Polylane

Legal

Privacy Policy

Last updated: 11 October 2026 · polylane.app

Polylane is operated by Kreativish AI Powered by SMAT Solutions Pvt Ltd("we", "us"), the data controller for the personal data described here. This policy explains what we collect, why, and your choices.

Who we are

Registered name
Kreativish AI Powered by SMAT Solutions Pvt Ltd
Registered address
NSL East County, Near Uppal Stadium Uppal, Hyderabad 500039 Telangana, India
GSTIN
36ABOCS7049B1Z4

Every third party that processes data on our behalf is listed on our subprocessors page. Business customers are covered by our data processing agreement.

What we collect

  • Account data — email, name (if provided), authentication identifiers via Supabase Auth.
  • Planner data — projects, channels, tasks, calendar events, and settings you create in the app.
  • Billing data — subscription status and payment metadata for purchases through Razorpay or Paddle (we do not store full card numbers).
  • Usage analytics — page views and product events via PostHog (when enabled), to improve the product.
  • Waitlist data — your email address, the pursuits you choose for your Polymath Passport, signup source, referral relationship and counts, reward eligibility, consent record, and confirmation, unsubscribe, and delivery timestamps.

How we use data

  • Provide, sync, and secure your planner workspace.
  • Process subscriptions and send transactional email.
  • Operate the Polymath Passport and Studio waitlists, confirm your address, attribute referrals, provide earned template or discount rewards, and send launch updates you requested.
  • Improve reliability, support, and product decisions.

Waitlist email & consent

We send Polymath Passport confirmation, referral-reward, and Polylane launch emails based on the consent you give when joining. Joining a waitlist does not create a paid subscription. Every waitlist marketing or launch email includes an unsubscribe option. Unsubscribing stops those emails and does not affect essential messages for a separate product account you may hold.

Processors & storage

We use Supabase (database & auth), Razorpay (payments), Paddle (merchant of record for purchases through its checkout), Vercel (hosting), PostHog (analytics), Resend (email delivery), Sentry (error monitoring), and Upstash (rate limiting). Optional sign-in and calendar connections also involve their respective providers, listed on our subprocessors page. Resend receives the email address and message content needed to deliver confirmation, referral-reward, and launch emails. We process unsubscribe choices so those campaign messages stop. Data may be processed in the US or other regions where these providers operate.

Paddle processes checkout contact, billing and payment information under its own privacy notice. We receive transaction identifiers, subscription status and payment metadata to provide access and billing support.

Retention

Your planner data — projects, channels, tasks, notes and scheduled events — is kept for as long as your account exists. You can export all of it at any time from your account page, without asking us.

When you delete your account, your personal planner data and any workspace you own are removed from the live database immediately. If you are a team member, shared work stays in that team's workspace and your creator reference is removed from its planner rows. Deleting a team owner's account removes that shared workspace; surviving teammates keep their accounts and receive personal planners. Account deletion cannot be undone. Export a copy of your planner before deleting your account if you want to keep your work.

Billing records — invoices, tax records and the fact that a payment occurred — are retained for 8 years after the relevant financial year, as Indian tax law requires. This is a legal obligation and applies even after you delete your account. It does not include card details, which we never receive.

Waitlist records are kept while the campaign runs and for up to 12 months after launch, so we can deliver requested access, resolve support issues, and measure the campaign. We may keep a minimal unsubscribe record for longer where that is what honours your choice. You can ask us to delete waitlist data sooner.

Error and analytics records are retained by our processors on their own schedules — see the subprocessor list. Analytics only exist at all if you accepted analytics cookies.

Cookie choices are stored on your device in local storage and an essential preference cookie, for up to one year. The preference contains your choice and its date, with no account or analytics identifier. It helps remember a decline if one storage method is blocked. You can change it through Cookie settings.

Google user data

Connecting a Google Calendar is optional. Polylane works fully without it, and you can disconnect at any time from Account settings. If you do connect one, we request only these scopes:

  • https://www.googleapis.com/auth/calendar.events — to read the events on the day you are planning, so existing commitments appear as shaded busy time behind your plan, and to write the blocks you choose to push to a calendar. Writing is off by default and happens only for a connection you have explicitly marked writable, and only for blocks you schedule.
  • https://www.googleapis.com/auth/userinfo.email — to show which Google account a connection belongs to. Two connections both labelled "Google" are indistinguishable at exactly the moment it matters.

We read your events when you view a day and temporarily cache that day's busy blocks in your browser for your signed-in account. Your Google access and refresh tokens are encrypted at rest and are not returned to your browser. Disconnecting a calendar, or deleting your account, deletes those tokens.

Polylane's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not use it to train generalised artificial intelligence or machine learning models. We do not transfer it to third parties except as necessary to provide or improve these features, to comply with applicable law, or as part of a merger or acquisition, and no human reads it except with your explicit consent for a support request you have raised, or where required by law.

The same applies to a connected Microsoft Outlook calendar, which uses the equivalent Microsoft permissions for the same two purposes.

Your rights

You may withdraw waitlist consent or request access, correction, export, or deletion of your account and waitlist data by emailing kreativish.ai@gmail.com, by using the unsubscribe link in a waitlist email, or by deleting your product account from Account settings in the app.

Changes

We may update this policy. Material changes will be posted on this page with an updated date.

← Back to home