How we collect, use, and protect your information.
Kru.ai is a procurement intelligence platform operated by Krumart, Inc., a Delaware corporation ("Kru.ai", "we", "us", or "our"). This Privacy Policy explains how we handle information when you use our website, web application, and related services (collectively, the "Services").
For privacy questions, contact us at privacy@kru.ai.
When you create an account, we collect your name, email address, and password (stored as a one-way hash, never in plain text). If you provide a company name, we store that too.
When you upload invoices, receipts, or other documents, we store the original file and the structured data we extract from it. Documents may contain supplier names, product names, quantities, prices, dates, and other commercial information. We do not require Social Security numbers, credit card numbers, or other regulated personal identifiers, and we ask you not to upload documents containing such information.
We collect basic information about how you use the Services, including login timestamps, pages viewed, features used, and technical details such as IP address, browser type, and device. This is used to operate, secure, and improve the Services.
We use cookies to keep you signed in and to remember your preferences. We do not use third-party advertising cookies or tracking pixels.
We use the information we collect to:
Kru.ai uses Anthropic's Claude AI to read and extract structured data from uploaded documents. When you upload a document:
Anthropic's commercial terms govern how Anthropic handles data passed through its API. See Anthropic's Commercial Terms and our separate AI & Data Processing Disclosure for more detail.
We do not sell your personal information. We share information only in these limited circumstances:
Authorized Kru.ai personnel (operators and administrators of Krumart, Inc.) may access your account and view the data it contains for the following limited purposes:
Operator access is read-only: operators can view your data but cannot upload, modify, or delete content on your behalf. Every operator access session is logged with the operator's identity, the user account accessed, and the time. We do not use operator access for marketing, advertising, or unrelated commercial purposes.
If you have specific concerns about operator access — for example, while sharing particularly sensitive supplier information — contact us at privacy@kru.ai.
We may use information you upload in anonymized and aggregated form to produce industry benchmarks, market trend reports, and similar analytics. Anonymized data does not identify you, your business, or your suppliers. For example, an aggregated benchmark might show "the average price for green cabbage in the Southeast US is $X" — never that "your business pays $X".
We retain your account and uploaded documents for as long as your account is active. If you delete your account, we delete your documents and extracted data within 30 days, except where we are legally required to retain certain records (for example, financial transaction records for tax purposes).
You have the right to:
To exercise any of these rights, contact us at privacy@kru.ai. We will respond within 30 days.
California residents: Under the California Consumer Privacy Act (CCPA), you have specific rights regarding your personal information. We do not sell personal information.
European/UK residents: If you are in the EEA, UK, or Switzerland, our legal basis for processing your information is the performance of our contract with you (providing the Services), our legitimate interests in operating and improving the Services, and your consent where applicable.
We use commercially reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit (TLS) and access controls. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your information, we will notify you as required by applicable law.
The Services are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
Kru.ai is operated from the United States. If you access the Services from outside the United States, your information will be transferred to, stored in, and processed in the United States. By using the Services, you consent to such transfers.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on the Services before the change takes effect.
If you have questions about this Privacy Policy or our privacy practices, contact us at:
Krumart, Inc.
Email: privacy@kru.ai