1. Introduction
Gitlime ("we", "us", or "our") is an AI Revenue Systems agency based in Gurgaon, Haryana, India. We operate at www.gitlime.com and provide AI-powered lead follow-up, qualification, appointment booking, and CRM automation services to service businesses.
This Privacy Policy describes how we collect, use, store, and protect personal information from visitors to our website and clients who use our services. By using our website or engaging our services, you agree to the practices described in this policy.
2. Data We Collect
We collect information in the following ways:
Information you provide directly
- Name, email address, and phone number when you contact us or book a call
- Business name, industry, and monthly lead volume when you fill out our enquiry forms
- Payment and billing information when you purchase our services
- Messages and communications when you contact us via email, WhatsApp, or our website chat
Information collected automatically
- IP address, browser type, operating system, and referring URLs
- Pages visited, time spent on pages, and click patterns on our website
- Device identifiers and session data
Information from our AI automation systems
- Lead data captured via forms, Facebook Lead Ads, Google Lead Forms, and WhatsApp on behalf of our clients
- Conversation logs between our AI systems and your leads (when we operate automation on your behalf)
- CRM records, appointment data, and follow-up sequences created by our systems
3. How We Use Your Data
We use the information we collect to:
- Deliver our services — set up, operate, and maintain AI automation systems for clients
- Process payments — invoice clients and handle billing
- Communicate with you — respond to enquiries, send service updates, and share onboarding materials
- Improve our systems — analyse performance data to optimise AI workflows and automation quality
- Send marketing — share case studies and service updates (you can opt out at any time)
- Comply with legal obligations — meet regulatory requirements applicable in India
We process your data only where we have a legitimate basis — your consent, contract performance, or our legitimate business interests.
4. WhatsApp & AI Automation Data
Our core service involves deploying AI systems that interact with your customers via WhatsApp Business API, SMS, and web forms. This section explains how that data is handled.
When we operate automation on your behalf (client data)
- Lead conversations conducted by our AI are stored securely and accessible only to the client whose system it is
- We act as a data processor for your customer data — you remain the data controller
- Conversation logs are retained for the duration of your service agreement plus 30 days
- Our AI systems (powered by OpenAI, Google Gemini, and Anthropic Claude) process conversation text to generate responses — none of your customer data is used to train third-party AI models
WhatsApp Business API
- We use Meta's WhatsApp Business API to send and receive messages on behalf of clients
- Message content is subject to Meta's own privacy policies in addition to ours
- We do not store WhatsApp message content beyond what is needed for audit and quality assurance
6. Data Security
We implement appropriate technical and organisational measures to protect your personal information, including:
- TLS/HTTPS encryption for all data in transit
- Encrypted storage for sensitive credentials and API keys
- Access controls — only team members with a need to access client data can do so
- Regular security reviews of our automation infrastructure
No system is 100% secure. If we become aware of a data breach that affects your information, we will notify you promptly and take immediate remedial action.
7. Data Retention
We retain personal data only as long as necessary:
- Website enquiry data — 24 months from last contact
- Client data and automation logs — duration of service agreement plus 30 days after termination
- Billing records — 7 years as required by Indian tax law
- Marketing contacts — until you opt out or 36 months of inactivity, whichever comes first
After these periods, data is securely deleted or anonymised.
8. Your Rights
Under Indian IT law and applicable privacy frameworks, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Deletion — request that we delete your personal data, subject to legal retention obligations
- Opt-out of marketing — unsubscribe from marketing emails at any time using the link in each email, or by emailing us
- Data portability — request your data in a structured, machine-readable format
- Withdraw consent — where we rely on consent to process your data, you may withdraw it at any time
To exercise any of these rights, email hello@gitlime.com. We will respond within 30 days.
10. Third-Party Links
Our website may contain links to external websites — including client case studies, partner tools, and resources. We are not responsible for the privacy practices of these third-party sites. We recommend reviewing their privacy policies before sharing any personal information.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active clients by email.
Continued use of our website or services after an update constitutes acceptance of the revised policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out:
Gitlime
We respond to privacy requests within 30 days.