Privacy Policy
Effective: 11 June 2026 · Operated by CITTAM SYSTEMS (OPC) PRIVATE LIMITED (CIN: U62099KA2026OPC219975), 401/18, 15th A Main, 13th Cross, Venkateshwara Layout, BTM 1st Stage, Bengaluru 560068, India ("ČITTAM", "we", "us"). This policy covers čittam linkbook (linkbook.cittam.com) and the lb.cittam.com short-link resolver.
This product policy supplements the CITTAM platform Privacy Policy; for čittam linkbook specifically, this page governs.
The short version
linkbook is built so that we hold as little of your data as the product allows. Your documents are processed entirely in your browser. We run no analytics, show no ads, and never sell or share personal data. When someone scans a QR code you printed, we count the scan — we do not record who scanned it, from where, or with what device.
What we collect, and why
| Data | When | Purpose | Kept |
|---|---|---|---|
| Email address and name (if provided) | Account creation | Sign-in, essential service notices (e.g. retention reminders) | Until account deletion |
| Short-link records (slug → destination URL, creation date, owning account) | When you create a short link | Resolving your printed QR codes — permanence is the product | Indefinitely, by design (see "Deleting your data") |
| Aggregate scan counts (a number per short link) | On scans | Shown to you on your dashboard | With the short-link record |
| Document backups (your saved link lists, as structured data) | Only with an active subscription, only when you choose to sync | Restore across devices | 90 days after subscription lapse, then deleted |
| Credit ledger (purchases, spends, balance) | On purchase or use of credits | Operating your ČITTAM wallet across čittam apps; accounting and tax compliance | As required by Indian accounting law |
Everything else — the documents you drop or paste, the QR codes you generate, your exports — is processed locally on your device and never transmitted to us.
What we deliberately do not collect
No analytics or tracking scripts, no advertising identifiers, no behavioural profiling, no
location data, and no per-scan records: when a short link is scanned we increment a counter
and redirect — we do not store the scanner's IP address, user agent, or any identifier, and
redirects are sent with a no-referrer policy so destination sites learn nothing
about the scan either.
Infrastructure and abuse prevention — the honest caveat
Like virtually every internet service, we run on infrastructure (Cloudflare) that processes connection metadata, including IP addresses, transiently in order to deliver requests and block attacks. Our own abuse protection uses short-lived, automatically expiring rate-limit counters that may be keyed on IP address. These exist solely to keep the service up; they are never joined to your account, your short links, or scan counts, and we build no records from them.
Cookies and local storage
We use one essential session cookie to keep you signed in, and your browser's local storage to hold app settings and your cached session so linkbook keeps working offline. No third-party cookies, no cross-site anything.
Who processes data on our behalf
| Provider | Role | What they handle |
|---|---|---|
| Cloudflare | Hosting, CDN, security | Service delivery; transient connection data |
| Cashfree Payments (India) | Payment processing, INR | Your payment details — we never see or store card or banking data |
| Dodo Payments (international) | Merchant of record outside India | Payment details and applicable tax handling |
| Apple App Store / Google Play | Mobile purchases | Per their own policies |
| Transactional email provider | Service emails only | Your email address, for sign-in and service notices — never marketing without consent |
We do not sell personal data, and we do not share it with anyone beyond the processors above, except where the law requires us to.
Your rights
Under India's Digital Personal Data Protection Act, 2023 — and equivalent laws where you live, such as the GDPR — you may access the personal data we hold about you, correct it, ask us to delete it, and raise a grievance about how it is handled. Write to privacy@cittam.com; we respond within 30 days.
Deleting your data
You can delete your account at any time. We then delete your email, profile, and any backed-up documents. One honest carve-out, because permanence is the product: short-link records (slug → destination) are dissociated from your identity rather than erased, so that QR codes already printed on paper keep working for the people holding them. If you want specific short links of yours to stop resolving entirely, tell us — we will disable them (they then return HTTP 410). Ledger entries are retained only as long as Indian accounting and tax law requires.
Security
All traffic is encrypted in transit (TLS). Backups are stored encrypted at rest on our infrastructure provider. Access to production data is restricted to what operating the service requires.
Children
linkbook is not directed at children. You must be 18 or older (or have a guardian's consent) to create an account or make purchases.
Grievance redressal
Grievance Officer: Jagadish — Grievance Officer, CITTAM SYSTEMS (OPC) PRIVATE LIMITED — grievance@cittam.com (or support@cittam.com), at the registered address above. Grievances are acknowledged within 24 hours and resolved within 15 days of receipt, in line with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and applicable Indian law.
Changes
If this policy changes materially, we will notify account holders by email before the change takes effect, and the effective date above will be updated. We will never weaken the "no tracking, no per-scan data" commitments quietly.