Legal

Privacy Policy

Last updated: 8 November 2026

01Who we are

Kinowild is operated by Growvior Software Private Limited ("Growvior", "we", "us"), a company incorporated in India. This Privacy Policy explains what personal data we collect, how we use and protect it, and the choices you have. It applies to the Kinowild website and application.

02Information we collect

Account data: your name and email address, provided when you sign up or sign in (including via Google sign-in through Firebase Authentication), and basic profile details such as your agency/brand name, phone number, team size and city if you choose to provide them.
Content data: the scripts, prompts, uploaded voice recordings or music, and the videos and images generated for you.
Payment data: when you buy a plan, payment is processed by Razorpay. We receive confirmation and limited transaction metadata (such as an order id, amount and status). We do not collect or store your full card number, UPI ID or bank credentials.
Usage & device data: logs, credits used, render history, and basic technical information (such as IP address and browser) needed to operate and secure the Service.

03How we use your information

To provide, operate and improve the Service, including generating and storing your videos, managing credits and rendering.
To process payments, subscriptions and invoices through our payment partner.
To authenticate you, secure the Service, prevent fraud and abuse, and enforce our Terms.
To respond to your enquiries and provide support.
To send essential service messages; and, where permitted, occasional product updates you can opt out of.
To comply with legal obligations.

04Cookies & local storage

We use cookies and browser storage (such as localStorage) to keep you signed in, remember preferences, and make the app work. We do not sell your data or use it for third-party advertising. We use Google Analytics to understand how people use the site, such as which pages they visit and which steps they finish. It sets its own cookies and receives counts and choices only, never your scripts, videos, name or email. You can opt out with Google's opt-out add-on. You can control cookies through your browser settings, though some features may not function without them.

06YouTube & Google user data

Kinowild can publish your finished video to your own YouTube channel. This feature uses the YouTube API Services. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

What we ask for. Permission to upload videos to your channel (the youtube.upload scope), plus your Google account's email address and account ID (the openid and email scopes) so we can show you which Google account is connected. With it we upload the video you pick and, if you add one, set its custom thumbnail. We cannot read, edit or delete your existing videos, comments, playlists, subscribers or analytics.
What we access. Nothing in your channel. The only YouTube data we receive is what YouTube returns about the video we just uploaded: its video ID, privacy setting, channel name and channel ID.
What we store. An access credential (an OAuth refresh token) so we can upload when you click Publish, the email address and ID of the Google account you connected, the time you connected, and the channel name and channel ID from your last upload. Inside your project we keep a short record of each video you published (title, video ID, link, format, privacy and date) so the Publish window can show it.
How we use it. Only to upload the video you choose, with the title, description, tags, category, privacy, made for kids setting, language and thumbnail you enter, to the channel you connected, and to show you that the upload worked. We never upload anything without you clicking Publish.
What we never do. We do not sell this data, use it for advertising, share it with anyone other than Google (to perform the upload), let people read it, or use it to train AI models.
Retention. The credential is kept until you disconnect, until it stops working, or until your account is deleted. Publish records stay in the project until you delete the project.
Removing access. Open Account, then Connected accounts, and click Disconnect next to YouTube (or click Disconnect in the Publish window). This deletes the stored credential from our systems right away. You can also revoke access at any time from your Google Account permissions page. If you delete your account, or ask us to at enquiry@growvior.com, we delete all stored YouTube data within 30 days.

Limited Use. Kinowild's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

07Instagram & Meta user data

Kinowild can post your finished 9:16 video as a Reel on your own Instagram professional account (Business or Creator). This uses Meta's Instagram API. You connect by signing in with Facebook, because Instagram links professional accounts to a Facebook Page. Meta's handling of your data is described in the Instagram Privacy Policy and the Instagram Terms of Use.

What we ask for. The permissions instagram_basic (your Instagram account ID and username), instagram_content_publish (to post the Reel you choose), and pages_show_list, pages_read_engagement and business_management (only to find the Facebook Page your Instagram account is connected to). We do not read your posts, comments, messages, followers or insights.
What we store. Your Instagram account ID and username, the name and ID of the connected Facebook Page, your app scoped Facebook user ID (so we can act on deletion requests from Meta), an access token for that Page or account, when it expires, and when you connected. For each Reel you post we keep its status, the Instagram media ID, its link, the first line of the caption, the format and the date inside your project.
How we use it. Only to post the video you choose, with the caption and profile grid setting you enter, to the account you connected, and to show you that it worked. We never post anything without you clicking Post to Instagram. To post, Instagram downloads the video from a private link to our storage that expires after a few hours.
What we never do. We do not sell this data, use it for advertising, share it with anyone other than Meta (to make the post), let people read it, or use it to train AI models.
Retention. The token is kept until you disconnect, until it stops working, until Meta tells us you removed the app, or until your account is deleted. Post records stay in the project until you delete the project.
Removing access. Open Account, then Connected accounts, and click Disconnect next to Instagram (or click Disconnect in the Publish window). This deletes the stored token right away. You can also remove Kinowild from Business integrations in your Facebook settings or from Apps and websites in Instagram; when Meta tells us, we delete the stored connection automatically. If you delete your account, or ask us to at enquiry@growvior.com, we delete all stored Instagram data within 30 days.

08Storage, security & retention

Your data is stored on secure cloud infrastructure and transmitted over encrypted connections. We apply reasonable technical and organisational measures to protect it; however, no method of transmission or storage is completely secure. We retain your account and content data for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal, tax and accounting obligations, after which it is deleted or anonymised.

09Your rights

Subject to applicable law, you may request to access, correct, export or delete your personal data, or object to or restrict certain processing. To exercise these rights, contact us at enquiry@growvior.com. We may need to verify your identity before acting on a request. You can also delete individual projects and files from within the app.

10Children

The Service is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us personal data, please contact us so we can remove it.

11International transfers

We are based in India and use cloud infrastructure that may process data in India and other regions. Where data is transferred across borders, we take steps to ensure it remains protected consistent with this Policy and applicable law.

12Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date and, for material changes, provide additional notice where appropriate.

13Contact & grievance officer

For any privacy questions or requests, contact our grievance officer at enquiry@growvior.com or +91 8921954496, Growvior Software Private Limited, India. See our Contact page for full details.