LinkIo

Privacy Policy

Effective Date: October 2, 2026

LinkIo is operated by [Legal name], [Postal address, Country]. In this policy, "we" means that operator.

Table of Contents

1. Information We Collect

  • Account Information: When you sign up, we collect your email address and other profile details you provide.
  • Profile and page content: Name, username, bio, avatar, theme, social links, and the links you add, including titles, destination URLs, descriptions, tags, schedules, device targets, and discount text you choose to publish.
  • Sign-in with Google or GitHub: If you use one of these, we receive the name, email address, and profile image the provider sends, and we store the tokens needed to keep that sign-in connected. Those tokens are deleted with your account.
  • Link unlock codes: If you set a password on a link, we store only a hash of that code. We do not store the code itself, and we do not keep a visitor's typed attempt as a password.
  • Promotional codes: If you redeem a code, we store the code, your account, and the date Pro access from that code ends.
  • Billing Information: If you subscribe to LinkIo Pro, our payment processor Dodo Payments collects your payment details and billing address. We do not receive or store your card number. We store your plan, billing interval, subscription status, renewal date, and the customer and subscription identifiers Dodo Payments assigns, along with records of the billing events it sends us.
  • Session data: For a signed-in session we may store the session IP address and user agent to keep the account secure. That is separate from short-link analytics, which do not store the visitor IP address or raw user agent.
  • Accepted Click Analytics: When a visitor follows a short link, we may retain the click time, link, coarse device/browser/operating-system family, trigger (such as link or QR), the tags the link carried at that moment, and campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) present on the link. We do not claim or derive page views, impressions, bounce rate, or destination time-on-page from these events.
  • Approximate Location: Where our hosting provider supplies it, we may retain the country, region, and city our provider associates with the request. This is derived by our hosting provider from network routing information; we do not perform any location lookup ourselves, and we do not retain the source IP address, GPS, or any device-reported location. Location is unavailable — and therefore not retained — outside our hosting provider's network.
  • Referring Page: We may retain the hostname and page path of the page that linked to a short link (for example example.com/blog/post). We deliberately discard the query string of the referring URL at the point of collection, because such query strings can contain session tokens, email addresses, or search terms. We never store the full referring URL.
  • Approximate Visitor Identifier: We use a keyed one-way HMAC derived from request network and browser signals to approximate unique visitors and suppress duplicate clicks. The stored identifier is truncated, is not disclosed to creators, and changes when its independent secret is rotated. New click events do not retain the source IP address, raw user agent, or full referrer URL.
  • Service and Authentication Data: Better Auth may process account session information, including session IP address and user agent, for authentication and security. Operational logs may contain request/error metadata needed to secure and operate the service, but tracking telemetry is designed not to include visitor identifiers, raw IP/user-agent values, destination URLs, or full referrers.

2. How We Use Your Information

  • To provide and improve our services.
  • To personalize your experience.
  • To analyze usage and performance.
  • To process payments and manage your subscription.
  • To communicate with you about your account, billing, or important service updates, and to send the weekly analytics digest, which you can turn off at any time (we do not send marketing emails).
  • To protect against fraud and abuse.

3. Legal Bases

  • Contract: to provide your account, public page, short links, and paid plan.
  • Legitimate interests: to keep the service secure, prevent abuse, and measure which short links are used. A visitor can opt out of click analytics as described below.
  • Legal obligation: to keep billing and accounting records we are required to keep.
  • Consent: where a law requires consent before we process a visitor's click. If you send traffic from a place with that requirement, you are responsible for obtaining consent first.

4. Cookies & Click Tracking

  • Better Auth uses cookies to maintain signed-in account sessions. LinkIo does not use advertising or marketing cookies. The only cookie is the one that keeps you signed in.
  • Short-link analytics do not require a visitor cookie. Upstash Redis temporarily stores a pseudonymous duplicate-prevention key for approximately one hour and applies abuse limits. PostgreSQL is the authoritative analytics store; Redis does not hold canonical click history.
  • Bots, social-preview agents, explicit test traffic, duplicate/limited traffic, requests with ?no_track=1, and requests carrying linkio-no-track: 1 are excluded from creator-facing click analytics.
  • A visitor can opt out of creator-facing click analytics by adding ?no_track=1 to the short link, or by sending the header linkio-no-track: 1. The redirect still works.

5. Sharing Your Information

  • We do not sell your personal information.
  • We share data with the providers below only so they can run LinkIo for us:
    • Vercel — hosting, and the country, region, and city associated with a request on Vercel's network.
    • PostgreSQL host — the database that stores accounts, content, and analytics.
    • Upstash — short-lived duplicate suppression and abuse limits. This is not the analytics record.
    • Resend — account email, including verification, password reset, and the weekly digest.
    • Dodo Payments — checkout, subscriptions, invoices, and tax. Dodo is the merchant of record.
    • Cloudinary or Cloudflare R2 — image uploads, whichever provider is configured.
    • Google and GitHub — only if you choose that sign-in method.
  • These providers may process data in the United States and in other countries where they operate.
  • We may disclose information if required by law, or to protect LinkIo, our users, or the public.

6. Data Security

  • We use industry-standard security measures to protect your data.
  • No method of transmission or storage is 100% secure; use LinkIo at your own risk.

7. Your Rights

  • You can ask us to access, correct, export, or delete your account by emailing nishitbaria@gmail.com. We may ask you to confirm you control the account. We respond within the time your law requires. You can also complain to the privacy regulator in your country.
  • Detailed accepted click events are retained for 12–13 months, according to service configuration, then converted into per-link daily counts and deleted in bounded maintenance runs. These older counts contain no approximate visitor identifier, approximate location, device/browser/operating-system family, trigger, referring page, campaign parameters, or tags — only a per-link daily total. Account and content retention may differ where required to provide the service, meet legal obligations, prevent abuse, or complete requested deletion.
  • Deleting your account removes the subscription details we store. Dodo Payments may keep transaction records it is legally required to retain.
  • Link creators see aggregate analytics and individual accepted-click rows. A Pro export can include time, country, region, city, device family, referrer path, campaign parameters, and tags. Creators do not receive source IP addresses, raw user agents, visitor hashes, or full referrer URLs. Creators must not attempt to identify a visitor from that export.

8. Children's Privacy

LinkIo is not intended for children under 13. We do not knowingly collect data from children.

9. Connected AI Apps

If you connect an AI assistant, that app can act on your LinkIo account with the access you approve. A linkio:read grant lets it read your account, links, folders, and analytics. A linkio:write grant also lets it create, update, delete, reorder, and move links, and update your display name, bio, and username. LinkIo issues a short-lived access token (about 10 minutes) and a refresh token that lasts 30 days. Disconnect an app at /settings/connections: that stops new tokens immediately, and an access token already issued stops working within 10 minutes. LinkIo does not receive the assistant's conversation.

10. Changes to This Policy

We may update this Privacy Policy. We'll notify you of significant changes by email or on our website.