Privacy policy · Latbase

In short

Latbase is a brand of White Blink Private Limited, a company in Bengaluru, India. White Blink Private Limited publishes the Latbase apps and runs the Latbase websites.
The Latbase Leads app uses your camera and your microphone only when you press the button for a picture or a voice note. It never records in the background.
Pictures and voice notes are sent to AI services run by other companies, which read them and send back the text. They are not used to train AI models. Section 6 says who receives them.
We use analytics and session recording tools to understand how our websites and apps are used. Section 7 names them.
We do not sell personal data, and the Latbase apps show no advertising.
You can ask us to delete your account and your data at any time. How to delete your account.

1. Who we are

Latbase is a brand of White Blink Private Limited ("Latbase", "we", "us"), a company incorporated in India.

Company: White Blink Private Limited
Corporate identity number (CIN): U72900KA2020PTC134070
Registered address: 1/1 Periot, Gajendra Nagar, Off Hosur Road, Adogudi Post, Bengaluru, Karnataka 560030, India
Privacy questions and requests: privacy@latbase.com
Support: support@latbase.com
Phone: +91 98753 32921

2. What this policy covers

This policy covers everything we offer under the Latbase name, together the "Services":

Latbase Leads: the app for Android and iPhone, the web app at leads.latbase.com and the version you can install from the browser. Teams use it at trade shows and events to capture the people they meet.
Latbase Discover at latbase.com/events, where people find business events.
Latbase Micro Events, the small business events we plan and host for companies.
Your Latbase account at account.latbase.com, the one login for every Latbase product.
Our websites: latbase.com and the addresses under it.

3. Our two roles

Your own data. For your account, your profile, what you write to us and how you use the Services, we decide why and how the data is used. Under India's Digital Personal Data Protection Act, 2023 we are the data fiduciary (the controller, in the words of other laws).

The leads you capture. When you or your team capture a person in Latbase Leads, their details belong to you or to the company you work for. You decide why and how they are used, and we handle them on your instructions as your data processor. You are responsible for having the right to collect and use those details.

If someone captured your details. If you gave your card or your details to a company at an event and want to know what they hold about you, or want it corrected or deleted, please ask that company. If you cannot reach them, write to privacy@latbase.com and we will pass your request to them.

4. What we collect

Your account

First name, last name, email address, phone number and password. The password is stored only as a one-way hash, so nobody at Latbase can read it.
A record of your logins: the time, the IP address and a label for the device. Records of login attempts are deleted after 30 days.

Latbase Leads

Lead details that you type or that are read from a picture or a voice note: first name, last name, email address, phone number, designation and company, whether the lead is hot or cold, and when you emailed or messaged them from the app.
Pictures you take of business cards, event badges, profile screens and QR codes, up to five for a lead.
Voice notes of up to three minutes that you record by holding the record button, the text of what was said, the note written from it and the follow-up tasks found in it.
Your team: its name, its members and their roles, the email addresses you invite, your event name and your message and email templates.
Your settings and time zone, so that dates show in your local time.

Latbase Discover

Your profile, if you fill it in: city, industries, what you want from events and your company. It is used to choose events for you.
The events you save.
When you are signed out, the country and city of your connection pick the first events you see. We do not store them.

When you contact us or book a call

Your name, email address, company and whatever you tell us, by email, by phone or on a call. Calls are booked through Google Calendar.

How you use the Services

Technical records kept by our servers: IP address, the time of each request, the type of device and browser, and errors. Server logs are deleted after 30 days.
Analytics and session recordings, described in section 7.

5. What the Latbase Leads app can reach on your phone

Permission	When it is used	Why
Camera	Only when you tap "Click a picture". The picture is taken with your phone's own camera app.	To photograph a card, a badge or a profile so its details fill the lead.
Microphone	Only while you hold "Hold to record". Recording stops when you let go.	To record your voice note about a lead.
Internet	While the app is open.	To log in and to keep your leads in step with our servers.
Storage inside the app	While you use the app.	To keep a copy of your leads on the phone so the app works without a connection.

The app never records sound or takes pictures in the background. It does not read your contacts, your photo library, your precise location, your messages or your call log, and it does not use an advertising identifier.

When you tap Email, WhatsApp or SMS on a lead, the app opens that app on your phone with the message written for you. You send the message yourself, from your own account. Latbase only notes the time of the tap.

6. How AI reads your pictures and voice notes

Latbase Leads uses AI models run by other companies. When a picture or a voice note reaches our servers, we send it to be read:

OpenRouter, Inc. (United States) receives each picture and recording from us and passes it to a company that runs the AI model.
The AI providers that OpenRouter uses run the models. Today a Whisper model, made by OpenAI, turns speech into text, and Gemini models, made by Google, read pictures and write the note, the tasks and the contact details. We may change models and providers, and we will update this section when we do.

What is sent: the picture, the recording and its text, the details already on the lead (name, email address, phone number, designation and company), and the date, time and time zone of the capture. Your password and your account details are never sent.

What these companies may do with it: they process it to send back a result. We have set our OpenRouter account to use only providers that do not train their AI models on what they receive. A provider may keep what it receives for a short time, for example to detect abuse, under its own terms and privacy policy.

What we do not do: we do not use your pictures, recordings or leads to train AI models of our own.

Your choice: every picture and every voice note is sent for reading. If you do not want something read this way, type the lead's details instead of taking a picture or recording a note.

AI can be wrong. Please check what it filled in before you rely on it.

