Privacy Policy — Linkist

1. Who We Are

Linkist ("we", "us", "our") operates the website at linkist.vip. We provide a personal landing page service that lets users create link-in-bio pages.

2. Data We Collect

We collect the following personal data:

Account data: Email address, display name, username (slug), and password (stored hashed, never in plain text).
Profile content: Bio text, social links, avatar image, and header image that you choose to upload.
Usage data: Page view counts and link click counts (aggregated, not per-visitor).
Payment data: If you upgrade to Pro, Stripe processes your payment. We store only your Stripe customer ID — we never see or store your card details.
Technical data: IP addresses are processed for rate limiting and security but are not stored permanently.

3. Why We Collect It

To create and maintain your account
To display your public profile page
To provide analytics on your page performance (Pro feature)
To process payments via Stripe
To protect the service from abuse (rate limiting, security)

4. How We Store and Protect Your Data

Passwords are hashed with bcrypt (never stored in plain text).
Sessions use signed, HttpOnly, Secure cookies.
Images are stored in Amazon S3 with server-side encryption.
Database is PostgreSQL with encrypted connections.
All traffic is served over HTTPS.

5. Who We Share Data With

We do not sell your data. We share data only with:

Stripe: For payment processing (Pro upgrades).
Amazon Web Services: For image storage (S3).

Your public profile content (display name, bio, social links, avatar) is publicly visible by design — that is the purpose of the service.

6. Cookies

We use a single functional cookie (onelink_session) to keep you logged in. This is strictly necessary for the service to function. We do not use advertising, analytics, or tracking cookies.

7. Your Rights

Under GDPR, POPIA, CCPA, and similar laws you have the right to:

Access: Download a copy of all your data from your account settings.
Deletion: Permanently delete your account and all associated data.
Rectification: Update your data at any time from your dashboard.
Portability: Export your data in JSON format.
Withdraw consent: Delete your account to withdraw consent for data processing.

You can exercise these rights directly from your admin dashboard, or by contacting us at the email below.

8. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data (profile, links, images) is permanently deleted within 30 days. Aggregated, anonymized analytics may be retained.

9. Children

Linkist is not intended for users under 13 years of age. We do not knowingly collect data from children under 13. If you believe a child has created an account, please contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the site. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related questions or requests, email us at [email protected].