Privacy policy
Last updated 6 October 2026
This policy explains what Indicor Studios Pvt. Ltd. (“Indicor”, “we”) collects when you use catalog.indicors.com and the Indicor mobile app, why we collect it, and what you can do about it. It covers three groups of people: staff of companies that use Indicor, buyers who open a link shared from Indicor, and visitors to this website.
What we collect
If you have an Indicor account
- Your name, email address, phone number, company details and role. Your password is stored only as a hash.
- One-time codes we email you to verify your account.
- What your company adds: products, photos, finishes, presentations, quotations and e-catalogs, and the buyers you save (name, company, email, phone, website, country and, if you scan one, a photo of their visiting card).
- An activity log of who created, changed or shared what, and when, visible to your company.
If you open a link shared from Indicor
- When you opened it and which items you looked at.
- Your IP address and the approximate location it points to (country, region, city), your browser, operating system and device type, and the page that sent you.
- Anything you type into an enquiry form on a shared e-catalog.
If you contact us through this website
- The name, company, email, phone number and message you send.
In the mobile app
- Camera: to scan product QR codes, which are read on your phone and not sent anywhere, and to photograph products or visiting cards that you choose to upload.
- Notifications: your phone’s push token, so we can alert your company when a buyer opens something it shared.
- Offline catalog: product details and images are saved on your phone so the catalog works without a connection. They are removed when you uninstall the app.
- The app shows no ads, does not use an advertising ID and contains no third-party analytics.
Cookies
The website sets one session cookie to keep you signed in. We use no advertising or tracking cookies. Vercel Speed Insights measures how fast pages load, without cookies.
How we use it
- To run Indicor: sign you in, store and show your company’s catalog, create shares, quotations and PDFs, and send the emails you ask us to send.
- To show your company who opened what it shared, and to send buyer-view alerts.
- To apply the rules your company sets, such as which countries can open its shared links.
- To read contact details from a visiting-card photo and fill in a buyer’s details.
- To suggest product text when you use the AI writing assistant.
- To answer enquiries and keep the service secure and working.
We do not sell personal data and do not use it for advertising.
Who we share it with
Only the service providers that run parts of Indicor for us, and only for that purpose:
- Vercel, which hosts the website and API.
- Amazon Web Services, which stores photos and files (Mumbai region).
- Our database hosting provider.
- Resend, which sends our emails.
- Google Firebase Cloud Messaging, which delivers app notifications.
- freeipapi.com and ipinfo.io, which turn an IP address into an approximate location.
Visiting-card photos and AI writing requests are processed by services we run ourselves. Inside a company, its users see its data according to the roles the company sets, and buyers see only what is shared with them. We will also disclose data when the law requires it.
Companies and buyers
Each company decides what goes into its Indicor workspace, including its buyers’ details and the record of who opened its links. We process that data on the company’s behalf. If you are a buyer, contact the company that shared the link with you, or write to us at sales@indicors.com and we will pass your request on.
How long we keep it
We keep account and workspace data while your company uses Indicor. Sign-in sessions expire on their own. When a company closes its account, or asks us to delete data, we delete it, except records the law requires us to keep.
Security
Data travels over HTTPS, passwords are stored as hashes, each company’s data is kept separate from other companies’ data, and access within a company follows the roles it sets.
Your choices
- You can see and correct your details on your profile, or ask your company’s admin.
- To get a copy of your data, or to delete your account and its data, email sales@indicors.com from the address on your account. We will confirm by email once it is done.
- You can turn off buyer-view alerts in the app’s Settings, or deny notification permission.
- You can deny camera access. QR and visiting-card scanning then won’t work, and everything else will.
Children
Indicor is a business tool for adults and is not meant for anyone under 18.
Changes
When this policy changes we will update this page and the date at the top.