Privacy Policy
Last updated 17 October 2026
1. Who We Are
Kryo is a work-management and customer-relationship tool for marketing agencies. It is operated by Craftrix, Kerala, India (“we”, “us”). You can reach us at support@craftrix.com.
Three kinds of people have information in Kryo, and this policy covers all three: agency staff, who use Kryo to run their work; an agency’s clients, who sign in to see and work their own leads; and leads, the members of the public who enquired with one of those clients.
2. Whose Information It Is
An agency that uses Kryo decides what goes into it and why. For the information an agency and its clients keep in Kryo, including information about leads, the agency and its client are responsible for it, and we handle it on their instructions. For the accounts of the people who sign in, and for running the service itself, we are responsible.
If you are a lead and want to know what a business holds about you, the quickest route is to ask that business. You may also write to us at support@craftrix.com and we will pass your request to the agency concerned.
3. What We Keep
- Account details: name, email address, role, team, and for some staff a designation. Passwords are held by our sign-in provider in a form we cannot read.
- Work records: clients, projects, tasks, notes, time logged, meeting notes, invoices and what was paid, as the agency enters them.
- Leads: name, phone number, email address, the answers given on an enquiry form, which campaign or page the enquiry came from, and the history of how it was followed up.
- Calls: where the Kryo Calls app is used on a caller’s own phone, the number rung, the time, how long the call lasted and whether it was answered. Calls are not recorded.
- Messages: where a client has connected a WhatsApp Business number, the messages sent and received on that number, and whether each was delivered and read.
- Advertising and social figures: for a client’s own ad accounts, Pages, Instagram and YouTube channels that the agency has connected: spend, results and audience figures.
- Device details for notifications: a token that lets us send a notification to a browser or phone that has asked for them.
- Technical records: errors the app runs into, and the sign-in cookies described below.
4. Where It Comes From
- From you, when you sign in and use Kryo.
- From the agency, when it adds people, clients, work or leads, or uploads a list of leads.
- From a client’s own website form, when that client has connected it.
- From Meta (Facebook, Instagram and WhatsApp) and Google, when a person fills in a lead form on an advertisement or writes to a connected number, and when figures for a connected account are read.
5. What We Use It For
- To show each person the work, leads and conversations they are allowed to see, and nothing else.
- To let an agency’s client and its callers reach the people who enquired, by phone or WhatsApp.
- To send notifications a person has asked for.
- To produce summaries and written drafts where an agency uses Kryo’s AI features (see part 6).
- To work out what an agency is billed, keep the service running, find faults and prevent misuse.
We do not sell personal information, and we do not use it to advertise to anybody.
6. Other Companies That Handle It
Kryo runs on services provided by other companies. Each handles information only to provide its service to us:
- Supabase: the database, file storage and sign-in.
- Vercel: hosting of the application.
- Meta Platforms: lead forms, advertising and social figures, and the WhatsApp Business Platform through which messages are sent and received.
- Google: delivery of notifications to phones (Firebase Cloud Messaging), lead forms on Google Ads, and channel figures read through YouTube API Services. Use of YouTube figures is also subject to the Google Privacy Policy.
- Anthropic: where an agency uses an AI feature (the assistant, a written proposal, a market analysis, a daily briefing), the text needed for that request is sent to Anthropic’s Claude to produce the answer.
Some of these companies process information outside India. We share information with nobody else, unless the law requires it.
7. Cookies
Kryo uses only the cookies needed to keep you signed in. It sets no advertising or analytics cookies, and nothing on it tracks you across other websites. A proposal page sent by an agency records that it was opened, and nothing about who opened it.
8. How Long We Keep It
Information is kept for as long as the agency keeps its account, so that its history stays complete. A lead that is removed in Kryo is first marked as removed and no longer shown. A person can also be erased: by the business they wrote to, from their lead in Kryo, or by us on request. Erasing takes out their lead, any other lead of that business with the same number or email, its history, calls, conversations, messages and the files sent in them; only a note that an erasure was made, when, by whom and why, is kept, with nothing of the person in it. Backups are kept by our database provider for a limited time and then overwritten.
9. Your Choices
- You may ask to see the personal information held about you, to have it corrected, or to have it erased.
- If you no longer want to receive WhatsApp messages from a business that uses Kryo, reply STOP to that number and no further broadcasts will be sent to you.
- You may turn notifications off at any time, in Kryo or in your phone’s settings.
- You may withdraw a consent you have given, and you may complain to us if you think your information has been mishandled.
Write to support@craftrix.com. We answer within 30 days. Where the information belongs to an agency or its client, we act together with them. These rights are in addition to any you have under the law that applies to you, including India’s Digital Personal Data Protection Act, 2023.
10. How We Protect It
Every agency’s information is kept apart from every other agency’s in the database itself, and each person sees only what their role allows. A client’s login sees that client’s leads and no other’s. Connections to Kryo are encrypted. No system is perfectly secure; if something goes wrong that affects your information, we will tell the agency concerned, and you where the law requires it.
11. Children
Kryo is a tool for businesses. It is not meant for anyone under 18, and we do not knowingly keep information about children.
12. Changes to This Policy
When what Kryo does with information changes, this page is changed and the date at the top is updated. If a change is significant, agencies are told in Kryo before it takes effect.
13. Contact
Craftrix, Kerala, India. Email: support@craftrix.com.