Privacy Policy

1. Who we are

The data controller is the operator identified above. This policy explains what we collect when you use Linktotem, as a page owner, as a visitor of a page or of this website, and what your rights are under the General Data Protection Regulation (GDPR). Write to the contact address above about anything in it.

2. If you own a page

Account data: email, password (hashed with Argon2; we cannot read it), name, language and, if you sign in with Google, your Google account id. For each signed-in session we keep the IP address and browser, to protect your account and our referral programme from abuse; they are deleted when the session ends. Basis: performing our contract with you, and our legitimate interest in security.

Page content: everything you put on your pages, including images and files you upload and pictures we take of your published page (share images, screenshots, the customer gallery if you join it). Basis: performing our contract.

Billing data: your plan, subscription status and Stripe customer id. Card details go directly to Stripe and never reach our servers; Stripe is an independent controller for payment data. Basis: contract and legal obligations (accounting).

Programmes you join: for the affiliate programme, your pitch, website and payout details (the PayPal address or IBAN is stored encrypted); for referrals, who referred whom. Reviews and verification requests you send us. Basis: contract.

Connected services, only if you connect them: Instagram (your username and the posts we import), Mailchimp (an access token, stored encrypted, and your audience name), Stripe for your shop, and your own domain (sent to our hosting provider to issue its certificate). Basis: contract.

AI assistants: when you ask for suggestions we send your page's name, bio, link titles and your request to OpenAI; for images, only your prompt. OpenAI does not use this data to train its models. Basis: contract.

Assistants you connect (ChatGPT, Claude and other MCP clients), only if you connect one: through our MCP server the assistant reads your pages, statistics, form responses and subscribers and, if you allowed it on the consent screen, changes your pages. We keep the connection (which app, when it was last used) and a record of each action it takes (the tool, when, whether it worked) for 90 days. We do not receive your conversations with the assistant: they stay with its provider, under its own privacy policy. You can disconnect an assistant at any time in Settings › API. Basis: contract.

Emails: we send transactional emails (verification, billing, security, safety notices) and a few tips in your first days, plus one request for a review. You can opt out of tips at any time; transactional emails are part of the service.

Newsletter (only if you subscribe): your email, the language and place you subscribed, the exact wording you agreed to and its version, a keyed hash of your IP address, and the dates you subscribed, confirmed and unsubscribed. Nothing is sent until you confirm from the email we send you. Basis: your consent, which you can withdraw at any time with the link in every email. Confirmed addresses are stored with Resend to send the newsletter; we keep the consent record for as long as we may need to prove it.

3. If you visit a page made with Linktotem

We count views and clicks on our server without cookies. For each one we store the page, the approximate country and city (from the IP address), the referring website, campaign tags, device and browser type, and a visitor code that changes every day. The code is made from your IP address and browser with a secret key, so it cannot be turned back into either; the IP address itself is not stored. These records are kept for 24 months.

What you send through a page (a form, a newsletter sign-up, an email to unlock content, an order, a question to the page's assistant) goes to the page's owner, who decides what to collect and is the controller of that data. We store it on their behalf as their processor. Orders are paid on the owner's own Stripe account. Questions to a page's assistant are answered by OpenAI using the page's text and stay available to the owner.

If the owner turned on Google Analytics or Meta Pixel, they load only after you accept in the banner on that page, and then Google or Meta receive your visit under their own policies. Videos, music and booking calendars the owner adds (for example from YouTube, Spotify or Calendly) load from the provider only when you press them; until then the provider receives nothing. The page's fonts are served by us.

If you report a page you can give us your email; we use it only to follow up on the report.

4. If you visit this website

Page views on linktotem.com are counted with Vercel Web Analytics, which does not use cookies and does not identify visitors. If you accept analytics cookies, Google Analytics 4 also measures how the site and the dashboard are used (pages seen, sign-up, onboarding and subscription steps, device and approximate location) and whether you came from one of our Google ads; without your consent, it receives only cookieless signals. We do not send your name or email to Google. The free tools count how often they are used, without personal data. If you arrive through a referral link or a template page, a cookie remembers it so that the offer or the template follows you to sign-up (see the Cookie Policy).

5. Where data goes

Hosting and database: Vercel and Supabase (database in Ireland). Payments: Stripe. Email delivery: Resend. AI features: OpenAI. Link safety: the addresses on pages are checked with Google Safe Browsing. Page screenshots: a browser service run by us or by Browserless. Error monitoring: Sentry. And the services you connect yourself (Instagram, Mailchimp, Stripe). Each processes data on our instructions under a data processing agreement. Analytics and ad measurement (only with consent): Google Analytics and Google Ads (Google Ireland Ltd.).

Some of these providers are in the United States. Transfers are covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

We do not sell personal data. With your consent, visit and conversion data is used to measure and improve our own Google Ads campaigns; it is never used to show you other companies' ads.

6. How long we keep it

Account and page data: while your account exists. When you delete your account, your pages go offline at once; for 30 days signing in brings everything back, and after that it is erased for good, with the files, form answers, subscribers and orders of your pages.

Sessions: until you sign out or they expire. Counters that limit repeated attempts (which include IP addresses): deleted a day after they stop counting. Visit statistics: 24 months. Billing records: as tax law requires (10 years in Portugal), kept by Stripe. Page reports: as long as needed to handle them and protect visitors.

7. Your rights

You can access, correct, export or delete your data, restrict or object to some processing, and withdraw consent where processing is based on it. Most of this you can do yourself in your account: edit your details, export a page, delete answers and subscribers, delete your account. For the rest, write to the contact address above; we answer within one month.

If you sent data through someone's page, contact that page's owner first; we will help them answer you.

You also have the right to complain to a data protection authority; in Portugal that is the CNPD (www.cnpd.pt).

8. Data processing for page owners

When your page collects data from visitors, we process it as your processor under Article 28 GDPR: only to provide the service and on your instructions, with staff bound to confidentiality, with the security described below, using the providers listed above as sub-processors (we will tell you before adding one, and you may object by leaving), helping you answer requests from the people concerned, telling you without undue delay about a breach that affects that data, and deleting it when you delete it or your account.

You are responsible for having a legal basis to collect it and for telling your visitors, for example in the text of your form.

9. Security

Passwords are hashed with Argon2, connections are encrypted, secrets such as access tokens and payout details are stored encrypted, and access to production data is limited to what is needed to run the service. If a breach affects you, we will tell you and the authority as the law requires.

10. Changes

We will post changes to this policy here and, when they are material, email account holders.