Privacy Policy

Last updated 13 October 2026

This policy explains what SRUSTI ONE (operated by [Registered business name]) collects when you use the service, why, where it is processed and what you can ask of us.

1. What we collect

  • Account: your e-mail address, password (stored only as a hash), name if you give one, and the team members you invite.
  • Projects: your briefs, pipeline content, designs, generated code, the applications you import, and the settings of your connectors (database connection details, GitHub installation, hosting and domain settings). Secrets are stored encrypted.
  • Usage: which actions you run, the tokens each AI call used, the credits charged, deployments and sign-ins, with timestamps and the IP address of the request.
  • Payments: plan and pack purchases, amounts, coupon use, UPI transaction references and the identifiers our card processor returns. We never see or store card numbers.
  • Support: the e-mails you send us and our replies.

2. Why we use it

  • to run the service: plan, generate, preview, deploy and bill your applications;
  • to meter and charge credits, and to show you your usage;
  • to secure accounts, prevent abuse and keep the service running;
  • to answer support requests and tell you about changes that affect you;
  • to meet legal obligations, including tax and payment records.

We do not sell personal data, we do not show advertising, and we do not use your projects to train AI models.

3. Where it is processed

  • Our servers on DigitalOcean in Bangalore, India, hold accounts, projects, code and usage.
  • AI providers (OpenAI and Anthropic) receive your briefs, pipeline content, instructions and the code they are asked to change, to produce plans and code. They process it under their API terms, which exclude training on customer data.
  • GitHub receives the code you choose to push, in your own account.
  • Hosting providers you connect (Render, Vercel, Koyeb, or your own server) receive the code and settings of the applications you deploy there.
  • Unsplash may be queried for photographs used in custom screens; only the search words are sent.
  • Payments: Stripe processes card payments; UPI payments go through your UPI app to our bank. E-mail is sent through Zoho ZeptoMail.

4. Cookies and storage

We use a session token to keep you signed in and browser storage for your own preferences (such as the dictation language or an open tab). We do not use advertising or tracking cookies.

5. How long we keep it

  • Account and project data: while your account is open, and 30 days after it is closed.
  • Usage and billing records: 8 years, as Indian tax and accounting rules require.
  • Support e-mails: 2 years.
  • Server logs: 90 days.

6. Your rights

You can see and change your account details in the application, download your code at any time, and close your account. You may ask us to correct or delete your personal data, to give you a copy of it, or to stop a particular use, by writing to support@srustione.com. We answer within 30 days. If you are not satisfied you may complain to the data protection authority in your country.

7. Security

Connections are encrypted (HTTPS), passwords are hashed, stored secrets are encrypted, and access to production systems is limited to the people who run the service. No system is perfectly secure; if a breach affects your data we will tell you without undue delay.

8. Children

The service is not for people under 18, and we do not knowingly collect their data.

9. Changes

We may update this policy. The date at the top shows the current version; material changes are announced in the application.