Legal

Privacy Policy

Effective 23 August 2026 · Last updated 9 October 2026

This policy explains what personal data we collect when you visit this website, send us an enquiry, or respond to one of our advertisements on LinkedIn — how we use it, who we share it with, how long we keep it, and the rights you have over it. It is written to be read, not to be survived.

1. Who we are

This website is operated by Hypesquad Solutions Private Limited (CIN: U62013TS2024PTC182918), trading as Stedvio, with its registered office at H No 3-14-20, Plot No 20, Shakthi Sai Nagar, Mallapur, Uppal, Hyderabad 500076, Telangana, India. Hypesquad Solutions Private Limited is the data controller for personal information collected through this site.

Entity: Hypesquad Solutions Private Limited, trading as Stedvio
Privacy contact: info1@stedvio.com

2. What personal data we collect

Data you give us directly

The enquiry form on this site. Your name, work email address, phone number including the country code, company name, and whatever you tell us in the "what are you looking to build" field. Every field on that form is required, so all of it reaches us when you submit.
Email and correspondence. Anything you send us at info1@stedvio.com, including your email address and signature block.

Data we receive from LinkedIn

LinkedIn Lead Gen Forms. If you submit one of our Lead Gen Forms on LinkedIn, LinkedIn passes us the fields you confirmed. Depending on the form, that is typically your first and last name, business email address, job title, company name, company size, industry, country or region, your LinkedIn profile URL, and a phone number where you chose to provide one. LinkedIn pre-fills most of these from your profile — you can edit or clear any field before you submit, and nothing reaches us unless you press submit.
Campaign reporting. LinkedIn gives us aggregated statistics about our ads — impressions, clicks, conversions and audience demographics. These reports are aggregated by LinkedIn and do not identify you individually.

Data collected automatically when you browse

Server and delivery logs. Our hosting provider records your IP address, browser user-agent, the URL requested, the referring URL and a timestamp, in order to serve the page and detect abuse.
LinkedIn Insight Tag. Where you have consented (see section 4), the LinkedIn Insight Tag collects your IP address, a timestamp, the page URL and referrer, characteristics of your device and browser, and LinkedIn cookie identifiers that allow LinkedIn to recognise you as a LinkedIn member. See section 5 for what it is used for.

We do not run general-purpose website analytics on this site. Beyond the hosting logs above and — where you consent to it — the LinkedIn Insight Tag, we do not profile your browsing.

What we deliberately do not collect

We do not ask for, and do not want, sensitive personal data — health information, biometric or genetic data, racial or ethnic origin, religious or political beliefs, trade-union membership, or sexual orientation. We also do not collect government identification numbers such as Aadhaar or PAN, or payment card details, through this website or through our LinkedIn forms. Please do not put any of it in a free-text field. If you send it to us anyway, we will delete it.

3. Why we use it, and our legal basis

Where the GDPR or UK GDPR applies, we rely on the legal bases below. Elsewhere, we process your personal data on the basis of the consent you give when you submit a form, or as otherwise permitted by applicable law.

To respond to your enquiry and scope a project — necessary to take steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
To deliver our services and administer the engagement — performance of our contract with you or your organisation.
To follow up with business-to-business marketing about our services — our legitimate interest in marketing to business contacts who have shown interest, or your consent where the law requires it. You can opt out at any time, and every marketing email carries an unsubscribe link.
To measure our LinkedIn advertising, track conversions and show you relevant ads — your consent where consent is required, including in the EEA, the UK and Switzerland, and otherwise our legitimate interest in advertising our services efficiently.
To keep the site and our systems secure and to prevent fraud and abuse — our legitimate interest in the integrity of our services.
To meet legal, tax and accounting obligations and to establish or defend legal claims — compliance with a legal obligation, and our legitimate interest in defending our rights.

Where we rely on legitimate interests, we have weighed our interest against your rights and freedoms. You can object to that processing at any time — see section 10.

4. Cookies and similar technologies

Cookies are small files stored on your device. Some are strictly necessary to deliver the page you asked for; the rest are optional, and we treat them that way.

Strictly necessary. Cookies and equivalent storage needed to serve and secure the site. These are set without consent because the site cannot function without them.
Analytics. We do not use analytics cookies on this site.
Advertising. The LinkedIn Insight Tag sets and reads LinkedIn cookies for conversion measurement and retargeting.

