Privacy Policy

Effective Date: October 14, 2026

Contact: hello@liink.is

Liink is operated by GBFS Holding SAS, a company registered in France.

1. Introduction

Your privacy is critically important to us. This Privacy Policy explains how Liink collects, uses, stores, and protects your personal information when you use our link-in-bio services. This policy applies to all users of our web application, mobile applications, and related services.

2. Data We Collect

We collect the following categories of data:

Account Information: Email address, username, display name, and profile picture
Link-in-Bio Content: Links, media files, design preferences, and customization settings
Analytics Data: Page views, clicks, visitor geographic regions, and referral sources
Technical Data: Session identifiers, device information, browser type, and IP addresses
Third-Party Integration Data: Data from connected services like Google

3. Google User Data

Our application integrates with Google services to provide authentication and enhance user experience. This section specifically describes how we access, use, store, and handle Google user data in compliance with Google API Services User Data Policy.

3.1 Google Data We Access

When you sign in with Google or connect your Google account, we access the following data:

Basic Profile Information: Your name, email address, and profile picture from your Google account
Email Address: Used to create and identify your Liink account
Profile Photo: Optionally used as your default avatar on your link-in-bio page

3.2 How We Use Google Data

We use Google user data exclusively for the following purposes:

Account Authentication: To securely sign you into our application without requiring a separate password
Account Creation: To automatically populate your profile with your name and email when you first sign up
Profile Display: To show your profile picture on your public link-in-bio page (if you choose to use it)
Communication: To send you important account notifications, security alerts, and service updates

3.3 Google Data Storage

Google user data is stored securely in our database hosted on Supabase infrastructure with encryption at rest. We retain your Google account information for as long as your Liink account remains active. Upon account deletion, all associated Google data is permanently removed within 30 days.

3.4 Google Data Sharing

We do not sell, rent, or share your Google user data with third parties for their marketing purposes. Your Google data may only be shared in the following limited circumstances:

With service providers who assist in operating our platform (e.g., cloud hosting, email delivery)
When required by law, court order, or government request
To protect the rights, property, or safety of Liink, our users, or the public

3.5 Revoking Google Access

You can revoke Liink's access to your Google account at any time by visiting your Google Account Permissions page and removing our application. Note that revoking access will prevent you from signing in with Google, but will not automatically delete your Liink account or data.

4. How We Use Your Data

We use the data we collect for the following purposes:

To provide, maintain, and improve our services
To authenticate your identity and manage your account
To display your link-in-bio pages to visitors
To provide analytics about your page performance
To communicate with you about your account and our services
To detect, prevent, and address technical issues and security threats
To comply with legal obligations

5. Data Storage and Security

Your data is stored on secure servers provided by Supabase (hosted on AWS infrastructure). We implement industry-standard security measures including:

Encryption of data in transit (TLS/SSL) and at rest
Row Level Security (RLS) policies to ensure data isolation between users
Regular security audits and vulnerability assessments
Secure authentication using OAuth 2.0 protocols
Limited employee access to production data on a need-to-know basis

We may share your data with the following categories of third parties:

Service Providers: Cloud hosting (Supabase/AWS), payment processing (Stripe), email delivery, and analytics services
Legal Requirements: When required by law, subpoena, or other legal process
Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties for advertising or marketing purposes.

7. Third-Party Integrations

Our service integrates with various third-party platforms. When you connect these services, you are subject to their respective privacy policies:

Google: For authentication and sign-in services
Stripe: For payment processing and subscription management

8. Your Rights and Choices

You have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your account and associated data
Portability: Request your data in a machine-readable format
Objection: Object to certain processing of your data
Withdrawal: Withdraw consent for data processing where applicable

To exercise these rights, please contact us at hello@liink.is.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. When you delete your account:

Account data is permanently deleted within 30 days
Backup copies are purged within 90 days
Our own analytics records are deleted after 25 months; aggregated statistics with no identifier may be kept longer
Legal records may be retained as required by law

10. Cookies and Tracking

We use cookies and similar technologies for authentication, preferences, and analytics. You can control cookie settings through your browser preferences. Essential cookies required for the service to function cannot be disabled.

Analytics on Liink's own pages. On our homepage, blog, pricing, sign-up and app pages (never on the public pages our users create, or on their custom domains), we measure visits with:

Liink's own analytics, run by us. Two first-party cookies hold random identifiers: liink_vid (a visitor, kept 13 months from your first visit and never extended) and liink_sid (a visit, ending after 30 minutes without activity). We record the pages you view, links to other sites you click, actions on our pages such as which button you used (never with your personal details), the site and campaign that brought you, an approximate location (country, region and city) derived from your connection, and your device, browser and operating system type. We do not store your IP address or your full browser details, and we keep these records for 25 months. With your OK in the cookie banner, we also link a visit to your Liink account and to the steps you complete (sign-up, onboarding, checkout, a trial and your subscription's first payment with its amount), from the moment you accept, to see which visits lead to sign-ups and subscriptions. Withdrawing your choice or signing out ends that link for later visits, and deleting your account removes it.
DataFast, an analytics service that sets its own cookies on the same pages, only if you accept them in the cookie banner.
Vercel Web Analytics, which uses no cookies.

Your choice. The cookie banner on our own pages asks before anything beyond anonymous visit counting: declining is as easy as accepting, and your choice is kept 6 months (in a liink_consent cookie, with the time you accepted in liink_consent_at) before we ask again.

On our users' public pages, views and link clicks are counted for the page owner without cookies, using a code that changes every day and differs per page, so a visitor cannot be followed across days or pages.

11. Children's Privacy

Our services are not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

12. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and compliance with applicable data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Effective Date" above. Your continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices:

Email: hello@liink.is

Website: liink.is