Privacy Policy

Last updated: July 3, 2026

01

1. Introduction and Data Controller

Linker.page is operated by Linker Page Inc., a Delaware corporation. Registered address: 8 The Green, STE B, Dover, DE 19901, United States. This Privacy Policy explains how we collect, use, share, and protect personal data when you use our website, dashboard, public pages, and related services. For the purposes of applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (where applicable), and other local laws, Linker Page Inc. acts as the data controller for account, billing, and platform operations data described in this policy. When you operate a public page that collects visitor information, you may also act as an independent controller for that visitor data. You are responsible for providing appropriate notices and obtaining lawful bases for processing on your own pages. Contact the data controller at support@linker.page for privacy-related requests.

02

2. Data We Collect

We collect personal data in the following categories: Account and profile data: email address, username, display name, avatar, bio, language preference, authentication identifiers, and hashed passwords. Page and commerce data: blocks, themes, products, prices, media uploads, custom domain settings, QR configurations, checkout settings, and order-related metadata. Payment and billing data: subscription status, plan type, invoices, Stripe Connect account identifiers, payout records, and commission calculations. Full payment card numbers are processed by Stripe and are not stored on our servers. Usage and analytics data: page views, link clicks, referral sources, device type, browser information, approximate location derived from IP address, and dashboard activity logs. Communications data: support messages, email campaign content you create, delivery logs, and marketing preferences. AI interaction data: prompts, business descriptions, and generated outputs when you use AI features, processed by our AI providers as described below. Technical data: IP address, cookies, session tokens, affiliate referral identifiers (lp_aff_ref), and security logs. We collect data directly from you, automatically through your use of the Service, from payment processors, and from integrations you authorize.

03

3. How We Use Your Data

We use personal data to: • Provide, maintain, and secure the Service, including authentication and account recovery • Publish and render your public pages, products, and custom domains • Process subscriptions, seller payouts, tips, donations, and platform commissions • Operate analytics dashboards and aggregate performance reporting • Send transactional emails such as verification, receipts, security alerts, and signup nudges via Resend • Deliver email campaigns you configure to your subscribers, in accordance with your instructions • Generate AI-assisted page content when you request it • Operate the affiliate program and attribute referrals via lp_aff_ref • Enforce username policies, prevent abuse, and investigate reports submitted at linker.page/report • Comply with legal obligations and respond to lawful requests • Improve the Service through debugging, research, and product development We do not sell your personal data. We do not use third-party advertising networks on user public pages.

05

5. Sharing, Subprocessors, and Disclosure

We share personal data only as necessary to operate the Service, with the following categories of recipients: Infrastructure and hosting: Supabase (database, authentication, storage) and Vercel (application hosting and delivery). Payments: Stripe for subscriptions, Connect payouts, and checkout processing. Email: Resend for transactional and campaign email delivery. Analytics: Google Analytics 4 on our marketing website only, and only after you grant consent through our cookie banner and consent mode configuration. Artificial intelligence: OpenAI and/or Anthropic when you use AI page builder or related features; prompts and context necessary for generation are sent to the provider you interact with through our Service. Affiliate and integration partners: Streamlabs and other services you connect, according to your configuration. Professional advisers and authorities: lawyers, accountants, or regulators when required by law or to protect rights and safety. All subprocessors are bound by contractual data protection obligations appropriate to their role. A current list is available on request at support@linker.page.

06

6. International Data Transfers

Linker.page operates globally and may process data in countries other than your own, including the United States and European Union, where our subprocessors maintain facilities. When we transfer personal data from the EEA, UK, or Switzerland to countries without an adequacy decision, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, supplemented by technical and organizational measures where required. By using the Service, you acknowledge that your data may be transferred internationally as described in this policy. You may contact us for more information about transfer mechanisms applicable to your data.

07

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy: • Active accounts: data is retained while your account remains open and as needed to provide the Service. • Unverified accounts: deleted automatically after 7 days if email verification is not completed. • Unpublished usernames: may be released after 30 days without a published page, as described in our Terms. • Dormant accounts: may be marked dormant after 180 days of inactivity with no page visitors; associated data may be deleted after an additional grace period. • Deleted accounts: personal data is removed or anonymized within 30 days, subject to backup retention cycles that are purged on a rolling schedule. • Billing and tax records: retained as required by applicable law, typically up to seven years where mandated. • Affiliate cookies: lp_aff_ref expires after 90 days in the visitor browser. We may retain anonymized or aggregated data that no longer identifies you for analytics and product improvement.

