Privacy policy

Linkerzz (“we”, “us”) is a link-in-bio service at linkerzz.com, run from India by Yogesh Tewari. This policy explains what personal information we collect when you use it, why, who helps us handle it, how long we keep it and what you can do about it. We keep it short and specific. Questions: support@linkerzz.com.

Who is responsible for what

For the account information you give us, Yogesh Tewari is the data controller (in India's terms, the data fiduciary). For the messages and sign-ups that visitors send through the contact form and the Join my list form on someone's page, the page owner decides what is done with them and we act on the owner's behalf as a processor. If you wrote to someone through their page and want your message removed, email us the details and we will help.

Information we collect

If you have an account:

• Your email address, and your name if you give it or if the sign-in provider shares it, used to sign you in and to contact you about your account.
• If you sign up with a password, we store only a one-way scrambled form of it (a hash), never the password itself.
• If you sign in with Google, or with Facebook, GitHub or Microsoft when we offer them, we receive your name, email address and profile picture address from that provider, and nothing from your account there beyond what you approve.
• Sign-in session details, including the IP address and browser type of the device you sign in from, kept so we can keep your account secure.
• Your page content: your username, name, bio, links, text, social profiles, theme and any images you upload.
• Link previews: when you paste a web address into a link, our servers fetch that page once to read the title, description and preview picture it publishes for sharing, and keep a copy of the picture with your other uploads. The request comes from us and carries nothing about you. We count how many previews you ask for each hour, to stop abuse.
• Steps you take in the product, such as creating or publishing a page or starting a checkout, linked to your account so we can see where people get stuck and improve the service.
• How you found us: when you create an account we note the country you signed up from (taken from Cloudflare, never from storing your IP address), and the website or link that brought you to Linkerzz and the first page you saw, kept in your browser until you sign up. We use this to learn which channels work.
• Subscription details if you upgrade: your plan, its status and the identifiers our payment provider gives us. We do not receive or store your card number.
• Your email preferences, and a record of which onboarding emails we have sent you, so you never get the same one twice.

If you visit someone’s Linkerzz page:

• We do not set cookies and we do not use advertising trackers.
• A page owner can add a video, music or booking embed (YouTube, Spotify, SoundCloud, Calendly or Cal.com). It shows as a plain card, and nothing from that provider loads until you tap it. After you tap, the provider loads its player and may set cookies or collect data under its own privacy policy.
• To count page visits and link clicks, we record the event, the page, the website that referred you, the country the visit came from (taken from Cloudflare, never from storing your IP address) and an anonymous visitor code. The code is a one-way hash of your IP address and browser type that changes every day, so we do not store your IP address and cannot follow you from one day to the next.

If you send a message through a page’s contact form:

• We store your name, email address and message so we can deliver it to the owner of that page, who can read it, reply to it and delete it. Linkerzz does not read your message or use it for anything else.
• We also store the same kind of anonymous daily code described above, only to limit spam and repeated messages.
• If the page owner is on a paid plan, a copy of your message and your email address is also emailed to them, so they can reply. Delivery goes through our email provider.
• The form never shows the page owner’s email address, and it tells you your details go to the owner. When you start typing in the form, Cloudflare’s Turnstile bot check loads to confirm you are a person. We do not load it for visitors who never use the form.

If you join a page’s list (a “Join my list” form):

• We store your email address, and your name if the form asks for it, so the page owner can see it in their dashboard. The owner decides what to do with it and is the one who holds your address from then on. Ask the owner to remove you, or email us and we will help.
• We also store the same kind of anonymous daily code described above, only to limit spam and repeated sign-ups. The form says your details go to the page owner, and loads Cloudflare’s Turnstile bot check only when you start typing.
• If the page owner is on a paid plan, we may email them about your sign-up, and, if they switched it on, send your email address, name and the time to a web address they chose (for example Zapier, Make or Google Sheets). Contact-form messages can be sent there in the same way. That other service then handles the data under its own privacy terms, chosen by the owner, not by us.
• Linkerzz does not send emails to a page owner’s list for them.

If you use an order list on a page: the choices you make are only written into a WhatsApp message on your own device, which you send to the page owner yourself. We do not receive or store the order. WhatsApp handles the message under its own terms. We count the tap on the button, without your name or number, like any other link click.

If you report a page: we store your report, the reason and details you give, and the same kind of anonymous daily code, so we can limit repeated reports.

Server logs: like every web host, our hosting provider may keep short-term technical logs (such as IP address, browser type and time of a request) to run and protect the service. We do not use them to profile anyone.

How we use it, and our legal bases

• To provide the service you asked for (host your page, sign you in, deliver contact messages, process your subscription). This is the performance of our agreement with you, and in India it rests on your consent to those purposes when you sign up.
• To keep the service safe: checking links against unsafe-site lists, limiting spam and abuse, handling reports. This is our legitimate interest in protecting people and the service.
• To improve the service: understanding in aggregate how people find and use Linkerzz. This is our legitimate interest.
• To email you about your account: sign-in and security emails, receipts, and a short series of tips to help you set up and share your page. You can stop the tips at any time with the Unsubscribe link in each one. Sign-in and account emails still arrive, because you need them.
• To meet legal duties, such as answering lawful requests.

