Privacy policy.

Written so you can actually read it. If anything here is unclear, tell us and we will explain it and then fix the wording.

Last updated 19 August 2026

Who is responsible for your data

OurLink.is is operated by CodeEdge Tech and Ventures Private Limited, an Indian private limited company registered in Bengaluru, as part of SocialHalwa. Under the Digital Personal Data Protection Act 2023 we are the Data Fiduciary for the information described here, which means we are the ones responsible for it and the ones you hold to account.

Company: CodeEdge Tech and Ventures Private Limited
Registered address: No 53, 4th Cross, Nagappa Block, Srirampuram, Bengaluru 560021, Karnataka
CIN: U62099KA2026PTC215620
GSTIN: 29AANCC5293R1ZJ
Contact for privacy questions: dm@ourlink.is
Grievance officer: See the grievance page

What we collect, and why

Grouped by why we have it, because that is the part that matters.

To let you in

Your phone number: It is how you log in. We send a code to it.
Your name, if you give one: So messages from us are not addressed to a number.
Your email, if you give one: Invoices and account notices. Optional.

To make your page work

Everything you put on your page: Your business name, photos, prices, timings, links and your WhatsApp number. This is your content and it is public by design once you publish.
Your chosen address: ourlink.is/yourname, and any domain you point at us.
Your language settings: So we serve the right version.

To tell you what your page is doing

Page opens and button taps: So you can see whether the page is working. We count these without tracking cookies and without following anyone around the internet. The only cookie we set is the one that remembers whether you want to see prices in rupees or dollars.
Rough location, at country and city level: From the visitor's IP address, which we do not store in full.
Device type and browser: So we know whether to worry about a phone we have not tested.
Which language the visitor's phone was set to: So we can serve the right version.

To take your money

Plan, payment status and invoice history: So we know what you bought and can produce a GST invoice.
Your GSTIN, if you give one: So it appears on the invoice.

We do not receive your card number or your UPI ID. Payments run through Razorpay on their own systems. We are told whether a payment succeeded and nothing more.

About the people who contact you through your page

When someone enquires through your page, that information is collected for you, not for us. You decide what to do with it. In legal terms you are the Data Fiduciary for your own enquiries and we are processing them on your behalf. In plain terms: they are your customers, they are your responsibility, and we hold the list for you and hand it over whenever you ask.

Things we do not do

We do not sell your details or your visitors' details. Not to advertisers, not to data brokers, not to anyone.
We do not put advertising trackers on your published page. No Meta pixel, no Google tag, unless you are on a paid plan and you deliberately add one yourself.
We do not read your WhatsApp conversations. We cannot. They happen inside WhatsApp between you and your customer, and all we record is that the conversation started.
We do not use your content to train anything without asking you first, plainly, in a message you would notice.
We do not build shadow profiles of visitors across different businesses' pages.

The other companies involved

We use a small number of services to run this. Each one only gets what it needs.

Cloudflare: Serving the site quickly and keeping attacks off it. Every request to ourlink.is passes through Cloudflare before it reaches us.Processed in Outside India, across Cloudflare's global network.
Razorpay: Taking payments. Your customers' card and UPI details stay on Razorpay's systems and never reach ours.Processed in India.
Meta Platforms, through the WhatsApp Cloud API: Delivering the WhatsApp messages your page sends and receives.Processed in Outside India, across Meta's own network.
DigitalOcean: Storing the images and files you put on your page.Processed in Bangalore, India.
Microsoft, through Azure OpenAI: Writing page copy when you ask us to. Your enquiries are never sent to it. Page wording is.Processed in Outside India, pinned to a single region.
Supabase: Storing your account, your pages and your enquiries.Processed in Mumbai, India.
Sentry: Recording errors so we can fix them. It sees what broke and on which page, never the contents of an enquiry.Processed in Outside India.

Three parts of this list are not settled yet: . We have not chosen those suppliers, so naming one today would be a guess. Each will be added above, with what it receives and where it processes it, before the first page goes live. A privacy policy with a vague list is worse than a stated gap, because a gap does not read as a promise.

Where your data sits, and for how long

Your account, your pages and your enquiries are stored in India. That is a choice we made rather than a rule we are following: the Digital Personal Data Protection Act 2023 does not currently require Indian companies to keep personal data in India.

Two of the services named above do their work outside India, because there is no Indian option for either. WhatsApp messages are delivered by Meta, on Meta's own network. Page copy, when you ask us to write it, is generated by Microsoft in a single named region. Wherever your data leaves India, we hold a written data protection agreement with the company that receives it, and we are the ones answerable to you for what it does.

Your account and your pages: As long as your account is open
Your enquiries: As long as your account is open, or until you delete them
Page open counts: 24 months, then only totals
Invoices and tax records: 8 years, because Indian tax law requires it. This is the one thing we cannot delete on request.
Deleted account data: 30 days, then removed. We send you the export first.
Support messages: 24 months

What you can ask us for

Under the Digital Personal Data Protection Act 2023 you have these rights. We would give you most of them anyway.

Get a copy. Everything we hold about you, as a file, at any time. There are buttons for this on the data page so you do not have to write to anybody.
Fix something wrong. Change it yourself in settings, or tell us.
Delete it. Delete your account and we send you the export, hold it 30 days in case it was a mistake, then remove it. Tax records stay, because the law says they must.
Withdraw consent. For anything you agreed to that is not required to run your account.
Nominate someone. You can name a person to act for you if you die or become unable to act. Ask us and we will set it up.
Complain. To our grievance officer first, and to the Data Protection Board of India if we do not sort it out.

We answer these within 30 days, usually much sooner, and we do not charge for them.

Children

OurLink is not for people under 18. We do not knowingly let a child open an account. If you tell us a page belongs to a child, we will take it down and delete the account.

If your business serves children, for example a coaching centre, that is fine. Just do not put a child's photo, name or contact details on a public page without their parent's consent, and be careful what your enquiry form asks for.

If there is a breach

If someone gets access to personal data they should not have, we will tell the Data Protection Board of India and we will tell you, as quickly as we can put together an accurate description of what happened. We will say what was affected, what we did about it and what you should do. We will not wait until we have a comfortable version of the story.

Changes to this policy

When we change this page we change the date at the top. If a change is significant, meaning it affects what we collect or who we share it with, we will message you about it rather than quietly updating the page.

Questions go to dm@ourlink.is. If you are not satisfied with the answer, our grievance officer is next.