Privacy Policy

This Privacy Policy explains what personal data [COMPANY LEGAL NAME] ("LinkJunky", "we", "us") collects when you use linkjunky.com, its apps and its API (the "Service"), why, and the choices and rights you have. We are the controller of this data. Contact: [PRIVACY CONTACT EMAIL], [REGISTERED ADDRESS]. [If appointed: Data Protection Officer: [DPO CONTACT]. EU representative: [EU REPRESENTATIVE]. UK representative: [UK REPRESENTATIVE].]

1. Data we collect

You give us

• Account details: name, username, email address, password (stored only as a secure hash), and confirmation that you are 18 or older.
• Optional profile details: country, region, city, postcode, phone number.
• Your content: links, notes, code, collections, tags, descriptions, and who you share them with.
• Messages you send us, reports you file, and your choices in settings.

Created when you use the Service

• Activity: items you view, save, like or follow; searches; the days you are active.
• Technical data: IP address, browser and device type, approximate location derived from your IP, and logs of requests and errors.
• Access tokens you create for AI assistants and other apps (we store only a secure hash), and when they were last used.

From other sources

• When you save a link, we fetch public information about that page (title, description, preview image, author, publish date) to build a preview card. We also check pages and websites against public lists and labels to mark adult content.

We do not knowingly collect data from anyone under 18.

2. Why we use it, and our legal bases

Where we rely on consent, you can withdraw it at any time. We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We do not use your content to train AI models.

3. Who we share data with

• Other users, according to your settings: public content is visible to everyone; shared content to the people you choose.
• Service providers who process data for us under contract and only on our instructions: hosting and infrastructure ([HOSTING PROVIDER]), email delivery ([EMAIL PROVIDER]), error monitoring ([ERROR MONITORING PROVIDER]).
• Apps you connect, such as AI assistants using an access token you created, receive the data those apps request with the access you granted.
• Authorities and others when the law requires it, to protect people from harm, or to enforce our terms. We report child sexual abuse material to the relevant authorities, as the law requires.
• A buyer or successor if we are involved in a merger, acquisition or sale of assets, with notice to you.

4. International transfers

We and our providers may process data in countries other than yours, including [PRIMARY HOSTING COUNTRY]. When we transfer personal data from the EEA, the UK, Switzerland or other countries with transfer rules, we use safeguards recognised by those laws, such as the European Commission's Standard Contractual Clauses and the UK Addendum, or rely on adequacy decisions.

5. How long we keep data

• Account data and content: while your account is open. When you delete an item it goes to Trash; when you delete your account, we delete or anonymise your data within [30] days, except where we must keep it longer.
• Security logs: up to [90] days. Rate-limit and abuse records: up to [12] months.
• Records of your acceptance of our policies: for the life of your account and up to [6] years after, as proof of consent.
• Data we must keep by law, or to establish or defend legal claims: as long as that requires.

6. Your rights

Depending on where you live, you may have the right to:

• access your personal data and get a copy;
• correct inaccurate data;
• delete your data;
• port your data to another service;
• object to or restrict certain processing, including processing based on legitimate interests;
• withdraw consent where we rely on it;
• not be subject to decisions based solely on automated processing that have legal or similarly significant effects (we make none);
• opt out of the sale or sharing of personal data (we do neither) and limit the use of sensitive data (we collect none for that purpose);
• not be discriminated against for exercising your rights.

These rights come from laws including the EU and UK GDPR, the California Consumer Privacy Act (as amended by the CPRA) and other US state privacy laws, Brazil's LGPD, Canada's PIPEDA, India's Digital Personal Data Protection Act 2023, Japan's APPI, South Africa's POPIA, Australia's Privacy Act and similar laws. To use them, use the controls in Settings or email [PRIVACY CONTACT EMAIL]. We will respond within the time the law requires (usually one month), and may need to verify your identity. You may use an authorised agent where the law allows. If you are unhappy with our answer, you can complain to your local data protection authority.

7. Cookies and similar technologies

We use only what the Service needs to work: a cookie that keeps you signed in, cookies that remember unlocked password-protected items, and settings stored in your browser (such as theme and layout). We do not use advertising or cross-site tracking cookies. [If analytics or other non-essential cookies are added, describe them here and ask for consent where required.]

8. Security

We protect your data with measures such as encryption in transit, hashed passwords and access tokens, access controls, rate limiting and monitoring. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.

9. Children

LinkJunky is for adults aged 18 and over. If you believe someone under 18 has an account, contact [PRIVACY CONTACT EMAIL] and we will delete it.

10. Changes

We will update this policy as the Service changes. When a change is material we will tell you in advance and, where required, ask for your consent again. The version and date at the top of this page show which policy applies.