Privacy Policy
1. Introduction
Welcome to Linkayi (“we”, “us”, “our”). Linkayi operates the website located at linkayi.com and provides a bio link and URL shortener platform (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.
By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
This policy applies to all users of Linkayi — registered account holders, visitors to public bio pages, and anyone who interacts with short links generated on our platform.
2. Information We Collect
We collect several types of information in connection with the Service. The table below summarizes what we collect, why we collect it, and its source.
| Category | Examples | Source | Required? |
|---|---|---|---|
| Account Information | Email address, username, password (hashed), display name | Provided by you | Required |
| Profile Content | Bio, avatar image, links, button style preferences, theme selection | Provided by you | Optional |
| Usage Data | Pages visited, features used, timestamps, session duration | Automatically collected | Automatic |
| Device & Log Data | IP address, browser type, OS, referring URL, error logs | Automatically collected | Automatic |
| Click Analytics | Link clicks, short link redirects, referral source, country (aggregated) | Automatically collected | Automatic |
| Communication Data | Emails you send us, support tickets, feedback forms | Provided by you | Optional |
2.1 Authentication via Clerk
Authentication is handled by Clerk (clerk.com), a third-party identity platform. When you create an account or sign in, Clerk collects and stores your credentials on our behalf under their own privacy policy. We receive only the necessary identity tokens and user identifiers required to operate the Service.
2.2 Uploaded Media
If you upload an avatar image or other media, those files are stored in our secure object storage. Uploaded files associated with your public bio page are publicly accessible via their URL. Files not attached to a public profile remain private by default.
3. How We Use Your Information
We use the information we collect for the purposes listed in the table below, each mapped to a legal basis under applicable data protection law (including GDPR where applicable).
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide and maintain the Service | Account info, profile content | Contractual necessity |
| Authenticate and secure your account | Email, session tokens | Contractual necessity |
| Show your public bio page to visitors | Display name, bio, avatar, links | Contractual necessity |
| Redirect short links to destination URLs | Short link slug, destination URL | Contractual necessity |
| Provide click analytics to account holders | Click events, aggregated device data | Legitimate interest |
| Improve and develop the Service | Usage data, error logs | Legitimate interest |
| Communicate service updates | Email address | Legitimate interest / consent |
| Comply with legal obligations | Any data as required by law | Legal obligation |
| Prevent fraud and abuse | IP address, usage patterns | Legitimate interest |
We will never use your data for purposes incompatible with those described above without first notifying you and, where required by law, obtaining your consent.
4. Sharing Your Information
We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:
| Recipient | What is Shared | Reason |
|---|---|---|
| Clerk (auth provider) | Email, authentication events | Account creation & sign-in |
| Cloud infrastructure provider | All Service data (encrypted at rest) | Hosting and database storage |
| Object storage provider | Uploaded media files | File storage and CDN delivery |
| Law enforcement / courts | As required by valid legal process | Legal compliance obligation |
| Acquirer in M&A | All Service data with notice to users | Business transaction |
All third-party service providers are bound by contractual data processing agreements and are only permitted to use your data to provide services to us.
5. Data Retention
We retain your data for as long as your account is active or as necessary to provide the Service. The table below describes our retention periods for each category of data.
| Data Category | Retention Period | Notes |
|---|---|---|
| Account & profile data | Duration of account + 30 days after deletion request | Deleted upon confirmed account closure |
| Bio page content & links | Duration of account + 30 days | Public pages immediately depublished on deletion |
| Click analytics | 24 months rolling | Aggregated; individual events purged after 90 days |
| Server logs | 90 days | Used for security and debugging only |
| Uploaded media | Until deleted by user or account closure | Purged from CDN within 24 hours of deletion |
| Support communications | 3 years | Required for dispute resolution |
| Legal hold data | As required by law | Overrides standard retention schedule |
6. Cookies & Tracking
We use cookies and similar tracking technologies to maintain session state and analyze usage. We do not use advertising cookies or sell browsing data to ad networks.
| Cookie Name / Type | Purpose | Duration | Essential? |
|---|---|---|---|
| __session (Clerk) | Maintains authenticated session | Session / 1 year | Yes |
| __client_uat (Clerk) | Detects active session on client | Session | Yes |
| linkayi_pref | Stores UI preferences (theme, language) | 1 year | No |
| _analytics | Aggregate usage analytics (no PII) | 30 days | No |
You can control non-essential cookies through your browser settings. Disabling essential cookies may prevent the Service from functioning correctly.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal information. We honor these rights regardless of jurisdiction where possible.
| Right | Description | How to Exercise |
|---|---|---|
| Access | Request a copy of the personal data we hold about you | Email [email protected] |
| Rectification | Correct inaccurate or incomplete data | Update directly in Settings or email us |
| Erasure | Request deletion of your personal data (right to be forgotten) | Email [email protected] |
| Portability | Receive your data in a machine-readable format | Email [email protected] |
| Restriction | Ask us to restrict processing of your data | Email [email protected] |
| Objection | Object to processing based on legitimate interest | Email [email protected] |
| Withdraw Consent | Withdraw any previously given consent at any time | Email [email protected] or browser settings |
We will respond to all rights requests within 30 days. If we need more time, we will notify you. We may need to verify your identity before processing a request.
8. Security
We implement industry-standard technical and organisational measures to protect your information:
- All data in transit is encrypted using TLS 1.2+.
- Passwords are never stored in plain text — authentication is delegated to Clerk which uses bcrypt hashing.
- Database backups are encrypted at rest using AES-256.
- Access to production infrastructure is restricted to authorized personnel using multi-factor authentication.
- We perform regular security reviews and dependency audits.
No method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. If you discover a potential vulnerability, please disclose it responsibly to [email protected].
9. Children's Privacy
The Service is not directed to individuals under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at [email protected].
Upon receiving such a request, we will take prompt steps to delete the information from our systems.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will:
- Update the Last Updated date at the top of this page.
- Notify registered users via email at least 14 days before the changes take effect.
- In some cases, require your affirmative consent before changes apply to you.
Your continued use of the Service after changes become effective constitutes acceptance of the updated policy. We encourage you to review this page periodically.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact our Privacy Team:
Linkayi Privacy Team
Email: [email protected]
Website: linkayi.com
We aim to respond to all privacy-related inquiries within 5 business days.