Privacy Policy

RIK Exim Pvt Ltd ("we", "us", "our") operates LumberLinq at https://lumberlinq.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use the Service.

By using LumberLinq you consent to the practices described in this Policy. If you do not agree, please discontinue use of the Service.

We use the WhatsApp Business Platform (provided by Meta Platforms), SMS, and email to communicate with you. We send three kinds of messages:

• Service messages: verification codes, account and security alerts, billing receipts, and replies to your questions or support requests.
• Marketing messages: product updates, invitations to demos or training, and offers. We send these only if you have given us clear permission (opt-in) — for example by ticking a consent box on a form on our website or in the app, by signing a demo or registration sheet that says you agree to hear from us, or by messaging us first and asking us to keep you informed. We do not buy or rent phone number lists.
• Support and assistant messages: when you message our WhatsApp number we receive your mobile number, WhatsApp profile name, and message content. We use them to reply to you and, where you choose to use it, to let our AI assistant (see Section 5) answer your questions.

How to opt out: reply STOP to any marketing message, or email [email protected], and we will stop sending you marketing messages promptly. You may still receive service messages about your account. Opting out does not affect messages already sent.

What we keep: your mobile number, WhatsApp profile name, message content, delivery status, and a record of when and how you opted in or out. We keep this for as long as needed to support you and to show that we had your permission, and delete it on request unless the law requires us to keep it. WhatsApp handles messages under its own terms and privacy policy. We do not sell your number or your messages.

LumberLinq includes optional AI-powered features — for example Linc, our assistant that answers questions about the product and your account, and AI-assisted import of tally data. To provide them, the text you type, and where a feature needs it the relevant records from your own account, is sent securely to our AI provider, OpenAI, which processes it to produce a response for you. The same applies if the assistant is offered to you through WhatsApp or another channel.

• AI features are optional — you choose whether to use them.
• We do not use your business data to train AI models. Our AI provider does not use data submitted through its business API to train its models by default.
• AI answers can be wrong. Please check important figures and decisions before acting on them.

We do not sell your personal data. We may share data only in the following circumstances:

• Service providers who help us run the Service, each permitted to use data only as needed to perform their service, and bound by their own data-protection terms: cloud hosting; file storage (such as Backblaze); payment processing (such as Razorpay); email delivery (Brevo); SMS verification codes (Twilio); WhatsApp messaging (Meta Platforms); push notifications (Google Firebase); AI features (OpenAI); bot protection (Cloudflare Turnstile); and error monitoring (Sentry).
• Legal requirements: when required by law, court order, or a lawful request from a government authority.
• Business transfers: in connection with a merger, acquisition, or sale of assets, where the successor will be bound by this Policy or provide you with prior notice.

LumberLinq supports sign-in via Google, Microsoft, LinkedIn, and Facebook. When you use any of these options:

• You are redirected to that provider's authentication page — we never see your password.
• We receive only the minimum profile data needed to authenticate you (name, email, profile photo).
• Your continued use of that provider's service is governed by their own privacy policy.
• You can revoke LumberLinq's access at any time from your provider's account settings, after which you can log in with an email and password instead.

We retain your account and business data for as long as your account is active or as needed to provide the Service. If you delete your account:

• Your personal profile and business data are removed within 30 days.
• Anonymised or aggregated data may be retained for analytics.
• Data may be retained longer where required by applicable law (e.g. financial records).

We implement industry-standard safeguards to protect your data:

• All data in transit is encrypted via HTTPS/TLS.
• Passwords are stored using strong one-way hashing (bcrypt).
• Access to production systems is restricted and logged.
• We conduct regular dependency and security reviews.

No system is completely immune to breaches. If a security incident affects your data, we will notify you as required by applicable law.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Withdraw consent for processing where consent is the legal basis — including consent to receive marketing messages (reply STOP or email us).
• Lodge a complaint with a data protection authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

We use a minimal set of cookies:

• Session cookies: required for authentication and keeping you logged in. These are deleted when you close your browser.
• Preference cookies: to remember your language and display settings across visits.
• Analytics cookies (our marketing website only): we use Google Analytics to understand how visitors use lumberlinq.com. These are switched off until you accept analytics in our cookie banner, and IP addresses are anonymised. You can change your choice at any time.

We do not use advertising cookies, and we do not track you across other websites.

LumberLinq is a business tool intended for users aged 16 and above. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently done so, we will promptly delete that information. If you believe a minor's data has been collected, please contact us immediately at [email protected].

Your data may be stored and processed on servers located outside your country of residence. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place in accordance with applicable data protection laws.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. For material changes, we will notify you via email or a prominent notice within the application at least 7 days before the change takes effect. Your continued use of the Service after that date constitutes acceptance of the updated Policy.

For any privacy-related questions, data access requests, or to report a concern:

Email: [email protected] Company: RIK Exim Pvt Ltd Website: https://lumberlinq.com