Privacy Policy
Last updated: 20 October 2026
Samsūtra.ai makes marketing posts for small businesses. To do that we need some details about you and your shop. This page explains what we collect, why, who helps us, and what you can ask us to do with it.
Samsūtra.ai (the website samsutraai.com, the Samsūtra app and its API at api.samsutraai.com) is run by [Legal name of the business], [Registered address] ("we", "us"). We are the Data Fiduciary for your personal data under India's Digital Personal Data Protection Act, 2023.
What we collect
| What | Examples |
|---|---|
| Your account | Email address (you sign in with a code sent to it), phone number if you give one, sign-in times. |
| Your business | Business name and type, products and prices, city and address, contact phone, website or Instagram handle, brand colours, language and tone, your goals and the products you want to push. |
| Your photos and logo | The logo and product photos you upload or pick from your phone. |
| Your posts | The posts we make for you, the captions you choose, your changes, approvals and skips, star ratings and comments, and offer codes and results you record. |
| Connected accounts | If you connect Instagram or a Facebook Page: the account or Page ID and name, and the access token Meta gives us, which we store encrypted. If you ask to join the Instagram pilot: your Instagram username. |
| Your phone | A notification token from Firebase so we can tell you when a post is ready, and the phone's platform (Android). |
| Payments | Your plan, amounts paid, dates and bills. Card, UPI and bank details are entered on Razorpay's pages and are never seen or stored by us. |
| Usage and support | What you do in the app (for example, approving a post or asking for a change), basic technical logs (IP address, errors) and anything you write to us. |
Why we use it
- To make your posts: write captions and headlines, make and check images, and put your logo, prices and offer on them.
- To publish a post to your Instagram or Facebook Page, only after you approve it, and only to accounts you connected.
- To sign you in, send you sign-in codes, and tell you when a post is ready, posted or failed.
- To run your free trial and plan, take payments and issue bills.
- To keep the service safe: stop misuse, limit repeated sign-in attempts and fix errors.
- To make posts better: we look at which posts owners approve, change or rate, and at offer codes redeemed.
- To meet legal duties, such as keeping tax records.
We use your data because you asked us to provide the service and agreed to this policy when you signed up. You can withdraw that consent at any time by deleting your account (see below). We do not sell personal data, and we do not show ads.
Who helps us (and sees some of your data)
| Service | What it does for us | What it receives |
|---|---|---|
| AI providers: Google Gemini (default); OpenAI, Anthropic or OpenRouter when chosen | Write captions, make and check images | Your business details, products, logo and photos, and the instructions for the post |
| Railway (United States) | Hosts our servers and database | Everything stored in the service except images |
| Amazon Web Services (India, Mumbai) | Stores your photos, logos and post images; sends sign-in codes and emails | Your photos, logos and post images; your email address and the email content |
| Google Firebase | Delivers phone notifications | Your phone's notification token and the notification text |
| Meta (Instagram, Facebook) | Publishes posts you approve | The post image and caption, with your connected account |
| Razorpay | Takes payments | Your name, email or phone and the payment amount |
| Cloudflare | Runs our domain and forwards our email | Website visits and emails sent to us |
We use these providers' paid business services and choose settings whose terms do not let them train their models on your content. WhatsApp sharing happens on your own phone: the app opens WhatsApp with the post, and nothing is sent to WhatsApp by us. We may also share data when the law requires it, for example on a valid court or government order.
Where it is stored
Our servers and database are in the United States; photos, logos and post images are stored in India (Mumbai). Indian law allows this transfer; we will move data if the government restricts transfers to a country we use.
How long we keep it
- While your account is open, we keep your details, photos and posts so you can see your history.
- When you delete your account in the app, we delete your profile, photos, posts, connected accounts and phone tokens straight away (within 30 days if you ask by email). Bills and payment records are kept as long as tax law requires (currently up to 8 years).
- Sign-in codes expire after 10 minutes. Technical logs are kept for up to 90 days.
Your rights
You can ask us to:
- tell you what personal data we hold about you and who we shared it with;
- correct or update it (most of it you can change yourself in the app under My Shop);
- delete it (see Delete your account);
- name someone to use these rights for you if you die or cannot act.
Write to privacy@samsutraai.com from the email you sign in with. If you are not happy with our answer, you can complain to the Data Protection Board of India.
Connected Instagram and Facebook accounts
We use a connected account only to publish posts you approved and to show you which account is connected. We do not read your messages, followers or other posts. You can disconnect in the app (My Shop → Auto-post) or remove Samsūtra in your Instagram or Facebook settings under Apps and websites. Disconnecting in the app deletes the stored token straight away; removing Samsūtra in Instagram or Facebook makes the token stop working.
Security
All connections use HTTPS. Social account tokens are stored encrypted. Only the people who run Samsūtra can see shop data, using a separate admin sign-in. If a breach affects your data, we will tell you and the Data Protection Board as the law requires.
Children
Samsūtra is for business owners aged 18 or over. We do not knowingly collect data from children.
Grievance officer
Grievance Officer, [Legal name of the business]
[Registered address]
Email: privacy@samsutraai.com
We acknowledge complaints within 24 hours and resolve them within 15 days.
Changes to this policy
If we change this policy in a way that matters, we will tell you in the app or by email before the change applies. The date at the top shows the latest version.