Privacy Policy

Chetan Mahajan, sole proprietor trading as ThingsLinker, 403, Satyamev Elite, Nr. Satyamev Shivalik, SP Ring Road, Bopal, Ahmedabad, Gujarat 380058, India, decides how and why personal data is processed through the Services and is responsible for it under this policy.

This policy does not cover purchases on our online store, which has its own privacy policy.

Organizations that provide devices

Where an organization provides your devices, that organization decides why and how the devices’ readings are used, and is responsible for its own use of them. ThingsLinker processes that data on the organization’s behalf to run the Services. We still protect it as this policy describes, help the organization answer requests to access, correct, or erase it, and cooperate with any complaint about it.

Information you give us

• Account details: your name, email address, and, if you add it, your phone number, and a profile image if one is added to your account.
• Contact form and support requests: your name, email, company, project details, and anything else you choose to send.
• Payment records: what you bought and when. Card, UPI, and bank details are entered on Cashfree’s secure checkout and never reach us.

Information from your devices

• Readings, status, and settings sent by the IoT devices linked to your account.
• Commands you send to devices, widget layouts, and the alert rules you create.

Information collected automatically

• Server logs: IP address, browser or app version, pages or endpoints used, and the date and time, kept for security and troubleshooting.
• In the mobile app: a notification token and crash reports (see Section 3).

Our website does not use analytics or advertising cookies. The web portals store only what they need to keep you signed in.

What the app collects

• Account details: Your name, email address, and, if you add it, your phone number, to create and run your account.
• A notification token: An identifier from Google Firebase Cloud Messaging that lets us send the alerts you set up to your phone. Each alert notification shows the alert name, the device name, and the reading that triggered it. Depending on your phone’s settings, notifications can appear on the lock screen; you can hide their content in Android’s notification settings.
• Crash reports: If the app crashes, Google Firebase Crashlytics sends us a report so we can fix it: the stack trace and the app’s state at the time, your device model, Android version and other device details, and a Crashlytics installation identifier. We do not add your user ID, account details, or custom logs to crash reports, so they are not linked to your account; an error message can occasionally include technical data the app was handling when it crashed.
• Your devices’ data: Readings and settings from the devices linked to your account, the commands you send them, and your alert rules.

Permissions and what stays on your phone

• Bluetooth and location: used only to find a nearby device during setup and send it your Wi-Fi name and password over Bluetooth. Your Wi-Fi details go to the device, not to our servers; the app remembers them on your phone for your next setup. Your location is never sent to us.
• Camera: used only to scan a device’s QR label. The code read from the label is sent to us to identify the device; the camera image is not.
• Notifications: used to show the alerts you set up. You can turn them off in the app or in your phone’s settings.

The app shows no ads, does not use an advertising ID, and does not track you across other apps or websites.

We use personal data to:

• provide, operate, and maintain the Services, your account, and your devices;
• send the alerts and notifications you set up;
• answer enquiries and support requests;
• process payments and keep billing and tax records;
• keep the Services secure, prevent misuse, and enforce our terms;
• find and fix faults, and improve the Services;
• send service emails and, if you have not opted out, occasional product news (see Section 5);
• meet our legal obligations and protect our rights.

We may create aggregated or anonymised information that no longer identifies you, and use it for any purpose, including analysis and product development.

Based on your consent

• Creating and running your account and linking your devices — withdraw by deleting your account (Section 11).
• Sending alert notifications to your phone — withdraw by turning notifications off in the app or your phone’s settings.
• Sending product news by email — withdraw with the unsubscribe link in any such email.

Without consent, where the law allows

• Complying with a law, court order, or request from a government authority.
• Responding to a medical emergency or a threat to someone’s life, health, or safety.
• Processing data you have voluntarily given us for a specific purpose, such as answering an enquiry you sent.

Withdrawing consent does not affect processing that happened before it. Some withdrawals mean we can no longer provide the Services that depend on that data.

