Legal

Privacy Policy

Last updated: 22 September 2026

AI Karyakarta ("the Service", "we") lets a brand or page owner connect their own Facebook Pages and Instagram Business accounts so that incoming comments can be read by AI and, where a comment is an abusive or coordinated attack on that brand, hidden. It exists because brands are targeted by organised negative-comment campaigns on their own posts. This policy explains exactly what we collect, why, who processes it, and how you can have it deleted.

1. Who we are

Data controller	GROK MEDIA PRIVATE LIMITED
CIN	U73100MH2026PTC467389
Registered office	Flat No. A1-104, Green Space Residency, Aurangabad (Chhatrapati Sambhajinagar) 431001, Maharashtra, India
Contact	salman.tra4@gmail.com · +91 89566 62623
Grievance Officer	Salman Shaikh — see section 10

2. What we collect

Data	Why
Your name (optional), email address and a hashed password	To create and secure your account. We never store your password in readable form.
The Facebook Pages and Instagram Business accounts you choose to connect — their name, ID and access token — and the Facebook user ID that authorised the connection	To read and moderate comments on those pages, and to act on Facebook's data-deletion requests. Access tokens are encrypted at rest.
Comments posted on your connected pages: text, the commenter's name or username and ID (when Facebook provides it), time, and the post it was left on	To classify each comment against your moderation rules and carry out the action you configured.
The AI's decision for each comment (hide or keep, category, confidence, a short reason) and the action taken	To show you your dashboard, live feed and reports, and to keep an auditable record of every action taken on your behalf.
The moderation instructions you write for each page	To tell the AI how your page should be moderated.
Security log: sign-ins, connections, disconnections, settings changes, IP address	Security, abuse prevention and dispute resolution.

We do not collect payment card data, contact lists, private messages, or any data from pages you have not connected.

3. What we never do

We never post, comment, like or send messages from your account or page.
We never access a page you have not explicitly connected.
We never sell or rent your data, and never share it with advertisers or data brokers.
We never use your page's comments to train AI models.

4. Who processes the data

We use the following service providers, each only for the purpose shown:

Provider	Purpose	Location
Meta Platforms, Inc.	Facebook and Instagram APIs — the source of the comments we moderate	USA / global
Anthropic, PBC	AI classification of comment text	USA
Hostinger International Limited	Server hosting and database storage	India (Mumbai)

Your account data, connected-page data and moderation records are stored on our servers in India. To classify a comment, its text (and the text of the post it was left on) is sent to our AI provider in the USA, which processes it to return a decision and does not use it to train its models. Data sent to Meta is limited to the API calls needed to read comments and hide or delete them on your connected pages.

5. Hide vs delete

By default the Service only hides comments — hiding is reversible and the comment is not destroyed. Deletion is permanent and is off by default; it only happens on a page where you have explicitly switched it on, and only when the AI is at least 90% confident.

6. How long we keep data

Page access tokens — deleted immediately when you disconnect a page, remove the app from Facebook, or delete your account.
Comments and moderation records — kept while your account is active so your reports stay accurate; deleted within 30 days of account deletion.
Security log — kept for up to 12 months, then deleted.

7. How we protect it

All traffic uses HTTPS. Access tokens are encrypted with a key kept outside the application. Every database query is scoped to a single customer account. Only authorised personnel of GROK MEDIA PRIVATE LIMITED can access production systems.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 and other applicable law you may ask us to: confirm what personal data we hold about you and get a summary of it; correct or update it; erase it; withdraw consent (which ends the Service for the affected pages); and nominate another person to exercise these rights on your behalf. Write to salman.tra4@gmail.com. People who commented on a page protected by the Service may also write to us about how their comment was handled.

9. How to delete your data

Disconnect a page from your dashboard to remove its access token immediately, remove the app from your Facebook settings (Meta then notifies us automatically and we delete the associated tokens), or email us to delete your whole account. Full steps: Data Deletion.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023, our Grievance Officer is:

Name	Salman Shaikh
Email	salman.tra4@gmail.com
Phone	+91 89566 62623
Address	GROK MEDIA PRIVATE LIMITED, Flat No. A1-104, Green Space Residency, Aurangabad (Chhatrapati Sambhajinagar) 431001, Maharashtra, India

We acknowledge complaints within 24 hours and resolve them within 15 days of receipt.

11. Children

The Service is meant for businesses and page administrators and is not directed at anyone under 18. We do not knowingly create accounts for minors.

12. Changes to this policy

If this policy changes materially we will email account holders at the address on their account before the change takes effect, and update the date at the top of this page.