Security Protocol 1.0

Privacy Policy

Last updated: March 12, 2026

The TL;DR (Too Long; Didn't Read)

We believe privacy is a feature, not a legal chore. Here is our promise:

  • No Surveillance: We do not use Google Analytics or Facebook Pixels.
  • Zero PII Retention: We hash IP addresses immediately and discard the raw data.
  • No Selling Data: We never have—and never will—sell your personal information.

1. Data We Collect

Summary: We only collect what we need to run the service and provide analytics to link owners.

When you use Linkintel, we collect certain information to provide our services:

Waitlist Registration

We collect your Email address when you sign up for the waitlist. This is used solely to communicate product updates and access codes.

Click Analytics

When someone clicks a link created through Linkintel, we capture:

  • Hashed IP Address: Raw IPs are immediately hashed via SHA-256 and discarded. We only store the hash to detect unique visitors without identifying them.
  • Geo Data: Derived from the IP (Country, region, city) via MaxMind. The IP is discarded after lookup.
  • Device Signals: Device type (desktop/mobile), browser version, and Operating System.
  • Source Data: Referrer URLs and UTM parameters (source, medium, campaign).
  • Timestamp: Microsecond precision (UTC) for click events.

2. Third-Party Processors

Summary: we use industry-standard infrastructure partners to host and secure your data.

We work with the following sub-processors to deliver Linkintel:

ConvexReal-time Database & Backend
Lemon SqueezyMerchant of Record & Payments
Vercel / NetlifyApplication Hosting
Resend / PostmarkTransactional Email Delivery
Hetzner / CaddyEdge Redirect Infrastructure
MaxMindIP-to-Geo Resolution

3. Global Compliance

Summary: We respect GDPR and CCPA rights globally, treating all users with the highest privacy standard.

GDPR (EU Users)

Our lawful basis for processing click data is Legitimate Interest—providing analytics to workspace owners. Linkintel acts as a Data Processor on behalf of our users (the Data Controllers).

CCPA (California Users)

Linkintel does not "sell" personal data. We use uniqueness detection tokens (hashes) that expire or are rotated, ensuring no persistent PII profile is built for site visitors.

Your Rights

You have the right to request access to, correction of, or deletion of your data. For waitlist removals or data inquiries, contact us at opendm.io/linkintel.

4. Data Security

Summary: We use encryption at rest and in transit, and your raw IP never hits our long-term logs.

We employ SSL/TLS encryption for all data in transit. Our infrastructure is designed to minimize the footprint of sensitive data. Click data is segmented by workspace and stored in encrypted volumes within Convex.