1. About This Policy
This policy explains how Krisattva Private Limited ("Starbuzz", "we", "us") collects, uses, and protects personal information.
It covers the Starbuzz.ai website, the Starbuzz SaaS platform, our agency services, and the Starbuzz connector for Claude. The Hey! Creators mobile app is covered by its own privacy policy.
If you have questions about anything here, contact us at contact@starbuzz.ai.
2. Information We Collect
| Category | What it includes | How we get it |
|---|---|---|
| Account data | Name, email address, phone number, company name, password (stored only as a one-way hash) | You provide it when you register or contact us |
| Usage data | Features used, time spent, actions taken within the product | Collected automatically |
| Technical data | IP address, browser type and version, device information | Collected automatically |
| Campaign data | Lists, briefs, campaign details, and performance records you create or upload | You provide it while using the platform |
| Payment data | Billing details and transaction records | Collected through our third-party payment processor. We do not store full card numbers |
| Connector data | Authentication tokens, credit balance, and a record of each request you make | Generated when you use the Starbuzz connector for Claude |
We also process publicly available social media performance information as part of delivering our analytics services.
We use cookies and similar technologies on our website and analytics tools within our products to understand how they are used.
3. How We Use Information
| Purpose | Basis |
|---|---|
| Providing and operating the platform and connector | Performance of our contract with you |
| Generating the analytics and insights you request | Performance of our contract with you |
| Processing payments and managing credit balances | Performance of our contract with you |
| Security, fraud prevention, abuse detection, and usage limits | Our legitimate interest in protecting the service |
| Product improvement and troubleshooting | Our legitimate interest, using aggregated or de-identified data wherever possible |
| Service updates and administrative messages | Performance of our contract with you |
| Marketing communications | Your consent, withdrawable at any time |
Marketing email is sent through our own in-house system. Every marketing message includes an unsubscribe option, and unsubscribing does not affect service messages you need to receive.
We do not sell personal data. We do not share it with third parties for their own marketing purposes.
4. The Starbuzz Connector for Claude
The Starbuzz connector lets you request engagement rate analysis inside Claude, an AI assistant operated by Anthropic. This section covers what is specific to that connector.
Signing in. Connecting uses OAuth 2.1. You sign in directly with Starbuzz — your password is never shared with Claude and never passes through Anthropic's systems. If you do not have a Starbuzz account, one is created during this flow using the name, email, and password you provide.
What Claude can access. A single permission, er:read, allowing engagement rate lookups and credit deduction. The connector cannot change your account settings, access your campaign data, read or send messages, or perform any write operation.
Tokens. We issue Claude a short-lived access token valid for one hour and a refresh token valid for 30 days. Refresh tokens and authorization codes are stored only as one-way hashes. Refresh tokens rotate on each use.
Activity records. Each request you make through the connector is recorded against your account, including the request itself, a timestamp, and the credits used, for usage visibility, credit reconciliation, and abuse prevention.
Data shared with Anthropic. Your requests and the results we return pass through Claude in order to reach you. Anthropic's handling of that information is governed by its own privacy policy. We share nothing else with Anthropic, and we do not receive your Claude conversations.
Disconnecting. Remove the connector in Claude under Settings → Connectors. Claude stops using your tokens immediately; access expires within one hour and the refresh token lapses within 30 days. If you need access revoked immediately, email contact@starbuzz.ai and we will invalidate the tokens directly.
6. Storage, Security, and Transfers
Our infrastructure is hosted in India. Personal data is stored there by default, and we do not transfer it outside India except where necessary to deliver a feature you have chosen to use — for example, using the Claude connector, which is operated from outside India.
Our security measures include encryption in transit, passwords hashed with bcrypt, tokens and authorization codes stored only as hashes, scoped and time-limited access credentials, rate limiting, and access controls restricting employee access to what each role requires.
If a personal data breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India within 72 hours of becoming aware of it, describing what happened, what information was involved, and what you can do to protect yourself.
7. How Long We Keep Information
| Data | Retention |
|---|---|
| Account data | For as long as your account is active |
| Data after a deletion request | Deleted within 7 days |
| Connector activity and access records | 12 months |
| Payment and transaction records | As required by Indian tax and accounting law |
| Authentication tokens | Access tokens 1 hour; refresh tokens 30 days |
8. Your Rights
You can ask us to:
- Access the personal information we hold about you
- Correct anything inaccurate or incomplete
- Delete your information, subject to legal retention requirements
- Withdraw consent for marketing at any time
- Nominate another person to exercise these rights on your behalf if you are unable to
To make a request, email contact@starbuzz.ai. We respond within 7 days.
Grievance Officer. If you are not satisfied with how we have handled your information or your request, you can escalate to our Grievance Officer:
Aravindha Bollineni, Chief Technology Officer
Krisattva Private Limited
aravindha@starbuzz.ai
If your concern remains unresolved, you may complain to the Data Protection Board of India.
9. Children
Starbuzz is a business tool intended for people aged 18 and over. We do not knowingly allow anyone under 18 to create an account, and we do not knowingly collect personal information from children through our website, platform, or connector.
If you believe we hold information about someone under 18, contact us at contact@starbuzz.ai and we will remove it promptly.
10. Google API Data
Starbuzz complies with the Google API Services User Data Policy, including its Limited Use requirements.
Where you connect your Google account to manage email within the platform, we request the following scopes: gmail.modify, gmail.compose, and gmail.send. We request the minimum permissions needed for these features. This data is used only to manage, compose, and send email at your direction. We do not retain it beyond the time needed to provide the service, do not share it with third parties, and do not use it to train any AI or machine learning model.
To revoke access or request deletion of Google data held by us, email contact@starbuzz.ai.
11. Changes and Contact
We may update this policy from time to time. When we make material changes, we will update the date at the top and notify you through the product or by email.
Krisattva Private Limited
contact@starbuzz.ai
starbuzz.ai/contact