Privacy Policy
Roarvia Private Limited ("Mitra AI," "we," "us," or "our") operates Mitra AI, a social publishing hub, and the website at mitraai.app (collectively, the "Service"). This Privacy Policy explains how we collect, use, share, and protect personal information when you use the Service.
Mitra AI is a publishing tool. It schedules and publishes content to social accounts that the person using it already administers. It is not a sales, prospecting, or recruiting product, and it does not build or enrich lists of people. By using the Service, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
1.1 Information You Provide Directly
Account Information:
- Name and email address, used to create and sign in to your account
Content You Create:
- Post text, images, video, and other media you upload to be published
- Scheduling information, such as the date and time a post should publish and which connected account it should publish to
- Drafts, notes, and comments you record against a post before it is published
1.2 Information We Receive From Connected Platforms
The Service publishes only to accounts you connect to it yourself. Connecting an account means signing in on that platform's own authorization screen and granting permission. We never ask for, receive, or store your password for any connected platform.
From LinkedIn, through LinkedIn's official APIs:
- An OAuth access token and refresh token, which allow the Service to publish on your behalf
- Your basic profile information (name, profile identifier, and profile image) so the Service can show you which account is connected
- The list of LinkedIn Pages you administer, so you can choose which of them to publish to
- Engagement figures on posts published through the Service, so you can see how your own content performed
We obtain all LinkedIn data through LinkedIn's official APIs. We do not scrape, crawl, or otherwise collect LinkedIn content outside those APIs, and we do not combine LinkedIn data with data from other sources.
1.3 Information Collected Automatically
- Operational logs: records of publishing attempts, including whether a post succeeded or failed and any error returned by the platform, kept so failed posts can be diagnosed and retried.
2. How We Use Your Information
- To publish and schedule the content you create, to the accounts you connected
- To show you which accounts are connected and which Pages you may publish to
- To report back how content published through the Service performed
- To keep the Service working, diagnose failures, and secure it against misuse
We do not sell personal information. We do not use data obtained from a connected platform for advertising, sales prospecting, lead generation, recruiting, ad targeting, or to build audience lists. We do not use it to train machine learning models.
3. Data Obtained From LinkedIn
This section states specifically how we handle data received through the LinkedIn APIs, in addition to everything above.
- Scope of access. We publish only to LinkedIn Pages and profiles that the authenticated member already has the right to post to. Access is granted by that member through LinkedIn's own OAuth screen, and we do not act on any account outside what it grants.
- Official APIs only. All LinkedIn data we hold is obtained through LinkedIn's official APIs. We do not crawl or scrape LinkedIn, and we do not use unofficial endpoints or data taken from pages outside the API.
- Not a sales or prospecting tool. We do not build lead lists, search for prospects, send connection requests or messages, or use LinkedIn member data for sales, recruiting, or advertising targeting.
- Purpose limitation. LinkedIn data is used only to operate the publishing features described in Section 2, for the account holder who connected it. We read the Pages a member administers, and engagement figures on the posts we published for them, and nothing further.
- No transfer. We do not sell, rent, share, or otherwise transfer LinkedIn data to any third party.
- No commingling. LinkedIn data is not combined with data from other platforms or other sources, and is not used to supplement, verify, or append to any person's record.
- Storage. LinkedIn access tokens and the associated data are stored on infrastructure controlled by the operator of the Service, segregated per connected account so that any one account's data can be identified and deleted on its own.
- Deletion. When you disconnect a LinkedIn account, or close your account with us, we delete the stored access tokens and the LinkedIn data associated with that connection. You can also revoke access at any time from LinkedIn's own settings, which immediately stops the Service from acting on your behalf.
Our use of LinkedIn's APIs is governed by the LinkedIn API Terms of Use and the Additional Terms for the LinkedIn Marketing API Program.
4. Third-Party Services
The Service relies on a small number of providers to function. Each receives only what it needs:
- Connected social platforms (such as LinkedIn) receive the content you choose to publish, because publishing it is the point of the Service.
- Hosting and database infrastructure stores your account, your content, and your connection tokens.
- Email delivery sends account and service notifications.
We do not use advertising networks or third-party analytics that profile you across sites.
5. Legal Basis for Processing (GDPR)
Where the GDPR applies, we process personal information on the basis of contract (to provide the Service you asked for), legitimate interests (to secure the Service and diagnose failures), and consent (where you connect a third-party account, which you may withdraw at any time by disconnecting it).
6. International Data Transfers
Mitra AI is operated from India. If you use the Service from outside India, your information may be transferred to and processed in India and in the regions where our hosting providers operate. We apply the protections described in this policy wherever your data is processed.
7. Data Retention
- Content and schedules are retained while your account is active, so you keep a record of what you published.
- Connection tokens and platform data are retained only while that connection is active, and deleted when you disconnect it.
- Operational logs are retained for a limited period for troubleshooting and security, then deleted.
- When you close your account, we delete your data except where a law obliges us to keep a record.
8. Your Rights
Subject to applicable law, you may request access to the personal information we hold about you, correction of inaccurate information, deletion of your information, a copy of your information in a portable format, or restriction of certain processing. Write to privacy@mitraai.app and we will respond within the period required by the applicable law.
9. Data Security
- Encryption in transit: all traffic to the Service is served over HTTPS.
- Credential handling: platform access tokens are stored as secrets, never in source control, and never exposed to the browser.
- Access controls: backend operations use scoped credentials on the principle of least privilege.
No system is 100% secure. While we implement commercially reasonable security measures, we cannot guarantee absolute security of your data.
10. Children's Privacy
Mitra AI is a business product intended for professionals. The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected data from a minor, we will take steps to delete that information promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. When we make material changes we will notify you by email at the address associated with your account, or by a prominent notice within the Service. Your continued use of the Service after the effective date constitutes your acceptance of the changes.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Entity: Roarvia Private Limited
Email: privacy@mitraai.app
Address: Nelamangala, Bangalore, Karnataka, India