LinkedIn cookies used on this site

When the LinkedIn Insight Tag loads, LinkedIn may set or read the following. The lifetimes are set by LinkedIn and can change; LinkedIn publishes the current list in its cookie table.

bcookie — browser identifier used for advertising and analytics. Around 1 year.
bscookie — secure browser identifier. Around 1 year.
lidc — routing and load balancing for LinkedIn services. Around 1 day.
li_sugr — probabilistic identifier used to match a browser to a LinkedIn member. Around 90 days.
UserMatchHistory — LinkedIn Ads identifier syncing. Around 30 days.
AnalyticsSyncHistory — records when a visitor was synced with LinkedIn's analytics. Around 30 days.
li_gc — stores a guest's consent choices for non-essential cookies. Around 6 months.
li_fat_id — first-party identifier used for conversion tracking and attribution. Around 30 days.

Your choices

If you are in the EEA, the UK or Switzerland, we ask before setting non-essential cookies — including the LinkedIn Insight Tag — and they are not loaded until you accept. Declining is exactly as easy as accepting. Elsewhere, the Insight Tag loads by default and you can turn it off at any time.

Wherever you are, you can change or withdraw your choice using the button below, or the "Cookie settings" link in the footer, and you can block or delete cookies through your browser settings. If your browser sends a Global Privacy Control (GPC) signal we treat it as a decline and do not ask. Withdrawing consent does not affect anything we did lawfully before you withdrew it. Section 5 lists the LinkedIn-specific opt-outs.

5. LinkedIn advertising

We advertise on LinkedIn, and this section explains exactly what that means for your data. LinkedIn's own processing of your personal data as a LinkedIn member or visitor is governed by the LinkedIn Privacy Policy and the LinkedIn Cookie Policy, not by this one.

LinkedIn Lead Gen Forms

When you submit a Lead Gen Form attached to one of our LinkedIn ads, the details you confirm are passed to us by LinkedIn. We use them for one purpose: to respond to your enquiry about our services and to follow up with you about it. Specifically:

We do not sell your personal data, and we do not pass Lead Gen Form data to third parties for their own marketing.
We only ask for fields that are relevant to scoping a software project. We do not request sensitive personal data, government identifiers or financial details.
If you consented to hear from us on the form, you can withdraw that consent at any time by replying to any email from us or writing to info1@stedvio.com. Every marketing email also carries an unsubscribe link.
Our follow-up complies with applicable direct-marketing and anti-spam law, including the GDPR and the ePrivacy rules in Europe and CAN-SPAM in the United States.

The LinkedIn Insight Tag, conversion tracking and retargeting

The LinkedIn Insight Tag is a piece of JavaScript provided by LinkedIn that runs on this website. Subject to your consent where consent is required, we use it to:

Measure conversions — to see which of our LinkedIn ads led to an enquiry, so we know what is worth running.
Retarget — to show LinkedIn ads to people who have visited relevant pages on this site, through LinkedIn Matched Audiences.
Understand our audience — to receive aggregated, anonymised reports from LinkedIn about the professional characteristics of our website visitors, such as job function, seniority, industry and company size. These reports are aggregated by LinkedIn and do not identify individual visitors to us.

To do this, the Insight Tag sends LinkedIn your IP address, a timestamp, the URL of the page you are on and the page you came from, information about your device and browser, and the LinkedIn cookie identifiers listed in section 4. Where you are a logged-in LinkedIn member, LinkedIn can associate that visit with your LinkedIn account. LinkedIn also uses the data it collects through the tag for its own purposes as described in its privacy policy, and LinkedIn is responsible for that processing.

Contact lists uploaded to LinkedIn

We may upload a list of business contacts to LinkedIn to build a Matched Audience or to exclude existing clients from a campaign. We only include contacts we have a lawful basis to include, the list is hashed before it is sent, and LinkedIn is contractually permitted to use it only for matching against LinkedIn accounts for our campaign — not for its own purposes. You can ask us to exclude you from any such upload by writing to info1@stedvio.com.

How to opt out of LinkedIn advertising

If you have a LinkedIn account: adjust your LinkedIn advertising preferences — this controls how LinkedIn uses your data for ads across advertisers.
If you do not have a LinkedIn account: use LinkedIn's guest cookie controls.
On this website: withdraw your cookie consent through our cookie controls, which stops the Insight Tag from loading.
Industry opt-outs: Your Online Choices (Europe), NAI and DAA (United States).
Ask us directly: email info1@stedvio.com and we will action it.

