Website Privacy Policy

This Website Privacy Policy describes how LinkForty ("we," "us," or "our") collects, uses, and protects personal information of visitors to our website, prospects, and holders of LinkForty accounts. It does not cover end-user data we process on behalf of our customers through our SDKs and platform — for that, see our Services Privacy Policy.

1. Information We Collect

1.1 Information You Provide

When you register and use our service, we collect:

• Account Information: Name, email address, password (encrypted)
• Organization Information: Organization name, team member details
• Billing Information: Payment details processed securely by Stripe (we do not store full credit card numbers)
• Profile Information: Optional profile details you choose to provide
• Communications: Support requests, feedback, and correspondence

1.2 Information We Collect Automatically

When you use our service, we automatically collect:

• Usage Data: Links created, analytics viewed, features used
• Click Analytics: IP addresses, user agents, device types, geographic location (country/city), referrer URLs
• Log Data: API requests, access times, error logs
• Cookies and Tracking: Session cookies, authentication tokens, preferences
• Device Information: Browser type, operating system, device identifiers

1.3 Information from Third Parties

• Payment Processors: Stripe provides payment confirmation and billing status
• Authentication Providers: We receive basic profile information
• GeoIP Services: Geographic data derived from IP addresses

2. How We Use Your Information

We use your information to:

2.1 Provide and Improve Services

• Create and manage your account
• Process link creation and redirects
• Generate analytics and reports
• Provide customer support
• Improve and optimize our service
• Develop new features

2.2 Billing and Payments

• Process subscription payments
• Send billing notifications and invoices
• Manage subscription changes
• Prevent fraud and abuse

2.3 Communications

• Send service-related notifications
• Respond to inquiries and support requests
• Send product updates and feature announcements (with opt-out option)
• Request feedback on our service

2.4 Legal and Security

• Comply with legal obligations
• Enforce our Terms of Service
• Detect and prevent fraud, spam, and abuse
• Protect our rights and property
• Ensure platform security and integrity

3. How We Share Your Information

We do not sell your personal information. We may share your information in these circumstances:

3.1 Service Providers

We share data with trusted third-party service providers who help us operate our service:

• Stripe: Payment processing (PCI-DSS compliant)
• Cloud Hosting: Data for infrastructure
• Email Services: Transactional email delivery
• Analytics Tools: Usage and performance monitoring
• Customer Support: Help desk and ticketing systems

3.2 Team Members

When you add team members to your organization, they can access shared data including links, analytics, and organizational settings according to their role permissions.

3.3 Legal Requirements

We may disclose your information if required by law, legal process, or government request, or to protect our rights, property, or safety.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

4. Data Storage, Security, and Retention

4.1 Data Storage

• Data is stored in secure data centers
• We use industry-standard encryption for data in transit (TLS/SSL) and at rest
• Database backups are performed daily and stored securely

4.2 Security Measures

• Role-based access controls
• Regular security audits and vulnerability assessments
• Intrusion detection and monitoring
• Secure API authentication with rate limiting

4.3 Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you within 72 hours via email and provide information about the breach and steps to protect yourself.

4.4 Data Retention

We retain your information for as long as necessary to provide our services:

• Active Accounts: Data retained while your account is active
• Canceled Accounts: Data deleted within 30 days of cancellation (unless required for legal purposes)
• Click and Install Events: Retained according to your plan tier (Free: 7 days, Pro: 90 days, Business: 180 days, Unlimited: 365 days)
• Billing Records: Retained for 7 years for tax and accounting purposes
• Backups: May persist in backups for up to 90 days

5. Your Rights and Choices

5.1 Access and Portability

• Access your personal data through your account settings
• Export your data in machine-readable formats (CSV, JSON)
• Request a copy of your data by contacting support

5.2 Correction and Update

• Update your profile information in account settings
• Correct inaccurate or incomplete data
• Request corrections by contacting support

5.3 Deletion

• Delete your account through account settings
• Request deletion of specific data
• Right to be forgotten (GDPR)

5.4 Communication Preferences

• Opt out of marketing emails via unsubscribe links
• Manage notification preferences in account settings
• Note: Essential service emails cannot be disabled

5.5 Object to Processing

• Object to certain data processing activities
• Restrict processing in certain circumstances
• Withdraw consent where processing is based on consent

6. Cookies and Tracking Technologies

6.1 Types of Cookies

• Essential Cookies: Required for authentication and core functionality
• Analytics Cookies: Track usage patterns and performance
• Preference Cookies: Remember your settings and preferences

6.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect service functionality.

7. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States. When we transfer personal data out of the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on one or more of the following legal mechanisms:

• Standard Contractual Clauses (SCCs): European Commission-approved clauses incorporated into our agreements with service providers
• UK International Data Transfer Addendum: For transfers originating in the United Kingdom
• EU-U.S. Data Privacy Framework (DPF), UK Extension, and Swiss-U.S. DPF: Where we or our service providers are certified participants
• Adequacy decisions: Transfers to countries recognized by the relevant authority as providing adequate protection

You may request a copy of the relevant transfer mechanism by contacting us using the details in Section 10.

8. Children's Privacy

LinkForty is not directed to children under 13, and we do not knowingly collect personal information from children under 13 in compliance with the U.S. Children's Online Privacy Protection Act (COPPA). Where GDPR applies, we do not knowingly process personal data of children under 16 without verifiable parental consent. Where other local laws set a higher age of digital consent, that higher age applies.

Our customers who integrate our SDK must not provide us with data about end-users below these ages. If we become aware that we have collected personal information from a child in violation of this policy, we will delete it promptly. Parents or guardians who believe their child has provided us with personal information may contact us using the details in Section 10.

9. Regional Privacy Rights

9.1 California (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (as amended by the CPRA):

• Right to know what personal information is collected, used, and disclosed
• Right to know if personal information is sold or shared (we do not sell or share data)
• Right to deletion
• Right to correction of inaccurate personal information
• Right to non-discrimination for exercising your rights

9.2 European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are in the EEA, UK, or Switzerland, you have the following rights under GDPR (and the UK GDPR and Swiss FADP where applicable):

• Right of access
• Right to rectification
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision-making and profiling

Our lawful bases for processing include: consent, contract performance, legal obligations, and legitimate interests.

9.3 Supervisory Authority

If you are in the EEA, UK, or Switzerland and believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with your local supervisory authority.

10. Changes, Third-Party Links, and Contact

10.1 Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notification at least 30 days before taking effect. Continued use after changes constitutes acceptance.

10.2 Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.

10.3 Contact Us

For privacy-related questions, concerns, or to exercise your rights: