Privacy Policy | Locate & Link

This Privacy Policy describes how Locate and Link (“we”, “us”, or “our”) collects, uses, processes, stores, and protects personal and business information when you access or use our mobile applications, web platform, and networking directory services (collectively, the “Platform”).

1. Platform Eligibility & Age Requirement

Locate and Link is a business-to-business (B2B) professional networking and business directory platform designed exclusively for business owners, professionals, and corporate representatives.

Important: Our services are intended solely for individuals aged 18 and older. We do not knowingly collect or solicit personal data from minors. If we discover that an account has been registered by an individual under 18, we will take immediate steps to terminate the account and purge the associated data.

2. Information We Collect

We collect information you provide directly, as well as data generated automatically during platform usage:

A. Account & Identity Information

When you register, we collect your full name, unique username, email address, phone number, and password credential. Passwords are cryptographically hashed using industry-standard bcrypt before storage and are never stored in plain text.

B. Professional & Business Profile Data

Information you provide to establish your professional presence, including business name, tagline, description, year established, employee count, annual revenue range, industry categories, business address, city, state, postal code, coverage areas, profile avatars, business logos, banners, and gallery images.

C. Business Verification & KYC Documents

If you request verified business status, you may upload compliance documentation such as GST certificates, PAN cards, Udyam certificates, or trade licenses. These documents are stored privately in encrypted cloud storage and are accessed strictly by authorized compliance personnel for verification.

D. User-Generated Content, Communications & Networking

We store interactions conducted through the Platform, including 1-to-1 direct chat messages, business reviews and ratings, chapter memberships, meeting schedules, and business referrals passed between members (including prospect name, email, and phone passed with requisite consent).

E. Technical, Session & Device Information

To maintain account security and deliver push alerts, we collect device push tokens (via Apple APNs and Google FCM relay), cryptographic session refresh tokens, IP addresses, client User-Agent strings, and security event logs.

3. Device Permissions & Location Data

Our mobile application requests specific device permissions strictly when needed for core functionality:

Camera: Used solely to scan in-app QR codes for member profiles and chapter meeting check-in.
Photos / Media Library: Used solely to select and upload profile avatars, business logos, banners, and gallery media.
Push Notifications: Used to deliver alerts regarding messages, referrals, connection requests, and chapter updates.
Biometrics (Face ID / Fingerprint): Used purely on-device for local app lock convenience. Raw biometric templates are handled entirely by your operating system’s Secure Enclave / Keystore and are never accessed, captured, or transmitted to our servers.

No Real-Time GPS Tracking: Locate and Link does not request or collect device GPS coordinates, background location, or precise geolocation. All location information displayed in directories is manually entered by business owners (e.g. city, state, postal code).

4. How We Use Your Information

We process your data strictly for legitimate operational purposes:

Facilitating member discovery, business directory indexing, and networking connections;
Delivering direct messages, meeting schedules, and intra-chapter referrals;
Authenticating accounts via SMS OTP (MSG91) and email verification (Resend/SMTP);
Reviewing KYC documents to grant verified business badges;
Enforcing our Community Guidelines, moderating reported content, and maintaining safety through symmetric blocking;
Sending critical account, security, and administrative notifications.

5. Third-Party Processors & Service Providers

We do not sell, rent, or trade your personal information. We share data only with verified cloud infrastructure providers who process data on our behalf under strict confidentiality agreements:

AWS (Amazon Web Services): Encrypted cloud storage (S3) and CDN distribution (CloudFront) for uploaded media and private documents.
MSG91: Telecommunications gateway for transactional SMS OTP delivery in India.
Resend / SMTP (Nodemailer): Email delivery service for transactional notices, verification codes, and security alerts.
Expo (Expo Server SDK / Apple APNs / Google FCM): Secure delivery relay for remote push notifications.

6. Safety, Reporting & Blocking

Locate and Link incorporates comprehensive safety tools. Members can report inappropriate profiles, conversations, businesses, or reviews using our in-app reporting tool. Reports are reviewed by human moderators.

When you block another member, the block is enforced symmetrically on our servers: the blocked member cannot message you, request connections, create referrals, schedule meetings, or view your private contact information. You may unblock members at any time from your Account Settings.

7. Account Deletion & Data Retention

You have complete control over your account. You can initiate account deletion at any time directly in the mobile application via Settings > Delete Account.

Our 30-Day Deletion Lifecycle:

Immediate Deactivation: Upon your request, your account status is immediately changed to PENDING_DELETION. Your public profile is hidden, your business profiles are archived, active listings are closed, push notification tokens are deleted, and active authentication sessions are revoked.
30-Day Grace Period: Your account remains de-indexed for 30 calendar days to prevent accidental loss or malicious deletion. During this window, you cannot log in.
Permanent Hard Deletion: After 30 days, our automated purge permanently hard-deletes your account record, password hash, personal profile, uploaded media assets, business listings, direct chat messages, and conversations from our active database.
Relational Integrity & Anonymization: To protect third-party audit integrity and prevent fraudulent exploitation, historical referral logs, meeting completion logs, and moderation reports are anonymized with user identifiers permanently disassociated (SET NULL).

Disaster Recovery Backups: Encrypted database backup snapshots may retain de-identified database records for a limited operational period necessary for disaster recovery, business continuity, and system security before being permanently overwritten according to our infrastructure rotation cycle.

8. Data Security Safeguards

We implement robust technical and organizational measures to safeguard your information, including HTTPS/TLS encryption in transit, bcrypt password hashing, encrypted token storage, automated rate limiting, role-based access control, and strict database constraints.

9. Contact Us & Grievance Redressal

If you have questions, feedback, or requests regarding your data or this Privacy Policy, please contact our privacy team:

Entity Name: Locate and Link

Privacy Contact Email: privacy@locateandlink.com

Support Email: support@locateandlink.com

Physical Address:
Locate and Link
3rd Floor, Country Head Preschool Building,
Besides Jaddu's Food Field Restaurant,
Everest Park Main Road, Nana Mauva Main Road,
Off Kalawad Road, Rajkot - 360005, Gujarat, India.