Privacy Policy

1.1 Account data

• Identifiers: name, email address, login credentials, profile photo (optional).
• Profile details you choose to provide: company, role, headline, location, phone, website, LinkedIn, locale.

1.2 Content you submit

• Contacts you create or import (name, phone, email, company, notes, tags, source, context).
• Notes, reminders, interactions, and AI prompts.
• Files you upload (e.g. business card images for scanning).

1.3 Usage & device data

• Log data: IP address, browser, device identifiers, language, timestamps.
• Service usage events (feature usage, AI credit consumption).
• Push notification subscription data, when you enable notifications.

1.4 Payment data

Payments are processed by Paddle. We do not store full card numbers. We receive transaction metadata from Paddle (customer ID, subscription ID, plan, status, period, environment).

• Provide the Service (account, contacts, AI features, reminders) — performance of contract.
• Billing & subscriptions via Paddle — performance of contract and legal obligations (tax, accounting).
• Security & fraud prevention (rate limiting, abuse detection, audit logs) — legitimate interests.
• Service improvement (aggregated analytics, debugging) — legitimate interests.
• Customer support — performance of contract / legitimate interests.
• Marketing communications (only when you opt in) — consent; you may withdraw at any time.
• Compliance with law enforcement requests or legal obligations — legal obligation.

Some features use third-party AI providers (e.g. via the Lovable AI Gateway) to generate messages, score contacts, and extract data from images. The relevant content is sent to the provider strictly to produce the requested output and is not used by Linkabl to train models. Do not submit sensitive personal data you would not want processed by an AI provider.

• Subprocessors / service providers — hosting, database, edge functions, email delivery, analytics, error monitoring, and AI inference providers, under written agreements requiring confidentiality and security.
• Paddle (Merchant of Record) — for sale of subscriptions and credit packs, payment processing, tax calculation, invoicing, refunds, and fraud prevention. Paddle acts as an independent controller for billing data. See Paddle's Privacy Policy.
• Public profile recipients — if you enable a public Linkabl profile or share a public list, the information you choose to publish is accessible to anyone with the link.
• Authorities — when required by law, court order, or to protect rights and safety.
• Successors — in connection with a merger, acquisition, or asset sale, subject to confidentiality.

We do not sell your personal data.

Your data may be processed outside your country of residence, including in the United States and the European Union. Where required, we rely on Standard Contractual Clauses or other appropriate safeguards.

• Account and contact data: kept while your account is active and deleted or anonymized within 90 days after account deletion, unless longer retention is required by law.
• Billing records: kept as required by tax and accounting laws (typically up to 10 years), held by Paddle and by us.
• Logs and security events: typically up to 12 months.
• Backups: rotated on a rolling basis.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten");
• Restrict or object to certain processing;
• Receive your data in a portable format;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with your local supervisory authority.

You can exercise most rights directly from your Profile (export, delete) or by emailing privacy@linkabl.app. We respond within one month.

We apply appropriate technical and organizational measures, including encryption in transit (TLS) and at rest, role-based access controls, row-level security on the database, audit logging, and least-privilege access for staff. No system is perfectly secure; please use a strong unique password and enable available account protections.

We use strictly necessary storage for authentication, session, and preferences (language, theme). We may use limited analytics to measure Service performance. Where required by law, we will request your consent before placing non-essential cookies.

The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this Policy from time to time. Material changes will be notified through the Service or by email.

Linkabl LLC — privacy@linkabl.app.