We do not sell your personal data, and we do not rent or trade it. We share it only with the following categories of recipient, and only as far as each needs it:

LinkedIn (LinkedIn Ireland Unlimited Company for users in the EEA, Switzerland and the UK; LinkedIn Corporation elsewhere) — advertising, lead generation, conversion measurement and retargeting, as described in section 5.
Supabase — the database service where enquiries submitted through the form on this site are stored.
Vercel — hosts and serves this website, and keeps short-lived request logs.
Google Fonts — this site loads its typefaces from Google's font servers, which means your IP address is visible to Google when a page loads.
Our email and business tooling providers — where your correspondence or engagement records are stored.
Professional advisers — lawyers, accountants and auditors, where strictly necessary and under a duty of confidentiality.
Authorities — where we are legally required to disclose, or to establish or defend legal claims. We will tell you unless we are prohibited from doing so.
A buyer or successor — if the business is involved in a merger, acquisition or sale of assets, subject to this policy continuing to apply.

Each provider acting on our behalf is bound by a written agreement to process personal data only on our instructions and to keep it secure.

7. International data transfers

Several of our providers are based in the United States or the European Union, so your personal data may be transferred outside the country where you live. Where personal data is transferred out of the EEA, the UK or Switzerland, we rely on an adequacy decision where one exists, or on the European Commission's Standard Contractual Clauses — with the UK Addendum where applicable — together with any additional safeguards the transfer requires. All other transfers are made in accordance with applicable data protection law. You can ask us for a copy of the relevant safeguards.

8. How long we keep it

We keep personal data only as long as we need it for the purpose we collected it for, then delete it or anonymise it.

Enquiries and leads that do not become clients: up to 24 months from your last contact with us, then deleted.
Client records: for the duration of the engagement and up to 8 years afterwards, to meet tax, accounting and legal-claim requirements.
Marketing suppression list: if you unsubscribe we keep a minimal record of your email address indefinitely, purely so that we do not contact you again.
Server and delivery logs: short retention periods set by our hosting provider, typically 30 days or less.
LinkedIn advertising data: retained by LinkedIn according to the cookie lifetimes in section 4 and LinkedIn's own retention policy.

9. How we protect it

We use encrypted connections (HTTPS) across the site, restrict access to personal data to the people who need it, and store enquiries in a database configured so that submissions can be written but not read back from the browser. We choose reputable providers who commit to appropriate security measures, and we collect as little as we can — the data we never hold is the data that cannot leak. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take it seriously and we will notify you and the relevant regulator where a breach requires it.

10. Your rights

If you are in the EEA, the UK or Switzerland

Under the GDPR and UK GDPR you have the right to:

access the personal data we hold about you, and receive a copy of it;
have inaccurate or incomplete data corrected;
have your data erased, where one of the grounds for erasure applies;
restrict our processing in certain circumstances;
receive your data in a portable, machine-readable format, and have it transmitted to another controller where technically feasible;
object to processing based on our legitimate interests — and to object to direct marketing at any time, which we will always honour, without exception;
withdraw consent at any time, where we rely on consent;
lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner's Office.

If you are in the United Arab Emirates

Under the UAE Personal Data Protection Law you have the right to request access to your data, to have it corrected or erased, to restrict or object to its processing, to data portability, to object to automated processing that produces legal effects, and to withdraw consent.

If you are in California

Under the CCPA as amended by the CPRA you have the right to know what personal information we collect, use, disclose and share; to request deletion or correction; to opt out of the sale or sharing of your personal information; to limit the use of sensitive personal information; and not to be discriminated against for exercising those rights. We do not sell personal information. Our use of the LinkedIn Insight Tag for retargeting may qualify as "sharing" for cross-context behavioural advertising under California law — you can opt out using any of the methods in section 5, and where your browser sends a Global Privacy Control (GPC) signal we treat it as a valid opt-out request.

11. How to exercise your rights

Email info1@stedvio.com and tell us what you want us to do. We will:

respond within 30 days, and tell you if we need longer for a complex request;
not charge you, unless a request is manifestly unfounded or excessive, in which case we will tell you why before doing anything;
ask for enough information to confirm your identity, so that we do not hand your data to someone else.

If you are unhappy with how we handled your request, tell us first — we would rather fix it. You always retain the right to complain to your data protection authority.

12. Children

This is a business-to-business website. It is not directed at children, we do not knowingly collect personal data from anyone under 18, and if we discover that we have, we will delete it. We do not undertake advertising directed at children or tracking of children.

13. Changes to this policy

We update this policy when our practices change or the law requires it. The "last updated" date at the top of the page always reflects the current version. If a change is material — a new purpose, a new category of recipient, or a change to how we use your data for advertising — we will post a prominent notice on this page for at least 30 days before it takes effect, and where the law requires it we will notify you directly or ask for fresh consent. You can request a previous version of this policy at any time.

14. Contact us

Questions about this policy, or about anything we hold on you:

Stedvio
info1@stedvio.com
Registered office: Hyderabad, Telangana, India
Serving: Dubai · Abu Dhabi · Sharjah · Northern Emirates