Privacy Policy

1. Overview & Platform Status

Introkite ("Platform", "We", "Us", "Our") provides digital business card creation, portfolio hosting, and client lead facilitation tools for independent professionals, realtors, contractors, and businesses ("Users" or "Professionals").

This Privacy Policy describes how we collect, store, process, and protect personal data belonging to professionals who register on Introkite, as well as visitors or clients ("End Users") who access public digital business cards hosted at introkite.com/p/*.

2. Information We Collect

We collect only the data necessary to provide and operate digital portfolio and business card services:

• Professional Account Information: Name, professional title, business category, email address, phone number, business location (city, state, postal code), and authentication tokens.
• Public Portfolio Content: Media uploaded by professionals including profile photos, work samples, property listings, video thumbnails, social media links, and custom portfolio links.
• Client Contact Form Submissions: Information provided voluntarily by clients/visitors when reaching out to a professional (e.g. client name, phone number, email address, and inquiry message).
• Technical & Security Telemetry: Hashed IP addresses (salted SHA-256 for rate limiting and bot protection via Cloudflare Turnstile), device user-agent, QR code scan timestamps, and page view analytics.

3. Purpose & Legal Grounds for Processing (DPDP Act 2023)

We process personal data strictly under valid legal grounds under Indian law:

• To Deliver Services: Hosting public profile cards, rendering QR codes, and routing client inquiries directly to professionals.
• Payment & Print Order Processing: Fulfilling physical printed card orders and managing digital subscriptions through authorized payment gateways.
• Security & Abuse Prevention: Rate limiting API endpoints, preventing spam submissions, and complying with statutory obligations.

4. Data Allocation & Client Responsibility

Platform Intermediary Notice: Content displayed on public digital cards (including text, property listings, contact info, and images) is published directly by the professional account holder. Introkite acts strictly as an intermediary under Section 79 of the Information Technology Act, 2000. Professionals are solely responsible for ensuring they possess lawful consent and rights to publish any media or client information shown on their cards.

5. Data Security & Storage

All sensitive fields (such as phone numbers and addresses) are encrypted using industry-standard AES-256-GCM encryption before storage. Data is hosted across encrypted Supabase infrastructure and Cloudflare global edge storage networks. Mobile authentication credentials are encrypted locally using hardware secure keystores (expo-secure-store).

6. User Rights (Data Principal Rights)

In compliance with the Digital Personal Data Protection Act, 2023 (India), users possess the following rights:

• Right to Access & Export: Request a complete JSON archive of account data via /api/user/export in account settings.
• Right to Erasure / Deletion: Permanently delete your account, public profile, and associated media via /api/user/delete or by contacting support.
• Right to Correction: Update inaccurate business, phone, or location details directly inside the mobile or web app.
• Opt-Out of Indexing: Profiles are set to non-indexed by default (noindex meta tag). You can toggle public search engine visibility inside account settings.

7. Data Retention & Sharing

We do NOT sell, rent, or trade personal data to third-party advertisers. Data is shared only with necessary infrastructure providers (Supabase, Cloudflare, Resend for email delivery, and Stripe/RevenueCat for payments). Inactive free accounts with no login activity for 12 consecutive months may be archived or removed in accordance with data retention policies.

8. Grievance Redressal Officer

Pursuant to Rule 3(11) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and DPDP Act 2023, the contact details of our Grievance Redressal Officer are: