Privacy Policy
Draft — pending review by counsel.
This Privacy Policy describes what personal data LinkBuilding collects, why, how we use it, and the rights you have.
Data we collect
Account data — name, email, password hash, role (buyer/publisher/admin), display name. Profile data — company name, country, tax details, payout method identifiers. Site and order data — domains, URLs, niches, order history, messages exchanged with counterparties, placement verification results. Payment data — we do not store card details. Payments are processed by PayPal; we retain transaction IDs, amounts, and status. Analytics data — page views, feature usage, device and browser metadata, IP address, aggregated performance metrics. Support data — the contents of any contact form submission or dispute ticket.
Why we process it
- To operate the marketplace (matching, orders, payouts, verification).
- To comply with legal obligations (tax, anti-fraud, dispute resolution).
- To improve the product and detect abuse.
- To communicate with you about your account, orders, and — with consent — marketing.
Legal bases (GDPR): contract performance, legitimate interest, legal obligation, and consent (for marketing and non-essential cookies).
Subprocessors
- Lovable Cloud — hosting, database, authentication.
- PayPal — payment processing and payouts.
- DataForSEO — third-party SEO metrics for site profiling.
- Firecrawl — content extraction for site analysis.
- Email delivery provider — transactional and, where applicable, marketing email.
An up-to-date subprocessor list is available on request.
Retention
- Account and profile data: for the life of your account plus up to 7 years for tax and dispute records.
- Order and payment records: 7 years (tax law).
- Messages and audit logs: 3 years after order closure.
- Analytics: aggregated indefinitely; raw event data up to 24 months.
Your rights
Depending on your jurisdiction you may have the right to access, correct, export, or delete your data, to object to processing, and to withdraw consent. Email privacy@[your-domain] to exercise these rights. We respond within 30 days.
International transfers
Data may be processed in the United States and other countries where our subprocessors operate. Where required, we rely on Standard Contractual Clauses.
Cookies
See the Cookie Policy. Essential cookies keep you signed in; analytics cookies are opt-in in the EU/UK.
Security
We use encryption in transit, encryption at rest for our database, role-based access, and audit logging. No system is perfectly secure; report suspected vulnerabilities to security@[your-domain].
Children
The platform is not directed to anyone under 18 and we do not knowingly collect data from minors.
Changes
We will notify you of material changes and, where required, ask for renewed consent.
Contact
privacy@[your-domain]