Privacy Policy

This Privacy Policy explains how Linear Ventures ("we", "us") collects, uses, stores, and protects information in connection with the Linear Ventures Business Operating Suite (the "Platform") — a cloud-based SaaS application for business management.

This Policy applies to all Subscribers (companies and their users) who access the Platform. By using the Platform, you agree to the practices described here.

1. What Information We Collect

1a. Account & Identity Information

• Name and email address (collected via Google OAuth at sign-in)
• Company name, address, GSTIN/TRN, PAN, and contact details (entered during onboarding)
• Bank account details (entered optionally during onboarding — used only for invoice display)

1b. Business Data You Enter

• Sales invoices, purchase orders, payments, journal entries, and financial transactions
• Customer and supplier records (names, contact details, addresses)
• Products, inventory, production recipes, and pricing
• Payroll and employee records (where WPS module is used)
• Marketing campaign data and connected social media metrics

1c. Usage & Technical Data

• Log data: IP address, browser type, pages visited, timestamps
• Session tokens (managed by NextAuth, stored as secure HTTP-only cookies)
• AI Copilot queries and responses (not stored permanently — processed in real time)

2. How We Use Your Information

• To provide the Platform — store and process your business data, generate invoices, calculate tax, produce reports
• To authenticate users — verify identity via Google OAuth and manage session access
• To power AI features — send relevant financial context to Google Gemini API to generate AI responses (see Section 5)
• To integrate third-party services — connect Meta (WhatsApp, Instagram, Facebook), Google Analytics, and Razorpay as directed by you
• To maintain and improve the Platform — diagnose technical issues, monitor performance
• To comply with legal obligations — respond to lawful requests from authorities

We do not use your business data for advertising, profiling, or any purpose unrelated to operating the Platform for you.

3. Data Storage & Security

• Database. All data is stored on Neon (PostgreSQL), a SOC 2 Type II certified cloud database. Data is encrypted at rest (AES-256) and in transit (TLS 1.2+).
• Hosting. The application runs on Vercel, a SOC 2 Type II certified hosting provider.
• Tenant isolation. Each subscriber's data is logically isolated by a unique Company ID. No subscriber can access another's data.
• Operator access. Linear Ventures, as the platform operator, has infrastructure-level database access necessary to operate and maintain the service. We are contractually bound by our Terms of Service not to access subscriber data except for service operation, incident resolution, or legal compliance.
• Credentials. Database credentials and API keys are stored exclusively in Vercel's encrypted environment variable store — never in code or version control.

4. Third-Party Data Processors

We share data with the following processors solely to deliver the Platform's functionality. All are bound by their own privacy and security commitments:

We do not sell your data to any third party. We do not use data brokers or advertising networks.

5. AI Copilot & Google Gemini

• When you use the AI Copilot, your query and relevant business context (ledger balances, recent transactions for your company only) are sent to the Google Gemini API to generate a response.
• Google does not use data submitted via their API to train Gemini models, per Google's API terms.
• No AI query or response is stored permanently by Linear Ventures after the session ends.
• The Admin AI assistant (available to platform administrators only) has no access to any subscriber's financial data — it operates on platform documentation only.

6. Meta Platform Data

When you connect your Meta accounts, the Platform accesses:

• Facebook Page insights (follower count, reach, engagement) — displayed in your marketing dashboard
• Instagram Business account metrics — displayed in your marketing dashboard
• WhatsApp Business API — used to send transactional messages (invoices, statements) to your opted-in customers
• Facebook/Instagram ad account data — used to display campaign performance in your marketing tab

Meta data is fetched in real time for display. Follower/reach metrics are not stored permanently. WhatsApp message logs may be retained as part of your transaction records. All Meta data use complies with Meta's Platform Terms.

7. Data Retention

• Financial transaction data is retained for a minimum of 7 years as required by Indian tax law (GST records) and UAE VAT law.
• Account and company data is retained for the duration of your subscription.
• After cancellation, all data is retained for 90 days during which you may request an export. After 90 days, data is permanently deleted.
• Authentication logs are retained for 90 days for security purposes.

8. Your Rights

Under India's Digital Personal Data Protection Act 2023 (DPDP) and applicable UAE law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate personal data
• Erasure — request deletion of your personal data (subject to legal retention requirements)
• Export — request an export of your business data in a portable format
• Withdraw consent — disconnect third-party integrations (Meta, Google) at any time from your settings

To exercise any of these rights, contact us at support@linearventures.in. We will respond within 30 days.

9. Cookies & Tracking

• We use a single session cookie (HTTP-only, secure) to maintain your login state via NextAuth. This is strictly necessary and cannot be disabled without breaking authentication.
• We do not use advertising cookies, tracking pixels, or fingerprinting.
• If you have Google Analytics connected to your account, GA may set cookies on your company's website — this is governed by Google's privacy policy and your own cookie consent obligations.

10. Children's Privacy

The Platform is a B2B business tool intended for use by companies and their adult employees. We do not knowingly collect personal data from individuals under 18 years of age.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email to your registered address at least 14 days before they take effect. The current version is always available at this URL.

12. Contact & Grievance Officer

Linear Ventures
Email: support@linearventures.in
Website: linearventures.in

For data-related grievances under the DPDP Act 2023, contact the above email with subject line "DPDP Grievance". We will acknowledge within 72 hours and resolve within 30 days.