Privacy policy

This policy explains what personal data Dinero Technologies Pvt. Ltd. (“we”) collects through Greenlit, why, and what you can do about it. We process personal data in line with India’s Digital Personal Data Protection Act, 2023. For agency content, the agency is in charge of the data and we process it on its behalf.

What we collect

• Account data — name, email, password (stored only as a hash), workspace name and role.
• Workspace content — clients, briefs, scripts, footage, edits, captions, comments and approval decisions you or your clients add.
• Client contacts — names, emails and phone numbers agencies add so they can send approval links.
• Instagram data — when an agency connects an Instagram professional account: its profile, posts, and post insights (reach, views, likes, comments, saves, shares), plus an access token we store encrypted.
• Billing data — plan, billing name, address, GSTIN and payment records. Card, UPI and bank details are handled by Razorpay; we never see or store them.
• Usage data — basic logs (IP address, browser, actions taken) to keep the service secure and working.

How we use it

• To run Greenlit for your workspace: storing and showing your work, sending approval links, notifications and invoices, publishing to Instagram when you ask.
• To produce AI features (briefs, drafts, plans, tags, insights) from your workspace data. We do not use your content to train AI models. Anthropic does not train on data sent through its API; if your workspace connects its own Groq or OpenRouter key, that provider’s data policy applies to those requests.
• To bill you, prevent abuse, and meet legal and tax obligations.

We don’t sell personal data or use it for advertising.

Who we share it with

Only the service providers that run Greenlit, each bound to protect it:

• Vercel (hosting), Neon (database), Cloudflare R2 (file storage), Mux (video processing and playback)
• Resend (email), Razorpay (payments)
• Anthropic, and — only if your workspace chooses them — Groq or OpenRouter (AI features)
• Meta (Instagram), when you connect an account

Some providers process data outside India. We share data with authorities only when the law requires it.

Cookies

We use only the cookies needed to keep you signed in and to complete Instagram sign-in securely. No advertising or tracking cookies.

How long we keep it

While your workspace exists. When the owner deletes a workspace it is permanently deleted 30 days later (the deletion can be cancelled until then), except records we must keep by law (such as invoices, kept for 8 years). You can delete your own account any time from the Account page. Disconnecting an Instagram account stops all access at once; posts and numbers already synced stay in the workspace as its records until the workspace is deleted, or until you ask us or Meta asks us to delete them.

Your choices and rights

• Access, correct or delete your personal data — most of it directly in Greenlit, or by writing to us.
• Disconnect an Instagram account any time from the client’s page. To have its synced data deleted too, remove Greenlit in your Instagram settings and request deletion there, or write to us — we delete everything we hold for that account.
• Withdraw consent or raise a grievance with our grievance officer at info@dinerotechnologies.in. We respond within 30 days.

Security

Workspaces are isolated from each other; files are private and served through short-lived links; passwords are hashed and access tokens and AI keys are encrypted at rest; all traffic uses HTTPS.

Changes

We will post updates here and email workspace owners about significant changes.