Privacy Policy

1. Who we are

Lindi is operated by Lindi Technologies Limited, a company registered in England and Wales. We are the data controller for the personal data we collect through the Lindi platform.

• Registered address: 6 Larke Close, BN43 6ED, Shoreham-by-Sea, United Kingdom
• Contact email: info@lindi.ai

When our users input data about their own customers (such as names, phone numbers, and job details), the user is the data controller for that data and Lindi acts as a data processor on their behalf.

2. What data we collect

We collect the following categories of personal data:

Account data

• Phone number (used for WhatsApp-based login and communication)
• Business name and trade type

Business data

• Pricing information (hourly rate, parts markup percentage, call-out fee)
• Working hours and schedule preferences
• Currency preference

Customer data (input by our users about their customers)

• Customer names, phone numbers, and addresses
• Job descriptions and details

Conversation data

• WhatsApp messages synced through the platform

Financial data

• Invoices, quotes, and payment status
• Stripe handles all payment card details directly — Lindi never sees or stores your card numbers

Technical data

• IP address, browser type, device information
• Error reports (collected via Sentry for debugging purposes)

3. Why we collect it

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

Contract performance

We process your account, business, customer, conversation, and financial data because it is necessary to provide you with the Lindi service. Without this data, we cannot deliver the features you signed up for.

Legitimate interest

We use Sentry to collect error reports so we can identify and fix bugs. We process technical data to maintain service security and performance. These interests do not override your rights.

Consent

We only set analytics cookies (Google Analytics) if you explicitly opt in via our cookie consent banner. You can withdraw consent at any time by clicking “Cookie Preferences” in the footer of any page.

4. Who we share data with

We share personal data with the following third-party service providers (sub-processors):

• Stripe — processes payments on your behalf. Stripe's privacy policy applies to payment card data.
• Google Analytics — helps us understand how people use our website (only with your consent).
• Sentry — captures error reports to help us fix bugs and improve reliability.
• WhatsApp / Meta — provides the messaging infrastructure that powers Lindi's core functionality.

We do not sell your personal data to anyone. We only share data with sub-processors as described above, or where required by law.

5. Data retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 90 days, except where we are required by law to retain it (for example, UK tax law requires us to keep invoicing records for up to 6 years).

6. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (subject to legal retention requirements)
• Portability — receive your data in a machine-readable format
• Restriction — ask us to limit how we use your data
• Objection — object to processing based on legitimate interest
• Withdraw consent — withdraw consent for analytics cookies at any time

Under South Africa's POPIA, you additionally have the right to:

• Be notified when your personal information is collected
• Lodge a complaint with the Information Regulator

To exercise any of these rights, email us at info@lindi.ai. We will respond within 30 days.

7. International data transfers

Lindi serves users in the United Kingdom and South Africa. Your data may be transferred between these jurisdictions and to countries where our sub-processors operate. Where data is transferred internationally, we ensure appropriate safeguards are in place, including UK adequacy decisions and standard contractual clauses where applicable.

8. Data hosting

Your data is stored on servers located in the United Kingdom. Where data is transferred internationally to sub-processors in other jurisdictions, appropriate safeguards are in place as described in section 7.

9. Cookies

We use a small number of cookies to keep you logged in and, with your consent, to understand how people use our website. For full details, see our Cookie Policy.

10. Children's data

Lindi is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from someone under 18, we will delete it promptly. If you believe we have inadvertently collected data from a child, please contact us at info@lindi.ai.

11. Automated decision-making

Lindi does not use automated decision-making or profiling that produces legal effects or similarly significant effects on you. Any automated features in the platform (such as suggested quotes) are tools to assist you, not decisions made on your behalf.

12. WhatsApp & Meta

Lindi integrates with WhatsApp to sync your business conversations. Messages sent via WhatsApp are subject to WhatsApp's own Terms of Service and Privacy Policy.

WhatsApp messages between users are end-to-end encrypted. However, Lindi receives message content via the WhatsApp Business API, which operates outside end-to-end encryption. This means message content is accessible to Lindi for the purpose of providing the service (such as generating quotes and managing conversations).

13. Data breach notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours as required by UK GDPR. We will also notify affected users without undue delay via email or in-app notification.

For users in South Africa, we will notify the Information Regulator and affected users as soon as reasonably possible, in accordance with POPIA.

14. Changes to this policy

We may update this privacy policy from time to time. For material changes, we will notify you via email or through the Lindi platform before the changes take effect. We encourage you to review this page periodically.

15. Contact & complaints

If you have any questions about this privacy policy or how we handle your data, contact us at info@lindi.ai.

If you are unhappy with how we have handled your data, you have the right to complain to:

• UK: Information Commissioner's Office (ICO) — ico.org.uk
• South Africa: Information Regulator — inforegulator.org.za