Scope and responsibility
Touchmark Descience Private Limited operates HUDDLE. This policy covers huddleapp.in and associated application and service domains. We handle account, service-operation, billing and sales-enquiry information. An organization also determines how its members’ profiles and captured contacts are used; contact that organization about its own processing. We process organization data to provide the service and under the applicable customer arrangement.
Information we collect
Depending on what you use, this includes name and email, account credentials in protected form, organization and role, profile contact details, photos and banners, card and NFC assignments, details voluntarily submitted through contact exchanges, sales-enquiry requirements and contact consent, subscription and payment reference/status information, activity events, security and operational logs, authentication/session information and essential browser storage. We do not ask for UPI PINs, card PINs or banking passwords. Avoid putting sensitive personal information in public cards or enquiry messages.
Why we use it
We use information to authenticate accounts; provide, share and manage cards; administer organizations and permissions; deliver consented contact exchanges; show networking activity; enforce plan limits; respond to enquiries and support; operate billing; prevent abuse; investigate incidents and comply with applicable law. We rely on consent or other grounds permitted by applicable law as appropriate. A sales-enquiry consent covers replying to that enquiry, not unrelated promotional mailing.
Public and shared information
A published card is intended to be shared. Anyone with the URL, QR code or NFC link may see the fields published on it and save a contact file. Card owners and authorized organization administrators may see contact details a recipient submits back and the associated activity allowed by their roles. Do not publish information you wish to keep private. Changing or deleting a profile does not withdraw copies already downloaded by others.
No sale of personal data
We do not sell personal data or provide it to data brokers. We do not share private contact lists with unrelated businesses for their independent advertising. Operational disclosures to service providers, authorized organization users and legally required recipients are described here; they are not a sale of your data.
Service providers and lawful disclosures
We use Vercel for hosting and Supabase for database and file storage. Razorpay handles payments when configured. Resend may deliver service emails when enabled; Google sign-in may be available when configured. These providers receive only information needed for their service, under applicable arrangements. We may disclose information when legally required, to protect users and the service, or in a lawful business transfer with appropriate safeguards and notice. Third-party links and payment pages have their own privacy policies.
Cookies, storage and analytics
Essential session cookies and browser storage support sign-in, security and application preferences. Networking activity is used to provide card and team analytics; it does not establish that a downloaded contact was imported into an address book or that an NFC physical tap has been independently verified. We do not use this notice as consent to non-essential advertising trackers. If such tracking is introduced, we will update the notice and seek any required consent.
Storage, retention and security
We use access controls, organization scoping, protected credentials and encrypted connections where supported to reduce risk. No system is risk-free. Data may be processed in the locations used by our configured service providers, which may include locations outside India. We retain information for the purposes described here and applicable legal, accounting, security and dispute requirements. Retention depends on the record and purpose; no universal seven-day auto-deletion applies. Account closure or deletion requests are reviewed with authorization checks and applicable retention exceptions. Backup copies may persist through their rotation cycle.
Your choices and requests
You can update permitted profile fields, deactivate cards where your role allows, stop sharing a public link and decline contact exchange. To request access, correction, deletion, withdrawal of consent or grievance assistance, email info@touchmarkdes.com with the subject “HUDDLE Privacy”. We may verify identity and organization authority and explain any legal or technical limit. Withdrawing consent does not undo prior lawful processing and may affect features that require the information. You may pursue remedies available under applicable Indian law.
Children and updates
HUDDLE accounts are intended for adults aged 18 or over. We do not knowingly invite children to create accounts or submit personal data. Contact us if you believe a child’s information has been submitted. We will review the concern and take appropriate action. We update this notice when practices change and provide additional notice or consent choices where required.
Contact
Privacy and grievance correspondence: info@touchmarkdes.com, subject “HUDDLE Privacy / Grievance”. Write to Touchmark Descience Private Limited, 21B, 5th Cross Street, South Phase, Industrial Estate, Guindy, Chennai 600032, Tamil Nadu, India. This policy describes our practices; it does not claim certification or regulatory approval.