Service emails and product news

Service emails — about your account, security, billing, and your devices — are part of the Services and are sent while you have an account. Product news is optional: every such email has an unsubscribe link, and unsubscribing does not affect your account or service emails.

We do not sell your personal data or share it for advertising. We use these service providers, who may use the data only to provide their service to us:

We also share personal data:

• With the organization that provides your devices, which can see those devices’ data.
• When required by law, such as to comply with a court order or a request from a government authority, or when we believe in good faith that disclosure is needed to protect our rights, your safety, or the safety of others, or to investigate fraud.
• In a business transfer, such as a merger, acquisition, or sale of assets, in which case this policy continues to apply to your data.
• With your consent, in any other case.

Our databases are hosted by our provider, Hostinger, in Mumbai, India. Our application servers, also run by Hostinger, are in Kuala Lumpur, Malaysia. Google Firebase, which we use only to send notifications and crash reports, may process data outside India. When data is transferred, we protect it as required by applicable law.

Data sent over the internet between the app, the web portals, and our servers is encrypted in transit with TLS (HTTPS). Devices running the ThingsLinker library also connect to our servers with TLS by default. During setup, the app sends Wi-Fi details to a device over a direct, short-range Bluetooth connection. We use reasonable administrative, technical, and physical safeguards to protect personal data. No system is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your password secret. If a breach affects your personal data, we will notify you and the authorities as the law requires.

Depending on the law that applies to you — including the Digital Personal Data Protection Act, 2023 and its Rules as their provisions come into force — you can:

• ask for a summary of the personal data we hold about you and how we use it;
• correct or update your data — most of it you can change yourself in the app or portal;
• have your data erased, by deleting your account;
• withdraw your consent;
• nominate someone to exercise these rights if you die or become unable to;
• raise concerns with our Grievance Officer and, where the relevant legal provisions apply, with the Data Protection Board of India or another competent authority.

Your rights and the applicable procedures depend on the law in force at the relevant time. To use these rights, email support@thingslinker.com from your account’s email address. We may need to confirm your identity, and we may keep data where the law requires or allows us to. If a request concerns readings that belong to an organization’s device, we will pass it to that organization and help it respond.

You can delete your account at any time in the app (Profile → Delete account) or at app.thingslinker.com/delete-account. If you cannot sign in, email support@thingslinker.com from your account’s email address and we will delete it for you. Deletion cannot be undone.

Removed from our active systems

As part of the account-deletion process we remove: your name, email address, phone number, password, profile image, notification tokens, time-zone setting, and one-time codes; your links to devices; your alert rules and alert history; your in-app notifications; and the support tickets and replies you sent. Copies in backups and logs are removed according to their retention schedules (Section 8), and records that must be retained by law are kept for the required period.

Not removed by deleting your account

• Devices, their readings, and organization records, which belong to the organization that provides the devices. Other users keep their own access.
• Records we must keep by law, such as payment and tax records.
• Crash reports, which are not linked to your account and expire after 90 days.

ThingsLinker is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

The Services link to websites and services we do not control, including our online store, app stores, and payment pages. Their own privacy policies apply, and we are not responsible for their practices.

We may update this policy from time to time. The new version applies from the date it is posted on this page, and the date at the top shows when it last changed. If a change materially affects how we use your personal data, we will tell you in the app or by email where the law requires. If you keep using the Services after a change, you accept the updated policy.

In line with the Information Technology Act, 2000, its rules, and the Digital Personal Data Protection Act, 2023, you can raise any concern about your personal data with our Grievance Officer:

Chetan Mahajan, Founder & CEO
ThingsLinker
403, Satyamev Elite, Nr. Satyamev Shivalik, SP Ring Road, Bopal, Ahmedabad, Gujarat 380058, India
Email: support@thingslinker.com
Mobile: +91 7990207097

We will acknowledge your complaint within 48 hours and resolve it within 30 days, or within any shorter period the law requires.

For anything else about this policy, email support@thingslinker.com.