Krevow — Privacy Policy
Effective date: [DATE OF LAUNCH] Last updated: [DATE OF LAUNCH]
Plain English Summary (not a lawyer? read this first)
This is a summary only. The full legal policy below applies.
- What we collect: Your name, email, files you upload, order details, payment references, and basic analytics
- Why we collect it: To deliver your order, communicate with you, and improve the service
- Who we share it with: Payment providers (PayPal/Razorpay), email service (Resend), analytics (Google Analytics), file scanner (VirusTotal). Nobody else.
- Your files: Stored securely and deleted automatically 14 days after delivery
- Your rights: You can request your data, correct it, delete it, or export it at any time
- Cookies: We use session cookies (to keep you logged in) and analytics cookies (to understand traffic). You can decline analytics cookies.
- Age: We do not knowingly collect data from anyone under 18
- Contact: privacy@krevow.store for any privacy questions
Full Privacy Policy
1. Introduction
Kartikey Mishra, operating as Krevow (“Krevow,” “we,” “us,” or “our”) at krevow.store, is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, who we share it with, and what rights you have over it.
This policy applies to all users of krevow.store, including visitors, registered customers, and anyone who contacts us.
By using Krevow, you agree to the collection and use of information in accordance with this policy.
2. Data We Collect
2.1 Account Information When you create an account, we collect:
- Full name
- Email address
- Password (stored as a cryptographic hash — we never store your plain text password)
- Account creation date
- Login method (email/password, Google, Apple, or GitHub)
2.2 Order Information When you place an order, we collect:
- Service selected
- Written brief you provide
- Expected and actual delivery dates
- Order status history
- Messages exchanged between you and Krevow
2.3 Uploaded Files Files you upload as part of an order (raw footage, documents, screenshots, replay files, etc.) are stored securely and used solely to complete your order. Files are automatically deleted 14 days after delivery.
2.4 Payment Information We collect:
- Order amount and currency
- Payment status (pending, succeeded, failed, refunded)
- Payment provider reference ID
We do not collect or store card numbers, CVV codes, expiry dates, or any other sensitive payment credentials. All payment processing is handled by our payment providers (PayPal, Razorpay, or others listed at checkout).
2.5 Communications We collect:
- Messages sent via the in-platform messaging system
- Contact form submissions
- Email correspondence with support
2.6 Technical Data When you use Krevow, we automatically collect:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent
- Referrer URL (where you came from)
- Device type
2.7 Analytics Data We use Google Analytics to understand how visitors use the site. Google Analytics collects anonymised data about page views, sessions, and user behaviour. See Section 7 for cookie details.
2.8 “How Did You Hear About Us” Data After each completed order, we ask how you heard about Krevow and how you felt about the ordering experience. This is optional and used solely to improve our marketing and product.
3. How We Use Your Data
We use your data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Contract (you agreed to our Terms) |
| Delivering your order | Contract |
| Processing payments | Contract |
| Sending transactional emails (OTP, order confirmation, delivery) | Contract |
| Communicating about your order | Contract |
| Scanning uploaded files for malware | Legitimate interest (your security and ours) |
| Compressing files to reduce storage | Legitimate interest (service efficiency) |
| Sending marketing emails (if opted in) | Consent |
| Analytics and service improvement | Legitimate interest |
| Legal compliance | Legal obligation |
| Fraud prevention | Legitimate interest |
We will never use your data for purposes incompatible with those listed above without your explicit consent.
4. Who We Share Your Data With
We share data only with the following third-party service providers, strictly for the purpose of delivering the service:
4.1 Supabase Our database and authentication provider. Stores your account data, order data, and messages. Supabase is SOC 2 compliant and GDPR-ready. Privacy policy: supabase.com/privacy
4.2 Resend Our email delivery provider. Used to send transactional emails (OTPs, order updates, delivery confirmations). Privacy policy: resend.com/privacy
4.3 Payment Providers PayPal, Razorpay, or other providers listed at checkout. They process your payment and are subject to their own privacy policies and PCI DSS compliance. PayPal: paypal.com/privacy Razorpay: razorpay.com/privacy
4.4 VirusTotal Uploaded files are sent to VirusTotal for malware scanning before being stored. VirusTotal is operated by Google and is subject to Google’s privacy policy. Files are scanned and not retained by VirusTotal beyond their standard policy. Privacy policy: virustotal.com/gui/privacy-policy
4.5 Cloudflare Our hosting provider and CDN. Processes network traffic. May collect IP addresses and request metadata. Privacy policy: cloudflare.com/privacypolicy
4.6 Google Analytics Collects anonymised analytics data. See Section 7 for details and opt-out options.
4.7 Google Drive Completed deliverables are shared with you via Google Drive links. Google’s privacy policy applies to your use of Google Drive.
