Privacy Policy

1. Information We Collect

We collect information in the following ways:

a) Information you provide

• Account data: email address, display name, and password (or OAuth token) when you create a creator account.
• Waitlist data: email address submitted via our waitlist form.
• Content: text, URLs, files, and descriptions you upload to create paywall links.
• Payout details: payment information required to transfer earnings (e.g. Stripe Connect account data).
• Support communications: messages you send to our support team.

b) Information collected automatically

• Usage data: pages visited, features used, links created, and actions taken.
• Device & log data: IP address, browser type, operating system, referring URL, and timestamps.
• Cookies & local storage: authentication tokens, session preferences, and analytics identifiers.

c) Information from third parties

• Payment processors: transaction confirmation, last-4 card digits, and fraud signals from Stripe.
• OAuth providers: basic profile information (name, email) if you sign in with Google or another provider.

2. How We Use Your Information

• Provide, operate, and improve the linklck platform.
• Process payments and pay out creator earnings.
• Send transactional emails (receipts, payout notifications, product updates).
• Notify waitlist members when linklck launches.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.
• Analyze aggregate, anonymized usage trends to improve the product.

We do not sell your personal data to third parties.

3. Legal Basis for Processing (GDPR / UK GDPR)

Where applicable law requires a legal basis, we process your data under the following:

4. Data Sharing

We share data only as necessary to operate linklck:

• Lemon Squeezy: our payment processor and Merchant of Record. Lemon Squeezy independently collects payment and order data from Buyers directly. Their collection and use of that data is governed by the Lemon Squeezy Privacy Policy. We share Creator account identifiers with Lemon Squeezy to attribute orders and calculate payouts.
• Firebase / Google Cloud: authentication and infrastructure hosting.
• Email providers: transactional and waitlist notifications.
• Analytics tools: aggregated, anonymized product usage data.
• Law enforcement: when required by a valid legal request or court order.

All third-party processors are contractually bound to handle data in accordance with applicable data protection law.

5. Cookies

linklck uses the following types of cookies:

• Strictly necessary: authentication session tokens required to keep you logged in.
• Functional: preferences such as display settings stored in local storage.
• Analytics: anonymized usage data to understand how the product is used. You may opt out via your browser settings or by contacting us.

6. Data Retention

• Account data is retained for as long as your account is active, plus 90 days after deletion to allow dispute resolution.
• Payment records are retained for 7 years to satisfy financial regulations.
• Waitlist emails are deleted within 30 days of the end of the waitlist period, or upon unsubscribe, whichever is sooner.
• Server logs are retained for up to 90 days for security purposes.

7. Your Rights

Depending on your jurisdiction you may have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate data.
• Erasure: request deletion of your data (subject to legal retention requirements).
• Portability: receive your data in a structured, machine-readable format.
• Restriction: ask us to limit how we process your data.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: opt out of marketing emails at any time via the unsubscribe link.

To exercise any right, email us at privacy-linklck@nexuf.io. We will respond within 30 days.

8. Lemon Squeezy: Merchant of Record

Payment processing on linklck is handled by Lemon Squeezy as Merchant of Record. When a Buyer completes a purchase, Lemon Squeezy independently collects payment card data, billing address, and email directly from the Buyer. linklck does not receive or store full payment card numbers.

Lemon Squeezy is responsible for tax compliance, VAT/GST collection, and issuing receipts to Buyers in all applicable jurisdictions. Their privacy practices are governed by the Lemon Squeezy Privacy Policy.

9. International Transfers

linklck is incorporated and operated in the State of Wyoming, United States of America. Data may be transferred to and processed by service providers in the United States and the European Union. Where required by applicable law (including GDPR), we rely on Standard Contractual Clauses or equivalent safeguards approved by the relevant data protection authority.

10. Children's Privacy

linklck is not directed at children under 13 years of age (or under 16 where local law requires). We do not knowingly collect personal data from children. If you believe a child has submitted their data to us, please contact privacy-linklck@nexuf.io and we will delete it promptly.

11. Security

We use industry-standard measures to protect your data, including TLS encryption in transit, encrypted storage of sensitive fields, access controls, and regular security reviews. No system is 100% secure; if you discover a vulnerability please disclose it responsibly to security-linklck@nexuf.io.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a prominent notice in the product at least 14 days before taking effect. Continued use of linklck after changes become effective constitutes acceptance of the updated policy.

13. Contact

Questions, requests, or complaints about this Privacy Policy or our data practices can be sent to:

• Email: privacy-linklck@nexuf.io
• Response time: within 30 business days