Your privacy matters to us. This Privacy Policy explains how BM Linker ("we", "us", "our") collects, uses, discloses, and safeguards personal information when you use our mobile application, website, and related services (the "Platform"). It also describes the choices and rights you have with respect to that information.

This Policy applies to all users of BM Linker, including Marketing Service Providers ("Providers"), Clients, and visitors. By using the Platform you consent to the practices described here. If you do not agree, please do not use the Platform.

We collect information you provide directly, information generated automatically as you use the Platform, and information we receive from trusted third parties. Specifically, we collect:

We collect this information because we need it to operate the Platform, connect Clients with Providers, keep your account secure, prevent fraud, and satisfy applicable legal obligations. We limit the scope of each category to what is strictly necessary for the corresponding purpose, and we do not use hidden trackers or covert data-collection techniques.

When you provide information about someone else (for example, a colleague you tag in a business profile, or a phone number that belongs to your team), you must have their consent to share that information with us, and you agree to indemnify BM Linker against any claims arising from unauthorised sharing.

We use the information we collect for the following purposes:

Our legal bases for processing your personal data include: (a) the performance of a contract with you (for example, running your account and completing purchases); (b) compliance with legal obligations to which BM Linker is subject; (c) your consent, where we ask for it (for example, before sending marketing communications or requesting device location); and (d) our legitimate interests, provided those interests are not overridden by your rights and freedoms (for example, keeping the Platform secure or improving product quality).

We do not use your personal data for automated decisions that produce legal or similarly significant effects without meaningful human involvement. Where we use matching or ranking algorithms to surface content, those systems are advisory and do not replace human judgement.

We do not sell your personal information. We share it only in the limited circumstances described below:

Every third party we engage is bound by written data-processing terms that require them to keep your information confidential, use it only for the purpose we have agreed, and apply security safeguards at least as strong as those described in this Policy. We never authorise our vendors to use your personal information for their own marketing or resale purposes.

If a legal request is received, we review it carefully to ensure it is valid and narrowly scoped before responding. Where the law permits, and where doing so does not obstruct an investigation, we notify affected users so they can seek independent legal advice.

On the web version of BM Linker we use a small number of cookies and similar technologies (such as localStorage) to keep you signed in, remember your preferences, and understand how the site is used. You can control cookies through your browser settings, though disabling essential cookies may prevent parts of the site from working correctly. The mobile app does not use browser cookies but uses secure local storage for the same purposes.

We categorise the storage we use into three groups: (a) strictly necessary storage, which keeps you signed in and remembers your role; (b) functional storage, which remembers preferences like dark mode and notification toggles; and (c) analytics storage, which helps us understand aggregate usage patterns. We do not use advertising cookies or third-party tracking pixels.

We retain personal information for as long as your account is active or as needed to provide the Platform and comply with our legal obligations. When you request account deletion under our Delete Account Policy, we remove your personal data from active systems within sixty (60) days, subject to limited legal retention (such as financial records required under Indian tax law).

Anonymised or aggregated data that cannot reasonably be linked back to you may be retained for statistical and product-improvement purposes.

Specific retention windows include, without limitation: (a) account and profile records — for as long as the account exists, plus 60 days after deletion; (b) chat messages — retained for as long as the conversation is active; the other party retains a copy in their own history even after your account is closed; (c) transaction receipts and tax invoices — retained for up to seven (7) years to comply with Indian tax and financial recordkeeping obligations; (d) fraud- and abuse-prevention signals — retained as long as necessary to prevent recurrence, in a form that minimises identifiability; (e) diagnostic and crash logs — typically 30 to 90 days, unless a specific incident requires longer retention for investigation.

Subject to applicable law, you have the following rights over your personal information:

To exercise any of these rights, email support@bmlinker.com. We will respond within a reasonable time frame and, where required, verify your identity before acting on the request.

You are entitled to exercise these rights without discrimination. We will not deny you service, charge different prices, or provide a lower level of service because you exercised a privacy right. If you are dissatisfied with the way we handle your request, you may escalate the matter to our Grievance Officer (see Section 17) or, where applicable, complain to the competent data-protection authority.

We use industry-standard measures to protect your information, including TLS encryption for data in transit, encryption at rest for stored files, hashed passwords, role-based access controls, and audit logging. Only a limited number of authorised BM Linker personnel can access personal data, and only for legitimate operational purposes.

While we work hard to safeguard your information, no method of transmission or storage is completely secure. You are responsible for keeping your account credentials confidential and for logging out of shared devices.

We follow the principle of least privilege internally: engineers and support staff can only access the systems necessary for their role. Access to production data is logged, reviewed, and, where possible, restricted to short-lived credentials that expire automatically. We also run periodic vulnerability assessments and dependency updates to reduce the risk of known security issues.

If you suspect that your account has been compromised, please change your password immediately from More → Settings → Change Password, sign out of all sessions, and contact support@bmlinker.com. We take account-takeover reports seriously and will help you regain control as quickly as possible.

BM Linker is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal information, please contact support@bmlinker.com and we will promptly delete the affected data.

BM Linker is operated from India. Our data may be stored and processed in India and, through our infrastructure providers such as Supabase, in other jurisdictions where those providers operate data centres. Where personal data is transferred outside your country, we take reasonable steps to ensure it continues to be protected in a manner consistent with this Policy and applicable law.

The Platform may contain links to third-party websites, apps, or services (such as Razorpay checkout, Google Sign-In, or a Provider's external portfolio). These third parties operate under their own privacy policies. We are not responsible for the privacy practices of third parties, and we encourage you to review their policies before providing them with your information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes we will update the "Last updated" date above and provide additional notice (such as an in-app notification or an email) where appropriate. Your continued use of the Platform after the effective date of the revised Policy constitutes your acceptance of the changes.

From time to time we may send you promotional emails or in-app messages about new features, credit-package offers, and product news. You can opt out of these communications at any time by clicking the unsubscribe link in any promotional email, by adjusting your preferences in More → Notifications, or by emailing support@bmlinker.com. Opting out of promotional communications will not affect your receipt of essential transactional messages such as password resets, purchase receipts, or security alerts.

We do not sell, rent, or trade your email address, phone number, or contact details to third-party advertisers.

Some Platform features rely on ranking, filtering, or matching logic (for example, ordering Provider results by relevance, or surfacing recommended projects to a Provider). These systems are used to improve discoverability and quality of matches; they do not make legally significant automated decisions about you. Where a decision affects your account in a material way (for example, suspension for suspected fraud), a human reviewer is involved before the decision is finalised.

If we become aware of a security incident that results in unauthorised access to your personal data, we will notify affected users through the app or by email without undue delay after confirming the incident. Where required by applicable law, we will also notify the relevant regulatory authority. Our notification will describe the nature of the incident, the categories of data affected, the steps we have taken in response, and the steps you can take to protect yourself.

Some browsers offer a "Do Not Track" setting. Because there is no consistent industry standard for how to respond to these signals, BM Linker does not currently respond to Do-Not-Track browser signals. You can control tracking on the web version of BM Linker through the cookie and privacy controls described in Section 5.

In accordance with the Information Technology Act, 2000, and the Consumer Protection Act, 2019, of India, BM Linker has designated a Grievance Officer to receive and address complaints about this Privacy Policy and about content or conduct on the Platform. You can reach our Grievance Officer at support@bmlinker.com with the subject line "Grievance Officer". We aim to acknowledge complaints within 48 hours and to resolve them within 30 days.

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information, please contact us:

BM Linker, Palanpur, Gujarat, India.