we,” “us,” and “our” refer to Keshiha Services Private Limited and the Auctra service.

By using Auctra, you acknowledge that your personal data and user content may be processed as described in this Privacy Policy.

If you do not agree with this Privacy Policy, you should not use Auctra.

2. What this Privacy Policy covers

This Privacy Policy applies to:

• Auctra’s public website.
• Auctra’s web application.
• User accounts and profiles.
• Brand Profiles.
• Content generation workflows.
• Trust Panel and verification features.
• Content Library and Article Library features.
• Publishing connections and integrations.
• Contact, support, billing, and sales enquiries.
• Emails, forms, and other communications with us.

This Privacy Policy does not apply to third party websites, platforms, applications, or services that we do not control, even if they are linked from Auctra.

3. Personal data we collect

We may collect the following categories of personal data.

Account data

• Name
• Email address
• Password or authentication details
• Account settings
• Plan and subscription status
• Login and authentication records

Profile and Brand Profile data

Depending on how you use Auctra, this may include:

• Personal brand name
• Company brand name
• Role or title
• Website URL
• Tagline
• Industry or niche
• Target audience
• Expertise areas
• Core point of view
• Brand voice
• Products and services
• Keywords
• Topics to avoid
• Words or phrases to avoid
• CTA preferences
• Writing samples
• Credibility markers provided by you

Content and workflow data

This may include:

• Topics and prompts
• Generated drafts
• Generated articles
• Generated posts
• Generated images
• Uploaded or manually added article library content
• Content Library items
• Sources and verification metadata
• Trust Panel records
• Publishing status
• Platform variants
• Saved drafts and history

Connected account data

If you connect third party platforms, we may process data needed to provide integrations, such as:

• Connection status
• Access tokens or authorization data
• Account identifiers
• Publishing permissions
• Destination details
• Publishing results or error logs

We use connected account data only to provide the integration features requested by you.

Payment and billing data

Payments are processed by third party payment providers. We may receive or store limited billing related information, such as:

• Plan selected
• Payment status
• Transaction reference
• Invoice or receipt details
• Billing contact details
• Subscription renewal or cancellation status

We do not store full card numbers.

Website and device data

When you visit the website or use the app, we may collect:

• IP address
• Browser type
• Device type
• Operating system
• Referring page
• Pages visited
• Approximate location
• Session data
• Cookie and analytics data
• Error and performance logs

Communications data

When you contact us, we may collect:

• Name
• Email address
• Company or brand name
• Enquiry type
• Message content
• Support history
• Attachments or information you provide

4. How we collect personal data

We collect personal data:

• Directly from you when you create an account, complete forms, configure settings, generate content, upload materials, or contact us.
• Automatically when you use the website or application.
• From connected third party platforms where you authorize integrations.
• From payment providers for billing and subscription status.
• From service providers that help us operate, secure, analyze, and improve the Service.

5. Why we use personal data

We use personal data for the following purposes:

To provide the Service

• Create and manage your account.
• Generate content.
• Apply your Brand Profile.
• Store drafts and content assets.
• Generate images.
• Verify factual claims.
• Show Trust Panel outputs.
• Enable publishing workflows.
• Provide integrations you connect.

To operate subscriptions and billing

• Process plan access.
• Track credits and usage.
• Manage subscriptions.
• Process payments and refunds.
• Prevent fraud or payment abuse.

To improve product experience

• Understand feature usage.
• Fix bugs.
• Monitor performance.
• Improve workflows.
• Develop new features.
• Analyze aggregated product usage.

To communicate with you

• Respond to support requests.
• Send account notices.
• Send billing notices.
• Send product updates.
• Send security or policy updates.
• Respond to privacy requests.

To keep Auctra safe

• Prevent abuse.
• Detect fraud.
• Enforce plan limits.
• Protect accounts.
• Monitor security events.
• Investigate policy violations.

To comply with law

• Meet legal obligations.
• Maintain records where required.
• Respond to lawful requests.
• Enforce our Terms.
• Resolve disputes.

6. AI processing and third party providers

Auctra uses AI and third party providers to support content generation, research, claim verification, image generation, analysis, hosting, payments, communications, and related workflows.

When you use AI features, relevant inputs may be sent to third party AI providers or infrastructure providers to process your request.

This may include:

• Topic inputs
• Selected settings
• Brand Profile context
• Writing samples, if provided
• Article Library content, if selected for use
• Research data
• Generated outputs
• Verification data
• Image prompts
• We only send information that is reasonably needed to provide the requested feature.
• Auctra does not sell your content.
• Auctra does not use customer content to train shared AI models unless you explicitly opt in, where such an option is provided.
• Third party AI providers may process inputs and outputs according to their own enterprise, API, or service terms. Provider categories are disclosed at a category level in this policy.

