Privacy Policy

This policy describes how Vistaar Digital Solution processes personal data when you use LinkedLeads.

Last updated: October 2026

1. Overview

This Privacy Policy explains how Vistaar Digital Solution ("we", "us") collects, uses, and protects personal data when you use LinkedLeads at linkedleads.vistaardigitalsolution.in.

By using the Service, you acknowledge this policy alongside our Terms at https://linkedleads.vistaardigitalsolution.in/terms.

2. Data controller

Controller: Vistaar Digital Solution
Email: [email protected]

Address: Lokmanya Nagar, Indore, Madhya Pradesh, India

3. Data we collect

• Account data: email address, hashed PIN, plan, trial and subscription status, sign-in timestamps.
• Lead and campaign data: contact names, roles, LinkedIn profile URLs, pasted post/chat/email text, notes, pipeline stage, deal values, and similar fields you enter.

• Screenshot-derived text: when you upload a LinkedIn screenshot, we process it to extract readable text; we retain the extracted text, not the image file.

• Campaign email settings: SMTP host, username, and encrypted password if you configure campaigner email; emails you send through the Service.

• Billing data: Razorpay customer and subscription identifiers; we do not store full card numbers.

• Technical data: IP address (hashed for trial abuse prevention), request logs, and error diagnostics.

4. How we use data

We process data to provide and secure the Service, authenticate you, generate prompts and insights, send OTP and transactional email, process subscriptions, prevent abuse (including rate-limiting and sign-in throttling based on IP address and failure counts), and improve reliability.

Legal bases include performance of our contract with you, legitimate interests in operating and securing the Service, compliance with law, and consent where required (for example, optional analytics cookies).

5. Third-party processors

We use sub-processors including:

• DeepInfra — LLM text and vision inference (United States)
• Hetzner — cloud hosting (European Union)

• Hostinger (SMTP) — OTP and transactional email from [email protected]

• Razorpay — subscription billing (India)

Relevant lead text may be transmitted to LLM providers to power AI features. Do not submit data you are not permitted to share.

6. AI processing

AI inference is used for screenshot reading, search-term suggestions, prompt generation, content drafts, and similar features. Prompts are sent to our configured LLM provider for the request and are not used by us to train public models.

Provider retention policies apply to their infrastructure; we do not intentionally store raw LLM prompts beyond operational logs needed for debugging serious incidents.

7. Retention and deletion

• Lead and campaign data is retained while your account is active.
• You may delete individual leads or entire campaigns in the app.

• Free accounts may self-delete via the app; this removes your campaigns, leads, sources, and chat history.

• Verified deletion requests by email are handled within approximately 7–14 days.

• OTP challenges and similar operational records are purged on scheduled cleanup cycles.

8. Your rights

Depending on your location, you may have rights to access, correct, erase, or restrict processing of your personal data, and to lodge a complaint with a supervisory authority.

To exercise rights, email [email protected] or the Grievance Officer below.

9. Security

We use TLS encryption in transit, BCrypt-hashed PINs, JWT authentication, per-user data isolation, and server-side secrets management. Campaign SMTP passwords are encrypted at rest.
Automated limits on verification emails, sign-in attempts, and auth API requests help protect accounts and infrastructure.

No system is perfectly secure; report suspected incidents promptly to [email protected].

10. Cookies and browser storage

We use Google Analytics (Google LLC) on the Site to understand aggregate traffic and how pages are used. Google may set cookies and collect usage data subject to Google's privacy policy (https://policies.google.com/privacy). Analytics loads only after you accept non-essential cookies through our consent banner.

We store your cookie consent preference in your browser's localStorage under the key linkedleads-cookie-consent.

The application stores a JWT authentication token and your email in localStorage to maintain sign-in state. Theme preference may be stored to respect your display choice.

11. Children's data

The Service is not directed to individuals under 18. We do not knowingly collect personal data from children. Contact us to request deletion if you believe a child has provided data.

12. Grievance Officer

Grievance Officer: Himanshi Mone
Email: [email protected]

Entity: Vistaar Digital Solution

Address: Lokmanya Nagar, Indore, Madhya Pradesh, India

We will acknowledge grievances within 24 hours and endeavour to resolve them within 15 days.

13. Changes to this policy

We may update this Privacy Policy by posting a revised version at https://linkedleads.vistaardigitalsolution.in/privacy with an updated date. Material changes may be communicated by email or notice on the Site where appropriate.

Questions: [email protected]