Privacy Policy

All Buddy Platform | Seedicon India Private Limited | Effective Date: 1 June 2026 | Version 1.0

This Privacy Policy describes how Seedicon India Private Limited ('Company', 'we', 'us') collects, uses, stores, and shares personal data when you use the All Buddy Platform. We comply with the General Data Protection Regulation (GDPR), India's Digital Personal Data Protection Act 2023 (DPDP Act), and applicable data protection laws.

1. Data We Collect

Account and Profile Data

Name, email address, phone number, LinkedIn URL, profile photo, organisation details, and professional role.

Event Discovery and Interaction Data

Events saved or bookmarked, external event link clicks, networking connections, and attendee interaction records.

Contact and CRM Data

Business card scans (name, email, phone, company, title), voice notes, transcriptions, geo-location at time of scan, event tags, follow-up notes, and priority labels.

Communications Data

Email campaign performance data (opens, clicks), WhatsApp message delivery and read receipts, notification preferences.

Technical Data

IP address, device type, browser, operating system, session data, and usage analytics.

2. Legal Bases for Processing (GDPR)

Contract performance: to provide services you have signed up for
Legitimate interests: platform security, fraud prevention, product improvement
Consent: marketing communications, WhatsApp messages, cookie analytics
Legal obligation: compliance with tax, financial, and law enforcement requirements

3. How We Use Your Data

To operate and deliver the Platform's core functions
To display curated events and facilitate third-party event redirects
To send transactional notifications and reminders
To enable CRM, contact management, and follow-up features
To facilitate email and WhatsApp messaging campaigns you initiate
To analyse Platform performance and improve features
To detect and prevent fraud, abuse, and security incidents
To comply with legal and regulatory obligations

4. Contact Data Processed on Your Behalf

When you scan business cards or import contacts, you act as the data controller for those individuals' data. We process this data on your behalf as a data processor. You are responsible for ensuring you have a lawful basis to process third-party contact data. See our Data Processing Agreement for details.

5. Data Sharing

We share data with:

Google Cloud Vision / AWS Textract: OCR processing of business cards (data not retained by these processors beyond processing)
OpenAI Whisper / Deepgram: voice note transcription (no training on your data)
Cloud infrastructure providers (AWS/GCP): hosting and storage
Analytics providers: aggregated, pseudonymised usage data only
Law enforcement or regulators: when legally required

We do not sell your personal data to third parties.

6. International Transfers

Some service providers are located outside India and the EEA. Where data is transferred internationally, we ensure adequate protections through Standard Contractual Clauses (SCCs) or equivalent mechanisms as required by applicable law.

7. Data Retention

We retain personal data only as long as necessary. See our Data Retention Policy for specific retention periods by data category.

8. Your Rights

Depending on your jurisdiction, you have the right to: access your data; correct inaccurate data; request deletion; restrict or object to processing; data portability; and withdraw consent at any time. To exercise your rights, contact privacy@seedicon.com. We will respond within 30 days (GDPR) or as required by applicable law.

9. Children's Data

The Platform is not directed at individuals under 18. We do not knowingly collect data from minors. If we become aware of such collection, we will delete the data promptly.

10. Cookies

We use essential, functional, and analytics cookies. You can manage preferences via our Cookie Settings. See our Cookie Policy for full details.

11. Security

We implement industry-standard security measures including TLS encryption in transit, encryption at rest, access controls, and regular security audits. See our Information Security Policy for details.

12. Changes to this Policy

We will notify you of material changes via email or in-app notice with 14 days' advance notice. The updated policy will be effective upon publication.

13. Contact and Complaints

Data Protection Officer: support@seedicon.com | Seedicon India Private Limited, Bangalore, India. You have the right to lodge a complaint with your supervisory authority (e.g., India's Data Protection Board, or your local EU Data Protection Authority).