Privacy Policy

Overview

LinkTR, Inc. ("LinkTR," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our competitive intelligence platform, website, mobile applications, and related services (collectively, the "Service").

By accessing or using our Service, you agree to the collection and use of information as described in this policy. If you disagree with any part of this policy, please discontinue use of the Service.

This policy applies to all users of the LinkTR platform, including individuals accessing the service on behalf of a business or organization. If you are using LinkTR as part of a corporate subscription, your employer's data processing agreement may also apply.

Information We Collect

We collect information you provide directly, information generated automatically through your use of the Service, and information from third-party sources.

Information You Provide

• Account Information: Name, email address, password (stored as a salted hash), company name, job title, and role when you create an account.
• Payment Information: Billing name, address, and payment card details. Card numbers are processed and stored by our payment provider (Stripe) and are never stored on our servers.
• Watchlist Data: Companies and search terms you add to your tracking lists, alert preferences, and notification settings.
• Communications: Messages you send to our support team, feedback forms, feature requests, and survey responses.
• Profile Information: Optional information such as your profile photo, company size, and use case that you may add to your account.

Information Collected Automatically

• Usage Data: Pages visited, features used, search queries entered, companies viewed, alerts clicked, session duration, and interaction patterns.
• Device Information: IP address, browser type and version, operating system, device identifiers, screen resolution, and timezone.
• Log Data: Server logs including request timestamps, response codes, and referring URLs.
• API Usage: Endpoint calls, request volume, error rates, and API key usage patterns for users with programmatic access.

Information From Third Parties

• OAuth Sign-In: If you sign in with Google or GitHub, we receive your name, email address, and profile photo from those providers per your authorization.
• Enrichment Data: We may receive supplemental professional profile data from business data providers to help personalize your experience.

How We Use Information

We use the information we collect for the following purposes:

Service Delivery

• Provisioning and maintaining your account
• Processing and delivering intelligence signals and reports based on your watchlist
• Sending transactional emails (account confirmations, password resets, billing receipts)
• Providing customer support and responding to inquiries

Service Improvement

• Analyzing usage patterns to improve product features and user experience
• Training and improving our signal detection and confidence scoring algorithms (using anonymized, aggregate data only)
• Debugging technical issues and monitoring service performance
• Conducting internal research and development

Communication

• Sending product updates, feature announcements, and changelog notifications (you may opt out at any time)
• Delivering intelligence digest emails per your configured schedule
• Notifying you of critical signals that meet your alert thresholds

Legal & Compliance

• Enforcing our Terms of Service and other applicable policies
• Complying with applicable laws, regulations, and lawful requests from authorities
• Protecting against fraud, abuse, and security threats

We do not sell your personal information to third parties, use it for advertising purposes, or share it with data brokers.

Cookies & Tracking

We use cookies and similar tracking technologies to operate and improve the Service. You can control cookie preferences through your browser settings, though disabling certain cookies may affect functionality.

Types of Cookies We Use

• Essential Cookies: Required for core functionality including authentication sessions, CSRF protection, and load balancing. Cannot be disabled.
• Preference Cookies: Remember your settings such as language, theme, and notification preferences.
• Analytics Cookies: Collect anonymized, aggregate data about usage patterns using privacy-preserving analytics. We do not share this data with ad networks.
• Performance Cookies: Monitor service performance and detect errors to improve reliability.

We do not use third-party advertising cookies, cross-site tracking pixels, or behavioral profiling technologies. Our analytics are designed to be privacy-first and do not involve fingerprinting.

Third-Party Services

We work with a limited number of trusted third-party providers to operate the Service. Each provider has been evaluated for their security and privacy practices.

• Stripe — Payment processing. Stripe is PCI DSS Level 1 certified.
• Amazon Web Services (AWS) — Cloud infrastructure, data storage, and compute. Data is stored in US-East and EU-West regions.
• SendGrid — Transactional email delivery.
• Sentry — Error monitoring and crash reporting (anonymized stack traces only).
• Google / GitHub — Optional OAuth-based sign-in.

We enter into data processing agreements (DPAs) with all sub-processors. A full list of sub-processors is available upon request at privacy@linktr.cn.

Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Active accounts: Account and usage data is retained for the duration of your subscription plus 30 days after cancellation to allow for reactivation.
• Deleted accounts: Upon account deletion request, personal data is removed within 30 days, except for data required for legal compliance (e.g., billing records retained for 7 years).
• Aggregated analytics: Anonymized, aggregate usage statistics may be retained indefinitely as they contain no personal information.
• Support communications: Support ticket history is retained for 2 years to enable continuity of service.

Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your personal data for certain purposes.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Opt-Out: Unsubscribe from marketing communications at any time via the link in any email or through your account settings.

To exercise any of these rights, email privacy@linktr.cn. We will respond within 30 days. For GDPR-related requests, we respond within the required 30-day window with the option to extend by 60 days for complex requests.

California residents have additional rights under the CCPA/CPRA. We do not sell personal information as defined by the CCPA, so no opt-out of sale is required.

Security

We implement industry-standard security measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

• All data is encrypted in transit using TLS 1.3 and at rest using AES-256.
• Passwords are hashed with bcrypt using a work factor appropriate for current hardware.
• Access to production systems and customer data is restricted to authorized personnel on a need-to-know basis.
• We conduct regular security audits, penetration tests, and vulnerability assessments.
• SOC 2 Type II audit is in progress; report available to Enterprise customers under NDA.

Despite these measures, no method of electronic transmission or storage is 100% secure. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law (within 72 hours for GDPR-covered data).

Children's Privacy

The LinkTR Service is designed for business professionals and is not directed at children under the age of 16 (or 13 in the United States). We do not knowingly collect personal information from children.

If you believe that a child has provided us with personal information, please contact us immediately at privacy@linktr.cn and we will take steps to delete that information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Send a notification email to the address associated with your account
• Display a prominent notice on the Service for at least 30 days

Your continued use of the Service after the effective date of a revised policy constitutes your acceptance of the changes. If you do not agree to the updated policy, you must discontinue use of the Service and may request deletion of your account.

Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

• Email: privacy@linktr.cn
• Mailing Address: LinkTR, Inc., 340 Pine Street, Suite 800, San Francisco, CA 94104
• Contact Form: linktr.cn/contact

For EU/EEA residents, our designated EU representative can be reached at eu-rep@linktr.cn. If you are located in the UK, you may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.