Privacy Policy

Hab Business Solutions ("Hab", "we", "us") is the data controller under EU/UK GDPR and the data fiduciary under India's Digital Personal Data Protection Act 2023 ("DPDP") for personal data processed through Hab Lead Intelligence, the application served at https://demand.habsolutions.cloud. We operate from India and serve clients globally.

This notice is specific to Hab Lead Intelligence. It sits alongside, and does not replace, the group-wide Hab Business Solutions privacy policy published at https://habsolutions.cloud/legal/privacy. Where this notice is more specific, it governs this application.

For any privacy question, request or complaint, contact our Grievance Officer and data protection contact at hari@habsolutions.cloud.

Hab Lead Intelligence is an internal, invite-only business-to-business lead intelligence workspace. An administrator uploads their own company profile, the application derives an ideal customer profile, discovers companies matching it from publicly available web sources, verifies and scores those companies, and produces sales-ready outputs such as dashboards, spreadsheets and reports.

There is no public sign-up. Accounts are created by a Super Admin, and access can be withdrawn by a Super Admin at any time.

• Account data created by an administrator: name, work email address and assigned role.
• Security and audit records: sign-in, sign-out, failed sign-in attempts, and administrator actions such as creating, editing, deactivating or deleting an account.
• Business data you provide: documents and details about your own company that you upload so the application can build your ideal customer profile.
• Publicly available business information about companies discovered on the web, such as company name, address, phone number, website, business category, ratings, published leadership or contact details, and the source page each item came from.
• Technical data: IP address, browser and device information, and standard server logs.
• Google account data, only if you choose to connect a Google account (see section 4).

We do not knowingly collect data from anyone under 18.

Connecting a Google account is entirely optional. If you connect one, you are asked to grant only the permissions listed below, and each is used solely for the stated feature, on an action you take inside the application.

We request the narrowest permissions that make each feature work. If you decline a permission, only the feature that depends on it becomes unavailable; the rest of the application continues to work.

Hab Lead Intelligence's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, for data obtained through Google APIs:

• We use it only to provide and improve the user-facing features described in section 4.
• We do not sell it, and we do not transfer it to data brokers, information resellers or any other party except as needed to provide those features, to comply with applicable law, or as part of a merger or acquisition with prior notice to you.
• We do not use it for advertising, ad targeting, ad personalisation or any advertising measurement purpose.
• We do not use it to develop, train, improve or fine-tune generalised or non-personalised artificial intelligence or machine-learning models.
• We do not allow humans to read it, except with your explicit consent for a specific message or file, where necessary for security purposes such as investigating abuse, to comply with applicable law, or where the data has been aggregated and anonymised.

• Performance of a contract: operating the workspace for the client organisation that holds the account.
• Consent: connecting a Google account and each permission granted in that flow; consent can be withdrawn at any time by disconnecting the account.
• Legitimate interests: securing the platform, keeping audit records, preventing abuse, and researching publicly available business information for business-to-business purposes.
• Legal obligation: retaining records and responding to lawful requests where required.

• Data is held in a managed cloud database with row-level access rules, so each account can reach only the data it is entitled to.
• Google access and refresh tokens are stored server-side only. They are never sent to the browser, never written into client code, and never logged.
• All traffic is encrypted in transit. Application secrets are read only inside server-side handlers.
• Roles are held in a dedicated table and checked through a privileged database function; role resolution fails closed, so an account without a granted role is denied access.
• Administrative access is limited to authorised personnel, and administrator actions are recorded in an audit trail.

• Account data is kept while the account is active, and for up to 12 months after it is deactivated, so access can be restored and disputes resolved.
• Security and audit records are kept for up to 24 months.
• Project, lead and enrichment data is kept while the client engagement is active, and is deleted within 90 days of a written deletion request or of the engagement ending, unless the law requires longer.
• Google tokens are deleted immediately when you disconnect a Google account, or when the account is deleted.

To request deletion of your account and its data, email hari@habsolutions.cloud. We acknowledge requests within 7 days and complete them within 30 days.

• Inside the application: open Settings, find the connected Google account, and choose Disconnect. This deletes the stored tokens straight away and stops all further access.
• From Google: open your Google Account, go to Security, then Third-party apps and services, select this application and choose Remove access. Google then revokes the tokens at its end.

We do not sell personal data and we do not use it for advertising. We share it only with service providers that help us run the platform, under contract and on our instructions:

• Cloud hosting, database, authentication and file storage providers.
• A web search and web data provider used to discover and read publicly available company pages.
• An artificial-intelligence provider used to summarise documents, draft insights and draft outreach text; content sent for this purpose is not used to train that provider's general models.
• The Google services you choose to connect, acting on your instruction.

We may also disclose data where we are legally compelled to do so, or to establish, exercise or defend legal claims.

We operate from India and use service providers that may process data in other countries, including the European Union and the United States. Where personal data leaves its country of origin, we rely on appropriate safeguards such as standard contractual clauses and the provider's own transfer mechanisms.

• Access a copy of the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Request deletion of your data, subject to legal retention duties.
• Withdraw consent, including disconnecting a Google account, at any time.
• Object to or request restriction of certain processing, and request portability where applicable.
• Nominate another person to exercise your rights on your behalf under the DPDP Act, and lodge a complaint with your supervisory authority or the Data Protection Board of India.

To exercise any right, email hari@habsolutions.cloud. We may need to verify your identity before acting.

This application uses only the cookies and local browser storage needed to keep you signed in, remember your email address if you ask it to, and keep the session secure. It does not use advertising cookies or cross-site tracking.

If a personal data breach occurs that affects you, we notify the affected users and the relevant authorities without undue delay and within the timeframes required by the DPDP Act and GDPR, and we describe what happened, what data was involved and what we are doing about it.

This application is a business tool intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child's data has reached us, contact us and we will delete it.

We may update this policy as the application changes. The last-updated date at the top of this page always reflects the current version, and material changes are communicated to account holders by email.

Hab Business Solutions — Grievance Officer and data protection contact: hari@habsolutions.cloud. India, serving clients globally. Group privacy policy: https://habsolutions.cloud/legal/privacy.