Privacy Policy
Last updated: June 6, 2026 · Governing law: India (DPDP Act, 2023)
1. Introduction & Data Fiduciary
Avan Link ("Service") is operated by Avan Labs ("we", "us", "our"), acting as the Data Fiduciary as defined under the Digital Personal Data Protection (DPDP) Act, 2023. This Privacy Policy explains what personal data we collect, the purposes for which we process it, your rights as a Data Principal, and how to exercise those rights.
By using the Service, you provide your free, specific, informed, unconditional, and unambiguous consent to the processing of your personal data as described in this Policy.
2. Who Can Use This Service
This Service is intended for users who are 18 years of age or older. Under the DPDP Act, 2023, anyone under 18 is classified as a child. We do not knowingly collect or process personal data of minors. If we discover that a user is under 18, their account will be suspended and data deleted.
3. Data We Collect
Account Data: Email address and authentication details when you sign up or log in.
Profile Data: Display name and account preferences you choose to set.
Bookmark Data: URLs, titles, descriptions, tags, folders, and any notes you add through the Service, Chrome extension, or mobile app.
Usage Data: Features used, click interactions, timestamps, and general usage patterns to improve the Service.
Device & Browser Data: Browser type, operating system, and device type collected automatically for compatibility and debugging.
Shared Content Analytics: When you share a folder or tag publicly, we collect view counts, import counts, and click analytics on those shared links.
Consent Records: Date, time, and version of the privacy policy you consented to, as required for DPDP compliance.
4. Purpose of Processing
We process your personal data only for the following specified purposes:
- Service delivery: Storing, syncing, and organising your bookmarks across devices
- AI features: Powering AI-based tagging, categorisation, and search
- Quality improvement: Improving our algorithms, features, and user experience
- Analytics: Understanding usage patterns — anonymised or aggregated wherever possible
- Security: Detecting and preventing abuse, fraud, and unauthorised access
- Legal compliance: Meeting our obligations under Indian law, including the DPDP Act, 2023
We do
not use your data for any purpose beyond what is listed above without seeking fresh consent.
5. Chrome Extension
The Avan Link Chrome extension accesses your browser bookmarks to sync them with the Service. The extension:
- Reads bookmark URLs, titles, and folder structure from your browser
- Sends this data to our servers for storage and AI processing
- Does not access browsing history, passwords, or other personal data
- Only activates when you explicitly trigger a sync
6. Data Storage, Location & Security
Your data is stored on Supabase cloud infrastructure. Depending on your region and infrastructure availability, your data may be stored in servers located in India, Singapore, or Australia. Data may be transferred between these regions solely to provide and maintain the Service.
We apply reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), row-level security (RLS) policies, and secure authentication. However, no system is 100% secure — especially during the early access period — and we cannot guarantee absolute security.
By using the Service, you acknowledge and consent to your data being processed and stored in the countries listed above, all of which provide a comparable level of data protection.
7. Data Sharing
We do
not sell your personal data to any third party. We may share data only with:
- Service providers: Infrastructure partners (Supabase, Cloudflare) bound by confidentiality who help us operate the Service
- Legal requirements: When required by applicable Indian law, court order, or government authority
- Public sharing (your choice): Content you voluntarily share publicly (shared folders/tags) is accessible to anyone with the link
8. Your Rights as a Data Principal (DPDP Act, 2023)
Under the DPDP Act, 2023, you have the following rights:
- Right to Information: Know what personal data we hold about you and how it is being processed
- Right to Correction: Request correction of inaccurate or incomplete personal data
- Right to Erasure: Request deletion of your personal data — you can delete your account directly from Settings
- Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (see Section 11)
- Right to Nominate: Nominate another individual to exercise your rights on your behalf in the event of death or incapacity
- Right to Withdraw Consent: Withdraw your consent at any time; withdrawal does not affect the lawfulness of processing prior to withdrawal
To exercise any of these rights, contact us at
[email protected].
9. Data Retention
We retain your personal data for as long as your account is active. Upon account deletion request:
- Your account is deactivated immediately and no longer accessible
- Personal data (bookmarks, profile, usage records) is permanently deleted within 6 months of the deletion request
- Consent records and transaction logs are retained for up to 6 months as required for legal compliance and dispute resolution
- Aggregated or anonymised data (which does not identify you) may be retained indefinitely for service improvement
You may request early deletion of your data before the 6-month period by contacting our Grievance Officer.
10. Governing Law & Jurisdiction
This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection (DPDP) Act, 2023. Users outside India acknowledge that their personal data will be processed under Indian jurisdiction.
11. Grievance Officer
In accordance with the DPDP Act, 2023, we have designated a Grievance Officer to address data-related concerns:
Avani JadavGrievance Officer, Avan Labs
Email:
[email protected]We will acknowledge your grievance within
72 hours and endeavour to resolve it within
30 days. If you are unsatisfied with our response, you may approach the
Data Protection Board of India once it is constituted under the DPDP Act, 2023.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Where changes are material or alter the basis of processing, we will re-seek your consent before continuing to process your data. The date of the latest revision is always shown at the top of this page.