Privacy Policy

We may collect the following categories of information:

1.1 Information You Provide

• Account Information: When you sign up via Google OAuth, we receive your name, email address, and profile picture from your Google account.
• Links and Content: URLs you shorten, custom aliases, tags, notes, and any other data you input into the platform.
• Workspace and Team Data: Organization names, team member invitations, and workspace configurations.
• Communications: Any messages, feedback, or support requests you send to us at [email protected].

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on pages, and interaction patterns within the dashboard.
• Click Data: When someone clicks a Lynki short link, we collect the clicker's IP address, approximate geographic location, device type, browser type, operating system, referring URL, and timestamp.
• Log Data: Server logs that include IP address, browser type, referring/exit pages, and timestamps.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain your session, remember your preferences, and improve the Service.

1.3 Information from Third Parties

• Google OAuth: Profile data from your Google account when you authenticate.
• Payment Processors: Transaction confirmations and subscription status from our payment partners. We do not store your full credit card number.

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Create and manage your account.
• Process transactions and send related information.
• Provide link analytics (clicks, geographic data, device data) to link creators.
• Detect and prevent fraudulent activity, spam, and abuse.
• Filter bot traffic from analytics to ensure data accuracy.
• Send you technical notices, updates, security alerts, and administrative messages.
• Respond to your comments, questions, and support requests.
• Comply with legal obligations and enforce our Terms of Service.

Our Service allows users to attach retargeting pixels (such as Facebook Pixel, TikTok Pixel, Google Ads tags, and LinkedIn Insight Tags) to their short links. When a visitor clicks a link with retargeting pixels enabled:

• The third-party pixel code fires on the redirect page before the visitor reaches the destination URL.
• The third party (e.g., Meta, Google, TikTok) may collect data about the visitor according to their own privacy policies.
• Lynki does not control the data collected by these third-party pixels. The link creator is responsible for compliance with applicable data protection laws when using retargeting features.

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (hosting, analytics, payment processing), subject to confidentiality obligations.
• Workspace Members: With other members of your workspace or organization, as configured by workspace administrators.
• White-Label Clients: If you access the Service through a white-label partner, certain data may be shared with that partner as necessary to provide the Service.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Protection of Rights: When we believe disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset.

We retain your personal information for as long as your account is active or as needed to provide the Service. Click analytics data is retained for the duration of the link's existence or as long as the account remains active. You may request deletion of your account and associated data by contacting us at [email protected].

We may retain certain information as required by law or for legitimate business purposes, such as resolving disputes, enforcing agreements, and complying with legal obligations.

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit using TLS/SSL.
• Secure session management with HTTPOnly, Secure, and SameSite cookie flags.
• Parameterized database queries to prevent SQL injection.
• CSRF token protection on all state-changing operations.
• Regular security audits and monitoring.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Request a copy of your data in a portable, machine-readable format.
• Objection: Object to certain processing of your personal data.
• Restriction: Request restriction of processing in certain circumstances.
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

We use the following types of cookies:

• Essential Cookies: Required for the Service to function, such as authentication session cookies.
• Analytics Cookies: Help us understand how visitors interact with the Service to improve user experience.

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete such information promptly.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.