We do not sell your personal information, we do not share it for advertising, and we do not use your page content or visitor data to build advertising profiles.

Who processes it for us

We use a small number of service providers who handle data on our behalf, under their own privacy terms:

• Cloudflare hosts the service, delivers it quickly around the world and stores your account, pages, messages, list sign-ups and uploaded images. Its Turnstile tool helps block bots on sign-in, contact and sign-up forms, and it connects customers’ own domains to their pages.
• Dodo Payments is our merchant of record. It collects your payment details, handles tax and invoices, and shares subscription status with us.
• Resend delivers our emails: sign-in and verification links, password resets, contact-message and new-sign-up notifications and the onboarding tips.
• Google checks the web addresses of the links on live pages against its list of unsafe sites (only the link addresses are sent, not who you are), and provides Google sign-in if you choose it.
• Facebook (Meta), GitHub and Microsoft provide sign-in only if you choose them, and only when we offer them.
• YouTube, Spotify, SoundCloud, Calendly and Cal.com only receive data from a visitor who taps an embed on a page, as described above.

We may also disclose information if the law requires it, or to protect the safety of our users and service.

Cookies

Visitors to a published page get no cookies from us. When you are signed in we use two small cookies that the service needs to work: one keeps you signed in, and one remembers which of your pages you were editing. Cloudflare’s bot check may set its own security cookie if you use a sign-in or contact form. We use no advertising or analytics cookies, so there is no cookie banner to accept.

Our own pages also use your browser’s local storage, which is not a cookie and is never sent to us by itself. It remembers which link or site brought you to Linkerzz (so that, if you sign up, we can tell which of our channels worked), and, on the founder’s own devices, a note not to count their visits. You can clear it in your browser settings at any time.

People we contact

If we get in touch with you about Linkerzz, for example by a direct message on Instagram or TikTok, we keep your public handle, the kind of work you do and short notes we wrote ourselves, for as long as the conversation lasts. We write each message by hand and send only a few a day. Tell us you do not want to hear from us, or want your details removed, and we will remove them. Write to us using the contact details at the end of this page.

Public information

Anything you put on a published page, such as your name, bio, links and images, is public by design and can be seen, copied and indexed by search engines. Do not publish anything you do not want others to see.

How long we keep it

• Account and pages: for as long as you have an account.
• Contact-form messages and list sign-ups: in the page owner’s dashboard until they delete them or the account is deleted (an owner can delete one person or the whole list at any time).
• Sign-in sessions: they expire automatically.
• Visit and click records: they hold no names or IP addresses, and we keep them to understand how the service is used.
• When you delete your account: you can do it yourself from Account in your dashboard, or ask us by email. Your page is hidden at once, we keep everything for 15 days in case you change your mind, and then we delete your page, uploaded images, messages, statistics and account information. Backups kept by our hosting provider can take up to about 30 days more to expire.
• What we may keep: records we must keep for legal or accounting reasons, such as payment records held by our payment provider.

Where your data goes

Linkerzz is run from India and uses infrastructure providers that may process data in several countries. If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the safeguards our providers offer for international transfers, such as standard contractual clauses.

Your rights

You can edit or unpublish your page, change your email preferences and delete your account yourself at any time. You can also email support@linkerzz.com to use any right below. We may need to confirm it is really you before we act, and we will answer within 30 days (45 days for California requests).

• Access and a copy: ask what we hold about you and get a copy, including your page content, in a common format.
• Correction: fix anything wrong or incomplete.
• Erasure: have your data deleted.
• Restriction and objection (EU and UK): ask us to limit or stop certain processing.
• Withdraw consent: you can stop the tips emails at any time, or close your account.
• Nominate someone to exercise your rights on your behalf if you are unable to, as India’s law allows.
• Complain: you may complain to us first, and to your data protection authority if you are not satisfied (in India, the Data Protection Board; in the EU or UK, your local regulator).

India: under the Digital Personal Data Protection Act, 2023 you have the rights above, including access, correction, erasure, grievance redressal and nomination. EU and UK: you have the rights under the GDPR and UK GDPR. California: you have the right to know what we collect and use, to delete it, to correct it and to opt out of any sale or sharing of your information. We do not sell or share personal information, and we do not treat you differently for using your rights. The categories of information we collect are identifiers (email, name, username, IP address of sign-in sessions), internet activity (anonymous visit and click records), commercial information (your plan and subscription status) and the content you publish, for the purposes described above.

Security

Connections are encrypted, passwords are stored only as hashes, access to your page data is limited to your account, links are checked for unsafe destinations, and we keep our software up to date. No system is perfectly secure, but we work to protect your information. If we learn of a breach that affects you, we will tell you and the authorities as the law requires.

Children

Linkerzz is not for children. You must be at least 18 years old (or the age of majority where you live) to create an account, and we do not knowingly collect information from children. If you think a child has given us information, email us and we will delete it.

Changes

If we change this policy in a meaningful way, we will update the date above and, for significant changes, tell account holders by email before they take effect.

Contact and grievances

For questions, requests or complaints about privacy or about content on a page, write to support@linkerzz.com. Our Grievance Officer is Yogesh Tewari. We acknowledge complaints within 24 hours and aim to resolve them within 15 days. You can also report a page from the link at the bottom of any Linkerzz page.