Privacy Policy

Last updated 30 September 2026

1. Who we are

Redlyn is a visual website feedback tool made by Crayont, based in India (“Crayont”, “we”, “us”). This policy explains what personal data Redlyn collects, why, and what control you have over it. It applies to the Redlyn website, the Redlyn app, and the review links created with it.

If you have a question about this policy, email us at [email protected].

2. What we collect

When you create an account

• You sign in with your Google account. Google shares your name, email address and profile photo with us, and confirms your email is verified. We don't get access to your Google password, contacts, Gmail or files.
• We record when you sign up and log in, to keep accounts secure and prevent abuse.
• A few early accounts were created with a password. Those passwords are stored only as a salted, one-way hash (PBKDF2), so we can't see or recover them.

When you use Redlyn

• Workspace data: workspace and project names, team members and their roles, and invitations.
• Websites you add: the URLs, page titles, favicons and preview images of the websites you review.
• Feedback: comments, replies, @mentions, statuses, approvals, images you attach, and the screenshot taken automatically when a comment is pinned.
• Technical details on each comment: the screen size, device type, browser and operating system it was made on, so your team can reproduce the issue.

When a client uses a client link

Clients don't create an account. When they comment, we store the name and email address they enter, along with their comments, attachments, screenshots and approvals. The agency that shared the link decides what to collect and is responsible for its relationship with its clients; we process this data on the agency's behalf.

When you pay

Payments are handled by our payment partner, Dodo Payments (see section 5). We don't see or store your card, UPI or bank details. We receive only what we need to manage your subscription, such as your plan, billing status and billing email.

3. How we use it

• To provide Redlyn: show your projects, load websites for review, and display comments to the right people.
• To keep your account secure, prevent abuse, and enforce plan limits.
• To manage your subscription and billing.
• To reply when you contact us, and to send important service messages, such as changes to these terms or security notices.

We don't sell your data, share it with advertisers, or use it to train AI models.

4. Websites you review

When you open a review, Redlyn loads the website through its preview domain and adds the commenting layer on top. We don't keep copies of the websites you review. We store only the page details listed above, plus the screenshots attached to comments. You're responsible for making sure you have permission to review a website with Redlyn.

5. Who we share it with

We use a small number of trusted service providers to run Redlyn. They process data only to provide their service to us.

Your data may be processed on these providers' servers outside India. We may also disclose data when required by law, or to protect Redlyn or its users from fraud or abuse.

6. Who can see your comments

• Team link: members of your workspace, and anyone you give the team link to, can see all comments, including internal ones.
• Client link: anyone with the client link can see client comments only. Internal comments and internal replies are filtered out on our server and never sent to the client's browser.

Review links work like passwords. Share them only with people you trust. If a link reaches the wrong person, email us and we'll replace it with a new one straight away; the old link stops working.

7. Cookies and local storage

We use one essential cookie to keep you signed in. Your browser's local storage remembers your light or dark mode choice and, on client links, the name a client entered so they don't have to type it again. We don't use analytics, advertising or tracking cookies.

8. How long we keep data

We keep your data while your account is active. When you delete a project, its comments, attachments and screenshots are deleted too. If you ask us to delete your account, we'll delete your data within 30 days. Copies may remain in encrypted backups for up to a further 30 days before being overwritten. We may keep billing records for longer when the law requires it.

9. Your rights

Under India's Digital Personal Data Protection Act, 2023, and similar laws, you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct or update inaccurate data;
• delete your data;
• withdraw consent where we rely on it.

Email [email protected] from the address on your account. We'll reply within 30 days. If you commented on a client link, you can also contact the agency that shared it.

10. Security

All traffic to Redlyn is encrypted with HTTPS. Passwords are hashed. Reviewed websites are shown on a separate domain from your account, so a website's own code can't reach your Redlyn data. No system is perfectly secure; if we learn of a breach that affects your data, we'll notify you as the law requires.

11. Children

Redlyn is a business tool and isn't meant for anyone under 18. We don't knowingly collect data from children.

12. Changes to this policy

We'll update this page if our practices change and revise the date at the top. If a change is significant, we'll let account owners know by email or in the app before it takes effect.

13. Contact and grievances

For privacy questions, requests or complaints, contact our Grievance Officer at [email protected]. We aim to respond within 30 days.