Privacy Policy

1Overview

Clink Online Private Limited ("Clink AI", "we", "our") is committed to protecting your privacy across all our Services — our website at clinkonline.in, SaaS-based AI platforms, mobile applications and services.

2Company Identity

3Data We Collect

Information You Provide

• Contact forms: name, email, phone, company, message
• Account registration: email, name, password hash, organisation
• SaaS onboarding: business info, billing address, GSTIN, payment details (via PCI-DSS gateways)
• Newsletter: email address and preferences
• Job applications: CV, cover letter, professional history

Automatically Collected

• Usage data: pages visited, clicks, session duration, referral source
• Technical data: IP address, browser, OS, device type
• Log data: server access logs, API request logs (SaaS)
• Cookies and tracking technologies (see Section 9)

4How We Use Your Data

We process your data under the IT Act 2000 and SPDI Rules 2011 for: delivering our AI SaaS products and services; processing payments; sending transactional and (with consent) marketing communications; product analytics and improvement; security monitoring; and legal compliance obligations under Indian law.

5SaaS Platform Data

When you use our AI SaaS products, we act as a data processor and you remain the data controller for your end-user data. Your data is processed solely to deliver the contracted service. We do not sell or share your customer data for commercial purposes. Each customer's data is logically isolated with encryption at rest and in transit.

6AI Products & Data

• We do not use your customer data to train our AI models without explicit written consent. Our AI products use proprietary or licensed training datasets.
• Anonymised, aggregated usage metrics may be used to improve product performance.
• AI outputs are stored securely and accessible only to the relevant customer and authorised Clink AI support staff for troubleshooting.

7Data Sharing

We do not sell your data. We share it only with: vetted service providers (AWS India, Razorpay, SendGrid, Google Analytics — all under data protection contracts); government/law enforcement when required by Indian law; and technology partners under signed data sharing agreements using anonymised data only.

8Storage, Retention & Security

Data is stored primarily on servers in India. Security measures include AES-256 encryption at rest, TLS 1.2+ in transit, role-based access control, MFA for all staff, regular penetration testing and a 72-hour breach notification process.

9Cookies

We use essential cookies (required for site function), analytics cookies (Google Analytics, IP anonymisation enabled) and preference cookies. We do not currently deploy advertising or retargeting cookies. See our Cookie Policy for full details.

10Your Rights

Under Indian data protection law (SPDI Rules 2011 and the Digital Personal Data Protection Act 2023), you have rights of: Access, Correction, Consent Withdrawal, Grievance Redressal, Data Portability (SaaS customers) and Erasure (subject to legal retention obligations).

11Children's Privacy

Our Services are not directed at children under 18. We do not knowingly collect data from minors. Contact [email protected] if you believe we have inadvertently collected a minor's data.

12Policy Changes

We may update this policy periodically. For material changes we will update the "Updated" date, post a notice on our homepage for 30 days and email registered users and SaaS customers.

13Contact Us