7. Analytics and session recording

We use analytics and session recording tools on our websites, and we may use them in our apps, to see how the Services are used, to find and fix problems and to decide what to build next. The tools we use or may use are:

Google Analytics 4 and Google Tag Manager (Google)
Microsoft Clarity (Microsoft)
PostHog

What they collect: IP address and the approximate location worked out from it, the type of device, operating system and browser, screen size and language, the page or campaign that brought you, the pages and screens you open, what you tap, click and scroll, how long you stay, and errors. A session recording is a replay of how a page or screen was used.

What we hide: where we record sessions, we set the tool to hide what is typed into fields and the details of leads, as far as the tool allows.

What these companies may do with it: each handles the data under its own terms and privacy policy, and may use it to improve its own products and services, including its AI models.

Cookies: these tools, and the cookie that keeps you logged in, store small files or identifiers in your browser. You can block or delete cookies in your browser's settings. If you block them, logging in may not work.

In the mobile apps: the page of each app on the App Store and on Google Play states what the current version of that app collects.

8. How we use what we collect

To run the Services: to log you in, to keep your leads in step between your devices and your team, to read pictures and voice notes, to build your Excel export and to choose events for you.
To help you: to answer your questions and to fix problems.
To improve the Services: to understand how they are used and what to build next.
To keep in touch: to send service messages, such as a changed password, and news about events and Latbase products. If you create an account on Latbase Discover you agree to one email a month; every such email has a link that ends them.
To keep the Services safe and lawful: to prevent abuse and fraud, to meet our legal duties and to defend our rights.

We do not sell personal data. We do not use the leads you capture to contact those people ourselves or for any purpose of our own.

9. Consent and other grounds

Under India's Digital Personal Data Protection Act, 2023 we process your personal data with your consent, which you give when you create an account, use the Services or write to us, and for the legitimate uses the law allows, such as doing what you asked us to do and meeting a legal duty. You may withdraw your consent at any time by deleting your account or by writing to us. This does not affect what was done before, and the Services may stop working for you.

Who	What for	Where
Amazon Web Services	Hosting our servers, databases and files	United States
OpenRouter and the AI providers it uses	Reading pictures and voice notes (section 6)	United States and other countries
Google	Booking calls (Google Calendar), fonts (Google Fonts) and analytics (section 7)	United States and other countries
Microsoft and PostHog	Analytics and session recording (section 7)	United States and other countries
Unsplash	Photographs on our websites are loaded from its servers	United States and other countries

We also share data:

With your team. The admins of your team in Latbase Leads see every lead of the team and who captured it.
With advisers and authorities, such as lawyers, auditors, courts and regulators, where the law requires it or to protect our rights and our users.
With a successor. We plan to move the Latbase business to a company of its own. If the business moves to that company or to another owner, your data moves with it and this policy continues to apply to it.

11. Where we keep it and how we protect it

Our servers are in data centres of Amazon Web Services in the United States.
Data travels between your device and our servers over an encrypted connection.
Pictures, recordings and exports are stored encrypted and can be opened only through links that expire.
Passwords are stored as one-way hashes.
Latbase Leads keeps a copy of your leads on your phone or in your browser so that it works without a connection. Anyone who can unlock your device and open the app can see them, so please keep your device locked.
Only the people at Latbase who need it to run the Services can reach the data.

No way of sending or storing data is completely secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

12. How long we keep it

What	How long
Your account	Until you ask us to delete it
Leads, pictures, voice notes, notes and tasks	Until you or an admin of your team deletes them, or the team's data is deleted
Excel exports	7 days
Server logs and records of login attempts	30 days
After a request to delete	Deleted from our systems within 60 days, and from backups within 90 days, of the request
Invoices and other records the law makes us keep	As long as the law requires

When something is deleted, we keep a record that it was deleted, with its identifier and the time and none of its content, so that your other devices remove it too.

13. Deleting your data and your account

One lead, picture, voice note or task: delete it in the app. It is removed from our servers and from your team's devices.
Your account and everything in it: follow the steps on latbase.com/delete-account.

14. Your rights

You can ask us:

for a summary of the personal data we hold about you and what we do with it;
to correct or complete it;
to delete it;
to stop using it, by withdrawing your consent;
to record a person who may use these rights for you if you are unable to.

Write to privacy@latbase.com from the email address of your account. We answer within a working day and complete requests within the time the law gives us. We may ask you to confirm who you are. If our answer does not satisfy you, you may complain to the Data Protection Board of India or to the authority of the place where you live.

15. Transfers to other countries

We are in India and our servers and most of our providers are in the United States, so your data is sent to and processed in the United States and other countries. Where the law that applies to a transfer sets conditions, we follow them.

16. Where the Services are offered

The Services are for businesses and the people who work for them. They are not directed at people in the European Economic Area, the United Kingdom or Switzerland. If the law of your country gives you rights over your personal data that this policy does not mention, write to us and we will honour them where they apply to us.

17. Children

The Services are not meant for anyone under 18, and we do not knowingly collect their personal data. If you believe a child has given us personal data, write to privacy@latbase.com and we will delete it.

18. Changes to this policy

We may change this policy. The date at the top shows when it last changed. If a change matters to how your data is used, we will tell you in the app, on our website or by email before it takes effect.

19. Grievance officer and contact

For a question, a request or a complaint about your personal data, contact our Grievance Officer:

Name: Abhishek Mishra
Company: White Blink Private Limited
Address: 1/1 Periot, Gajendra Nagar, Off Hosur Road, Adogudi Post, Bengaluru, Karnataka 560030, India
Email: privacy@latbase.com
Phone: +91 98753 32921

We acknowledge a complaint within a working day and resolve it within the time the law requires.