Privacy Policy

Kuraly is operated by DevToMark Solutions.

You can reach us at support@kuraly.in.

When you create an account: your name, your email address, and your password (stored only as a one-way hash, so we never hold the password itself).

When you use the writing tools: the text you submit, and the suggestions we return. These are kept as your history so you can come back to a piece of work.

When you scan a document: the file you upload, and the text extracted from it.

When you pay: your name, email and billing details go to our payment partner. We keep a record of the transaction — amount, plan, date, and the partner's payment reference. We never see or store your card number, UPI PIN or bank credentials. Those are entered on our payment partner's own form and never reach our servers.

Automatically: how many requests and words you have used today, for enforcing your plan's limits; and the IP address, browser and device of each sign-in, so we can tell you about unfamiliar activity and stop automated abuse.

If you use the service without signing in, we create an anonymous guest session so we can apply a fair usage limit. It is not linked to your identity, and if you later create an account, the work from that session is moved into it.

Kuraly does not run its own language models. To give you a suggestion, the text you submit — or the text extracted from a document you scan — is sent to third-party AI providers operating outside DevToMark Solutions, processed there, and the result returned to you. Some of those providers operate outside India, so your text may be processed outside the country.

We send only what is needed to perform the task: the text itself and the language and mode you chose. We do not send your name, your email address or your payment details to them.

We choose providers that do not train their models on data sent through a business account. We cannot make that promise on their behalf in a document like this, so if you handle text that must never leave your own systems, please do not paste it into Kuraly.

Your account and its details are kept for as long as the account exists.

Your text, suggestions and scanned documents are kept so that you can return to them. There is no automatic expiry — we do not delete them after a set period.

When you delete a document in Kuraly, it disappears from your workspace immediately. Thirty days later it and the file you uploaded are erased from our systems for good, by a job that runs every night. The thirty days are so that a document deleted by mistake can still be recovered if you ask us within the month — after that there is nothing left to recover. If you want something erased sooner than that, ask us and we will do it.

Payment records are kept for as long as tax and accounting law requires us to keep them, which is longer than your account may last, and independent of any erasure request.

Under India's Digital Personal Data Protection Act, 2023, you can ask us to:

• tell you what personal data of yours we hold and what we have done with it;
• correct anything that is wrong, incomplete or out of date;
• erase your data, including your documents and their uploaded files;
• withdraw a consent you previously gave;
• nominate somebody to exercise these rights if you die or become incapacitated.

Write to support@kuraly.in from the email address on your account. We will acknowledge within 48 hours and complete the request within 30 days. If we cannot do something you have asked for, we will tell you why rather than simply not doing it.

If something about your data has gone wrong, or you are unhappy with how we handled a request, write to our grievance contact at support@kuraly.in. We acknowledge within 48 hours and aim to resolve within 30 days, as the Consumer Protection (E-Commerce) Rules require.

If you are still not satisfied, you may complain to the Data Protection Board of India.

We use cookies to keep you signed in and to protect the forms on this site. We do not use cookies to advertise to you or to follow you across other websites.

• kuraly_refresh — keeps you signed in. Readable only by our server, never by code running in the page.
• kuraly_guest — identifies an anonymous session so limits can be applied fairly.
• kuraly_session and kuraly_nav — say whether somebody is signed in, so the site does not flash a page you cannot see. They hold no credential.
• XSRF-TOKEN — stops another website submitting a form as you.
• google_oauth_state and related short-lived cookies — used only while you are signing in with Google, and discarded afterwards.

We also use Google Analytics to count visits and see which pages are useful. It is configured for aggregate measurement rather than advertising. You can block it with any tracker blocker and the site will work normally.

A payment partner, to take payments and issue refunds. AI providers, as described above. A cloud storage provider, which holds the documents you upload. An email provider, to send you verification codes, receipts and notices. Our own hosting and database providers.

Each receives only what it needs. We do not sell your personal data, and we do not share it for anybody else's marketing.

Kuraly is not intended for children under 18. We do not knowingly create accounts for them. If you believe a child has an account here, tell us at support@kuraly.in and we will remove it.

If we change how we handle your data in a way that affects you, we will update this page and change the date at the top. For anything significant, we will email the address on your account rather than relying on you to re-read this page.