08

8. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to operate the Service and, with your consent, to measure marketing performance. Essential technologies include Supabase authentication cookies, session identifiers, NEXT_LOCALE for language preference, and lp_aff_ref for affiliate attribution. On our marketing website, Google Analytics 4 loads only after you accept analytics cookies through our consent banner. Your choice is stored in localStorage under the key lp_analytics_consent. For full details on cookie names, purposes, durations, and how to change preferences, see our Cookie Policy at linker.page/cookies.

09

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data: • Access: request a copy of personal data we hold about you. • Rectification: request correction of inaccurate or incomplete data. • Erasure: request deletion of your data, subject to legal exceptions. • Restriction: request limited processing in certain circumstances. • Portability: receive your data in a structured, commonly used format where technically feasible. • Objection: object to processing based on legitimate interests or direct marketing. • Withdraw consent: where processing is based on consent, withdraw it at any time. To exercise these rights, email support@linker.page with sufficient information to verify your identity. We respond within the timeframe required by applicable law, typically within 30 days. You may also lodge a complaint with your local supervisory authority if you believe our processing violates applicable law.

10

10. Regional Disclosures (UK, EEA, Turkey, and California)

United Kingdom: If you are in the UK, we process personal data in accordance with UK GDPR. You have the rights described in Section 9. You may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you are unsatisfied with our response. European Economic Area: If you are in the EEA, EU GDPR applies. You may contact your local supervisory authority if you believe our processing violates applicable law. Turkey (KVKK): If you are located in Turkey, your personal data is also processed in accordance with Law No. 6698 on the Protection of Personal Data. You may request information, correction, or deletion by contacting support@linker.page. You may also apply to the Personal Data Protection Authority (KVKK Kurumu) if your request is not resolved satisfactorily. California (CCPA/CPRA outline): If you are a California resident, you may have the right to know categories of personal information collected, sources, business purposes, and categories of third parties with whom data is shared. You may request access, correction, or deletion of personal information, and opt out of "sale" or "sharing" as defined by California law. Linker.page does not sell personal information for monetary consideration. To submit a request, contact support@linker.page. We will not discriminate against you for exercising privacy rights.

11

11. Security and Children's Privacy

We implement technical and organizational measures designed to protect personal data, including encryption in transit (TLS), access controls, secure data centers, and hashed password storage. No method of transmission or storage is completely secure; we cannot guarantee absolute security. You are responsible for maintaining strong credentials and reviewing AI-generated or user-submitted content before publication. The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact support@linker.page and we will take steps to delete it.

12

12. Law Enforcement and Government Requests

Linker Page Inc. respects the privacy and civil liberties of Linker.page users. We disclose personal data to law enforcement and other government authorities only when we believe a request is legally valid, proportionate, and properly authorized. Who may submit requests: • Law enforcement agencies, regulatory bodies, courts, and other government authorities with lawful authority to request data • Requests must come from an official agency email domain or be delivered on official letterhead to our registered office Required information: • Full name and contact details of the requesting officer or authorized agent • Agency name, badge or reference number, and jurisdiction • The specific Linker.page URL, username, email address, or account identifier in question • A clear description of the data sought and the lawful basis for disclosure (for example, a court order, warrant, subpoena, or statutory power under applicable U.S. or international law) • Confirmation that the request is not overly broad and is limited to what is necessary How we handle requests: • We review each request for legal validity and may reject, narrow, or ask for clarification on overbroad or defective requests • We may notify affected users before disclosure unless we are legally prohibited from doing so or there is a risk of harm, destruction of evidence, or imminent danger • Emergency requests involving imminent threat to life or serious bodily harm may be processed urgently when supported by appropriate authority; contact support@linker.page with "URGENT" in the subject line and explain the emergency • We do not provide backdoors, bulk surveillance access, or decryption keys outside lawful process • We publish summary information about the types of requests we receive where appropriate and may update this policy with transparency statistics from time to time Preservation requests: we may preserve account data for a limited period when validly requested to do so pending production of formal legal process. Submit law enforcement and government requests to: Email: support@linker.page (subject line: "Law enforcement request") Post: Linker Page Inc., 8 The Green, STE B, Dover, DE 19901, United States We aim to acknowledge requests within five business days where practicable.

13

13. Changes to This Policy and Contact

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or Service features. When we make material changes, we will post the updated policy with a revised "Last updated" date and, where appropriate, notify you by email or in-product message. We encourage you to review this policy periodically. Continued use of the Service after an update constitutes acknowledgment of the revised policy. For privacy questions, data subject requests, subprocessors information, or law enforcement inquiries, contact: Linker Page Inc. Registered address: 8 The Green, STE B, Dover, DE 19901, United States Email: support@linker.page

Contact: support@linker.page

Linker Page Inc.
8 The Green, STE B, Dover, DE 19901, United States