Privacy Notice

Svayam Incarnation Limited (124 City Road, London, EC1V 2NX, England) is the controller of personal data about User IDs, business contacts and visitors to our website, and of the data we need to run Intersink itself: security, billing, fraud prevention and safety decisions. We pay the data protection fee to the UK Information Commissioner’s Office.

For data a business puts into its channels about its own customers, the business is the controller and we are its processor, under our Data Processing Addendum. Ask that business about how it uses your data.

You give us: name, e-mail, phone, date of birth, country, password (stored only as a salted hash) or passkeys, business details and documents for verification, bank details for payouts, and messages to support.

We collect automatically: device and browser, IP address and approximate location, sign-in and security events, pages used, crash reports.

From others: payment status from payment processors, verification results from identity and company registries, and reports from other users.

We do not sell personal data and do not share it for cross-context behavioural advertising. We do not take decisions with legal or similarly significant effects about you by automated means alone.

Service providers that run Intersink for us (listed on our sub-processors page), payment processors, identity and company verification services, professional advisers, and authorities where the law requires (see legal and data requests). Members of a business see your name, e-mail and activity inside that business.

We store data in the UK and the US. When personal data moves out of the UK or EEA, we use the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses (or the UK–US data bridge for certified recipients), with technical safeguards.

Only as long as needed: account data while your account is open and 30 days after deletion; invoices and tax records for 6 years from the end of the financial year; security logs for 180 days. See the full retention schedule.

You can ask for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, to take it to another service, and withdraw consent at any time. Use the Privacy Center in your account or e-mail [email protected]. Under UK and EU law we answer within one month (extendable by two months for complex requests).

Encryption in transit and at rest, passkeys and two-step verification, least-privilege staff access, logging of administrative access, and regular testing. If a breach puts you at high risk we tell you without undue delay and notify the regulator within 72 hours where required.

You must be at least 16 to have a User ID, and 18 to run a business, sell, take payments or join the developer program. We do not knowingly collect data from children under 16 for a User ID. If we learn an account belongs to someone younger, we close it and delete its data. Channels on Intersink that are likely to be used by children must meet their own duties, including the UK Age-Appropriate Design Code.

To keep Intersink safe we process reports, evidence and decisions about accounts, profiles, businesses and channels (legitimate interests and, for illegal content, legal obligation). A decision tells the affected person what was decided and why, but never who reported them. Decisions are taken by people; automated tools only flag or temporarily limit, and you can ask a person to review any such step. The one exception is an image or text that automated screening finds may be child sexual abuse material: it is refused at once and never published, and a person in our trust and safety team then reviews it. Automated screening covers only what you publish (posts, stories, profile pictures, covers, logos, products and similar). Files you keep private, such as drive files, chat attachments, resumes and team files, are never sent to screening providers. Records are kept as set out in the retention schedule.

When a business connects a project through the Intersink API, that business is responsible for what its project does with data, under its own privacy policy, which our review checks exists. Only the access we approved is possible, and only on that business’s own channels.

We never show ads inside the Intersink panel or website, and we do not use your personal data to target ads. Ads on our partner platforms are chosen by platform, country and the advertisers’ bids only; we count impressions and clicks without identifying you, and advertisers get aggregate results only. Every ad that runs is public in the Ad Library.

If you live in California or another US state with a privacy law, you can ask to know what personal data we hold and how we use it, to get a copy, to correct it and to delete it. We do not sell personal data or share it for cross-context behavioural advertising, and we honour Global Privacy Control signals as an opt-out. We do not use sensitive personal data for purposes that would give a right to limit it. You can use an authorised agent; we may ask you to confirm your identity. We will not treat you differently for using your rights. Use the Privacy Center or e-mail [email protected].

Privacy and data protection: [email protected]. If you are in the EU, write to the same address. You can complain to the UK Information Commissioner’s Office (ico.org.uk), to the data protection authority of your EU country, or, in the US, to your state attorney general.