Privacy policy

You can browse this entire site — every product page, the advisor, the competitor scan — without giving us your name or email. We only collect personal data when you deliberately submit a form, and we only use it for the thing you submitted it for.

We do not sell your data. We do not share it with vendors unless you asked us to arrange an introduction. We do not store your IP address.

When you submit an enquiry or demo request: your name, email, and optionally your phone number, company, industry, team size, turnover band and whatever you type into the message box. Plus which page you submitted from, so we know what you were looking at.

When you submit a review: the review content and your name, role and company as you enter them. Your email is collected to verify you are a real buyer and is never published.

When you report a listing: your email and the details of the report, so we can tell you the outcome.

Automatically, on every request: a one-way salted hash of your IP address (not the address itself), your browser user agent, and the page you visited. The hash lets us detect abuse and rate-limit forms; it cannot be reversed to recover your IP.

We do not run third-party advertising trackers, we do not build cross-site profiles, and we do not embed social media pixels. Product demo videos are click-to-load, so no third-party video cookie is created unless you actually press play.

For enquiries and demo requests: your explicit consent, given by ticking the consent box on the form. That box is never pre-ticked. You can withdraw consent at any time by emailing us, and we will delete your record.

For abuse prevention (the hashed IP and rate limiting): our legitimate interest in keeping the site working and free of spam. The data is pseudonymised and retained briefly.

Software vendors: only when you have asked us to arrange a demo or a quote. In that case we pass on the details needed to set it up — typically your name, email, company and requirement. We tell you on the form that this will happen. We never pass your details to a vendor you did not ask about.

Nobody else. We do not sell, rent or trade personal data, and we do not share it with data brokers or advertising networks.

Enquiries and leads: up to 24 months from your last interaction, then deleted. Reviews: for as long as they are published, or until you ask us to remove them. Listing reports: 12 months. Hashed IP and rate-limit data: 30 days.

Under India’s Digital Personal Data Protection Act you can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, and withdraw consent for future contact. If you are in the EU or UK, the equivalent GDPR rights apply.

Email hello@appadvisor.in with “Data request” in the subject line. We will respond within 30 days, and we will not ask you to justify the request.

We set one cookie, and only for administrators signing into the internal dashboard. It is a strictly necessary session cookie: httpOnly, Secure and SameSite=Strict, and it holds nothing beyond a signed session reference.

Ordinary visitors to this site are not given any cookie at all.

Data is held in a database that is not reachable from the public internet. Admin access requires a password and, where enabled, a second factor, and every privileged action is written to an append-only audit log. We store salted scrypt hashes of admin passwords, never the passwords themselves.

No system is perfect. If you believe you have found a security issue, please email us rather than disclosing it publicly, and we will work with you on it.

If we change this policy in a way that materially affects you, we will update the date at the top and, where we hold your contact details and the change is significant, tell you directly.