Privacy Policy

This Privacy Policy explains how LLM Advocates ("we," "us," or "our"), a cyber law and legal technology firm registered in India, collects, uses, stores, and protects personal data in connection with LLM Link (link.llmadvocates.com) — a URL shortening and QR code generation service. We are committed to compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and all applicable Indian law.

1. Data Fiduciary

The Data Fiduciary for personal data processed through this service is:

LLM Advocates
Chandigarh & Gurugram, India
Email: privacy@llmadvocates.com
Website: llmadvocates.com

2. What Data We Collect

2.1 Data you provide

• Destination URLs you shorten or encode as QR codes.
• Custom short codes, titles, tags, and optional descriptions you assign to links.
• UTM parameters you configure for campaign tracking.
• Password hashes (a one-way cryptographic hash — we never store plaintext passwords) for protected links.
• Contact details (if you contact us for support).

2.2 Data collected automatically when your links are clicked

• IP address of the person clicking the short link.
• User-agent string (browser and operating system type).
• HTTP Referrer (the page that sent the visitor to your short link, if any).
• Timestamp of the click.
• A/B test variant (if you use split-testing on the link).

We do not use cookies, browser fingerprinting, or third-party trackers on this service.

2.3 QR Generator — no personal data stored

When you use the standalone QR Generator tool, the content you enter (URL, text, UPI ID, vCard data, etc.) is processed only to generate the QR image. Preview files are stored temporarily in our server's public/qr-codes/ directory and are automatically deleted after 24 hours. We do not associate QR-generator sessions with any personal identifier.

3. How We Use Your Data

We use the data described above to:

• Operate the URL shortening and QR generation service.
• Provide click analytics to the person who created the short link.
• Detect and prevent abuse (spam links, phishing, terms violations).
• Respond to support and legal requests.
• Comply with applicable law and court orders.

We do not sell, rent, or trade personal data to any third party for commercial purposes.

4. Legal Basis for Processing

Under the DPDP Act, 2023, we process personal data on the basis of:

• Consent — you voluntarily submit destination URLs and configure link options.
• Legitimate uses — click logging for analytics is an inherent part of a URL-shortening service and is disclosed in this Policy.
• Legal obligation — where required by Indian law, court order, or lawful government direction.

5. Data Retention

• Short links and their analytics: retained for as long as the link is active in the system, or until you (the link creator) delete it from the Admin panel, or until we remove it for terms violations.
• Click logs (IP, user-agent, referrer): retained for up to 90 days, after which IP addresses are deleted. Aggregate click counts are retained indefinitely.
• QR preview files: deleted automatically within 24 hours.
• Batch ZIP files: deleted automatically within 7 days.

6. Your Rights Under the DPDP Act, 2023

As a Data Principal under the DPDP Act, you have the right to:

• Access — obtain a summary of personal data we hold about you.
• Correction and erasure — request correction of inaccurate data or erasure of your data.
• Grievance redressal — raise a complaint with our Grievance Officer (details below).
• Nominate a nominee — nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any right, email privacy@llmadvocates.com with the subject line "DPDP Rights Request." We will respond within the timelines prescribed by applicable law.

7. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, our Grievance Officer is:

Grievance Officer, LLM Advocates
Email: grievance@llmadvocates.com
Response time: within 30 days of receipt of complaint.

8. Data Security

We implement reasonable technical and organisational measures to protect personal data, including: HTTPS-only access, hashed password storage (bcrypt), restricted database access, and periodic deletion of temporary files. No internet transmission is 100% secure; we encourage you not to include highly sensitive personal data in short link titles, descriptions, or QR content.

9. Third-Party Links

Short links created on this service redirect to third-party websites. We are not responsible for the privacy practices or content of those destinations. Review the destination site's privacy policy independently.

10. Intermediary Status

LLM Link operates as an intermediary under Section 2(1)(w) of the Information Technology Act, 2000. We do not initiate the transmission, select the receiver, or modify the content of short links created by users. Our obligations and safe harbour protections are governed by the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified by updating the "Last updated" date above. Continued use of the service after a change constitutes acceptance of the revised Policy.

12. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of courts at Chandigarh, India.