7. Legal basis and lawful processing

Depending on your location and the nature of processing, we may process personal data based on:

• Your consent.
• Performance of a contract with you.
• Compliance with legal obligations.
• Legitimate business purposes such as operating, securing, improving, and supporting Auctra.
• Other lawful grounds available under applicable law.
• Where consent is required, you may be able to withdraw consent by using account settings or contacting us.

8. How we share personal data

We may share personal data with:

• Service providers
• We may share data with providers that help us operate Auctra, including AI providers, cloud hosting providers, payment processors, email providers, analytics providers, security providers, and form handling services.
• Payment providers
• Payment information may be processed by payment gateways and related financial service providers.
• Connected platforms

When you connect a publishing platform, we may share data with that platform as needed to publish, draft, edit, or manage content according to your instructions.

Legal and safety purposes

We may disclose data if we believe it is necessary to:

• Comply with law.
• Respond to lawful requests.
• Enforce our Terms.
• Prevent fraud or abuse.
• Protect users, Auctra, Keshiha, or others.
• Investigate security incidents.
• Business transfers
• If Auctra or Keshiha is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, personal data may be transferred as part of that transaction, subject to appropriate protections.

9. International data transfers

Auctra may process and store data in India or other countries where our service providers operate.

By using Auctra, you understand that your data may be processed outside your country of residence.

Where required, we aim to use appropriate safeguards for cross border transfers.

10. Data retention

We retain personal data only as long as needed for the purposes described in this Privacy Policy, unless a longer retention period is required by law, tax, accounting, security, fraud prevention, dispute resolution, or compliance needs.

General retention approach:

• Account data is retained while your account is active.
• Billing and transaction records may be retained as required by law.
• Generated assets remain until deleted by you or your account is deleted.
• Claim and source metadata may be retained with the related content asset.
• Deleted user generated assets are targeted for hard deletion within 30 days, unless retention is required by law, security, backup, dispute, or fraud prevention needs.
• Debug logs containing user content are retained only for a limited period, typically up to 30 days.
• Aggregated or anonymized analytics may be retained longer.

More details are available in the Data Retention Policy.

11. Your choices and rights

Depending on your location and applicable law, you may have rights to:

• Access personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of personal data.
• Withdraw consent where processing is based on consent.
• Ask for information about how your data is processed.
• Object to or restrict certain processing where applicable.
• Request grievance redressal or lodge a complaint where applicable.
• To exercise these rights, contact us at hello@getauctra.com.
• We may need to verify your identity before processing a request.

Some data may be retained where required for legal, security, fraud prevention, billing, dispute, or compliance reasons.

12. Account deletion

You may request account deletion by contacting hello@getauctra.com or through account settings if available.

When your account is deleted, we will delete or anonymize eligible personal data according to our Data Retention Policy.

Some records may be retained where required for:

• Legal compliance
• Tax and accounting
• Payment records
• Fraud prevention
• Security logs
• Dispute resolution
• Enforcement of Terms

13. Cookies and analytics

Auctra may use cookies, pixels, local storage, and similar technologies for:

• Website functionality
• Login sessions
• Security
• Preferences
• Analytics
• Performance measurement
• Product improvement
• Marketing attribution, if enabled
• You can learn more in the Cookie Policy.

14. Security

We use reasonable technical and organizational measures to protect personal data.

These may include:

• Access controls
• Encryption where appropriate
• Secure authentication
• Provider security review
• Logging and monitoring
• Data minimization
• Internal access restrictions
• Incident response processes
• No system can be guaranteed completely secure. If you believe your account or data may be at risk, contact us at hello@getauctra.com.

15. Children’s privacy

Auctra is not designed for children.

You must not use Auctra if you are under the age required to consent to digital services in your jurisdiction unless appropriate parental or guardian consent is in place.

We do not knowingly collect personal data from children in a way that violates applicable law.

16. Marketing communications

We may send product updates, educational content, feature announcements, or marketing communications where permitted.

You can unsubscribe from marketing emails using the unsubscribe link in the email or by contacting us.

We may still send transactional, account, billing, security, or policy related messages.

17. Third party links

Auctra may contain links to third party websites, sources, platforms, or services.

We are not responsible for the privacy practices, content, or security of third party websites or services.

You should review their policies before using them.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If changes are material, we will take reasonable steps to notify users, such as by posting an updated version on the website or through the Service.

Your continued use of Auctra after an updated Privacy Policy becomes effective means you acknowledge the updated policy.

19. Contact us

For privacy questions, data requests, or concerns, contact:

Auctra

Email: hello@getauctra.com