Privacy Policy

Krigatti is operated by an individual sole proprietor based in India. The proprietor’s complete legal identity and business address must be confirmed before this draft takes effect.

Privacy enquiries: support@krigatti.com. Krigatti is independent of LinkedIn and does not claim LinkedIn approval or affiliation.

• Account information: email address, the Krigatti password submitted to the authentication service, account identifiers, confirmation and sign-in records. Do not supply your LinkedIn password.
• Professional information: the LinkedIn URL, name, headline, About text, experience, education, skills and other profile details you enter, import and save, including source and confirmation information.
• Goals and evidence: professional objectives, selected outcomes and preferences, and posts, articles, comments or recommendations you choose to paste into the evidence form.
• Images: optional profile-photo and banner files you upload separately.
• Assessment records: results, quoted evidence, coverage, goal-aligned insights and snapshots of the profile details and goals used for each assessment.
• Operational and support information: AI usage counts and statuses, account-management activity and deletion-request records, and information you choose to send by email.
• Current assessments use user-supplied information, not information retrieved through LinkedIn APIs. Payment checkout and subscription billing are not currently implemented in this application.

• Create and authenticate accounts, confirm email addresses and support password resets.
• Organize imported and entered evidence, record reviewed information and save professional goals.
• Run AI-assisted assessments using saved evidence, calculate results using Krigatti’s draft rules and display goal-aligned insights.
• Retrieve previous assessments and generate downloadable reports from saved results in your browser.
• Handle support and account-management requests, restrict unauthorized access and troubleshoot failures.

No LinkedIn OAuth or official LinkedIn API integration is currently operational in this application. API connectivity is a planned capability, not an available source of assessment data. Krigatti does not scrape or sign in to LinkedIn on your behalf.

Any future integration would require LinkedIn authorization, applicable developer terms and the permissions actually granted. It would not imply automatic access to complete profiles, posts, comments, connections, messages or analytics.

Before collecting API-derived information, Krigatti would explain the data and purposes involved and address applicable consent, storage, deletion and LinkedIn data-use restrictions. Disconnecting a future integration and deleting a Krigatti account would be separate actions. No LinkedIn authorization tokens are collected by the current flow.

The current document-import feature accepts LinkedIn profile PDFs. The PDF reader runs in your browser, extracts text and maps recognized sections into the review form. The PDF file itself is not uploaded to Krigatti’s backend or sent to the assessment AI. Photos and banners are not extracted from the PDF.

On the landing-page journey, the imported filename and mapped text are temporarily held in memory and tab-scoped session storage so they can survive a refresh during account creation. That staged copy is cleared when the signed-in review page consumes it. Other unsaved form details are held in memory; browser session restoration may affect the lifetime of tab storage.

Saved evidence is stored separately from the original file. Account creation can also store the submitted profile URL and completed onboarding goals. Starting an assessment can send saved text—including text originally extracted from a PDF—to the AI services described below.

Separately uploaded JPEG, PNG or WebP photos and banners are stored in a private image bucket; the application limits each file to 5 MB. You can replace or remove these images through the form.

Lovable Cloud provides application hosting, database, authentication and private image storage. Account confirmation, invitation and password-reset email requests use its authentication service.

Lovable AI Gateway and an OpenAI model process selected saved profile text and goals when an assessment needs AI evidence extraction. Eligible user-pasted content may also be processed in a separate request. Cached findings may be reused. The AI proposes evidence quotes; Krigatti validates them and applies its scoring rules. AI output can be incomplete or inaccurate.

Assessment requests set response storage to disabled. This setting is not a guarantee that providers retain no operational, security or legally required records. Provider retention terms and contractual arrangements require confirmation before this policy takes effect.

The website loads fonts from Google Fonts, which receives the requests needed to deliver them. Diagnostic reporting can use Lovable’s error-reporting hooks when available.

The services above receive information needed to perform their roles; personal information is therefore not processed exclusively by Krigatti. Ordinary account access is restricted to the owner by database access rules. Authorized administrators have separate account-management access to account identifiers, email addresses, activity and record counts.

You control reports you download and any subsequent sharing of those files. Support messages are processed by the people and email services handling your request. Disclosure may also be required by applicable law or a valid legal process.

The current application has no LinkedIn API data to sell or redistribute.

The original imported PDF is not retained by the application. Saved account details, evidence, goals and assessment snapshots remain until deletion is requested, subject to applicable legal obligations. Editing current evidence does not rewrite previous assessment snapshots. Downloaded report files remain under your control on your device.

To request account or data deletion, email support@krigatti.com from your account email address. There is no customer self-service account-deletion button. An administrator can record a request and invoke deletion of sign-in access and principal saved profile and assessment records.

A complete deletion process has not been verified end to end. The current administrator action does not include private-image cleanup; AI usage and administrative/deletion logs are retained. Backup, provider-log and operational-record retention periods have not been confirmed. No immediate or complete deletion guarantee or response deadline is made in this draft.

There are no current LinkedIn API records or tokens. Future API-derived information would need a separate lifecycle consistent with the permissions and applicable LinkedIn terms.

The public website and configured service endpoints use HTTPS. Saved profile and assessment tables have row-level access rules linked to the signed-in owner. Image storage is private, uses owner-folder access rules and displays images through time-limited signed links. Privileged account actions check administrator authorization.

These controls do not establish a security certification or guarantee against all risks. Browser-stored sessions and staged profile text should be treated as sensitive, especially on shared devices. Complete deletion, provider safeguards and broader security assurance remain subject to further verification.

You can review and correct profile evidence and goals in your account, replace or remove uploaded images, choose manual entry instead of PDF import, and choose whether to start an assessment. Only submit information you are entitled to use; avoid unnecessary sensitive information or other people’s private details.

Contact the privacy email to request access, correction, deletion, withdrawal of consent or to raise a grievance. Identity checks may be needed before account information is disclosed or changed. Withdrawal does not itself erase previously saved records; request deletion separately.

Your rights depend on applicable law and its provisions in force. India’s Digital Personal Data Protection Act, 2023 and related rules have phased commencement. As of this draft’s update date, later phases are scheduled for 14 November 2026 and 14 May 2027 under the November 2025 notifications. This is not an unconditional compliance claim or legal certification; the owner must confirm applicable obligations and the grievance procedure before approval.

The sign-in client uses persistent browser storage for authentication sessions. The PDF handoff uses tab-scoped session storage for the imported filename and mapped text. These are browser-storage technologies, not a promise that the site never uses cookies.

No dedicated advertising or analytics integration was identified in the application source reviewed for this draft. Hosting services and available error-reporting hooks may process technical request and diagnostic information. A complete inventory of platform-set cookies, logs and retention has not yet been confirmed.

Google Fonts requests disclose normal connection information to that service. Clearing browser storage removes local sessions and staged information and may sign you out; it does not delete saved account records.

Krigatti is operated from India and uses the external services identified above. Exact processing locations, onward transfers and contractual transfer safeguards for each service have not been verified. This draft does not promise India-only processing or a particular international-transfer protection.

Krigatti is intended for adult professionals, not children. The current signup form does not collect age or provide a parental-consent workflow. If you believe a child has supplied personal information, contact the privacy email so the matter can be investigated. Applicable age and consent requirements must be addressed before this draft takes effect.

Approved updates will be posted on this page with their updated and effective dates. Where applicable law requires additional notice or consent for a material change, that must be provided before the relevant change takes effect. This draft is not an automated policy-change notification service.

Privacy, support and deletion enquiries: support@krigatti.com.