What we collect, why, and who else touches it.
Last updated 16 September 2026. Covers bigleaps.co.in, our free tools, programme registrations, The Baseline newsletter and BigLeaps CRM.
1. What we collect
| When you | We collect | Why |
|---|---|---|
| Use a free tool, download a cheat sheet or subscribe to The Baseline | Name, email, sometimes company and role, and your answers in the tool | To send you the result and the emails you signed up for |
| Register or pay for a programme | Name, email, phone, company, GSTIN and billing address if you give one | To confirm your seat, issue a GST invoice and run the programme |
| Book a call | What you enter in the Calendly form | To prepare for the call |
| Use BigLeaps CRM | Your account details and the deals, contacts and notes you record | To run the product for you. Detail in the CRM terms |
| Visit the site | Anonymous page views through Vercel Web Analytics. No cookies, no cross-site tracking, no advertising pixels | To see which pages are read |
Payments. Card, UPI and net-banking details are entered on Razorpay's pages and never reach us. We receive the payment status, the amount, your name, email and phone, and the last digits Razorpay chooses to show.
2. How we use it
- To deliver what you asked for: the tool result, the seat, the invoice, the software.
- To email you about the thing you signed up for, and occasionally about related programmes. Every marketing email has an unsubscribe link that works immediately.
- To keep accounts and tax records for as long as Indian law requires.
We do not sell, rent or swap your data. We do not buy lists.
3. Who processes it for us
Each of these holds only what it needs for its job, under its own security terms.
- Razorpay for payments.
- GetResponse for email lists and newsletters.
- Supabase for the database behind the CRM and the free tools, hosted in the Mumbai region.
- Vercel for hosting and page analytics.
- Calendly for call bookings.
- Resend for transactional email such as sign-in codes and invoices.
- Notion for invoice numbering and client records.
- Substack for The Baseline, if you subscribe there.
- Zoom or Google Meet for online sessions, which may be recorded for participants.
4. How long we keep it
- Email subscribers: until you unsubscribe, plus a suppression record so we do not email you again.
- Invoices and payment records: eight years, as required for GST and income tax.
- CRM data: for the life of your account and 90 days after deletion, then removed from backups.
- Free tool answers: up to two years, in aggregate for research after that.
5. Your rights
Email nelson.fernandes@bigleaps.co.in to see what we hold about you, correct it, or have it deleted. We answer within seven working days. Deletion does not cover invoices we must keep by law. Under India's Digital Personal Data Protection Act you may also withdraw consent at any time; the unsubscribe link is the fastest way.
6. Security
Data sits with the providers above over encrypted connections. CRM access is by email code, and each workspace can only see its own data, enforced in the database. If we ever have a breach that affects you, we tell you.
7. Children
Our programmes and products are for working professionals. We do not knowingly collect data from anyone under 18.
8. Changes
The date at the top changes when this policy does. Material changes are announced by email to subscribers and inside the CRM.