We do not sell your personal data. We do not share your data with advertisers. We do not use your data for targeted advertising.
5. Data Retention
| Data type | Retention period |
|---|---|
| Account information | Until account deletion |
| Order data | 3 years from order date (for accounting and legal compliance) |
| Uploaded source files | 14 days after delivery, then automatically deleted |
| Deliverable files (Google Drive) | 14 days after delivery, then automatically deleted |
| Payment records | 7 years (required by Indian tax law) |
| Messages and communications | 2 years from order completion |
| Analytics data | 26 months (Google Analytics default) |
| Contact form submissions | 1 year |
| Admin audit logs | 2 years |
When you delete your account, we delete your profile, orders, messages, and uploaded files immediately. Payment records are retained as required by law.
6. Your Rights
Depending on your country of residence, you may have the following rights regarding your personal data:
6.1 Right of Access You may request a copy of all personal data we hold about you. We will provide this within 30 days of your request.
6.2 Right to Rectification You may correct inaccurate or incomplete data at any time via your account settings or by contacting us.
6.3 Right to Erasure (“Right to be Forgotten”) You may request deletion of your personal data. We will delete all data except that which we are legally required to retain (e.g. payment records under Indian tax law).
6.4 Right to Data Portability You may request an export of your personal data in a machine-readable format (JSON or CSV).
6.5 Right to Object You may object to our use of your data for analytics or marketing at any time. This will not affect your ability to use the service.
6.6 Right to Withdraw Consent Where processing is based on consent (e.g. marketing emails), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
6.7 GDPR (European Union) If you are located in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR) including those listed above. You also have the right to lodge a complaint with your national supervisory authority.
6.8 How to Exercise Your Rights Email: privacy@krevow.store Subject line: “Data Request — [your email address]” We will respond within 30 days.
7. Cookies
7.1 What Are Cookies Cookies are small text files stored on your device when you visit a website. We use them to keep you logged in and to understand how the site is used.
7.2 Cookies We Use
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| supabase-auth-token | Essential | Keeps you logged in | Session / 1 hour |
| sb-refresh-token | Essential | Refreshes your session | 7 days |
| _ga | Analytics | Google Analytics user identifier | 2 years |
| ga[ID] | Analytics | Google Analytics session data | 2 years |
7.3 Essential Cookies Essential cookies are necessary for the platform to function. You cannot decline them and continue using the platform. They do not track you for advertising purposes.
7.4 Analytics Cookies Analytics cookies are optional. They help us understand how visitors use the site so we can improve it. You can decline analytics cookies via the cookie consent banner when you first visit the site, or at any time by adjusting your browser settings.
7.5 No Advertising Cookies Krevow does not use advertising cookies. We do not participate in advertising networks. We do not allow third parties to place advertising cookies on our site.
7.6 How to Manage Cookies You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in. Disabling analytics cookies will not affect your ability to use the service.
8. Children and Age Verification
Krevow does not knowingly collect personal data from anyone under 18 years of age. If we become aware that a user is under 18, their account will be suspended and their data deleted.
In countries where the legal age of majority exceeds 18, we apply that higher age threshold.
If you believe a person under the applicable minimum age has created an account, please contact privacy@krevow.store.
9. International Data Transfers
Krevow is operated from India. Your data may be processed in countries other than your own, including through services hosted in the United States (Supabase, Google, Cloudflare). Where such transfers occur, we rely on standard contractual clauses or the service provider’s compliance with applicable data protection laws.
10. Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption in transit (HTTPS/TLS)
- Encrypted database storage (Supabase)
- Row-Level Security (database access control)
- Two-factor authentication for admin accounts
- Malware scanning of all uploaded files (VirusTotal)
- Regular security audits and dependency updates
No system is completely secure. In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.
11. Third-Party Links
Our platform may contain links to third-party websites (e.g. Google Drive download links). We are not responsible for the privacy practices of those sites. We recommend reading their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email and a notice on the platform. Continued use of Krevow after notification constitutes acceptance of the updated policy.
13. Contact
For privacy-related enquiries, data requests, or complaints:
Email: privacy@krevow.store Platform: krevow.store/contact Operating from: Lucknow, Uttar Pradesh, India
Response time: within 30 days of receipt.