Linkella Privacy Policy

Linkella currently offers a waitlist. This notice also explains how we handle information when account, publishing, audience and payment features become available.

Who we are and what this covers

Linkella is operated by Ruchir Harbhajanka, an individual based in India. Our privacy and grievance contact is [email protected], addressed to Ruchir Harbhajanka. Public correspondence: Astra Towers, ANO 616, Action Area II C, Rajarhat, New Town, Kolkata - 700161, India.

This notice covers Linkella's waitlist, website, creator accounts, public profiles, forms, QR codes, short links and support. It explains practices rather than asking you to agree to every use of your information. Where consent is required, we ask separately.

We determine how to use information for our own account administration, billing coordination, security, support and waitlist purposes. For information visitors submit to a creator's form, the creator normally determines the purpose and is the responsible business or controller; Linkella processes it for that creator under the Data Processing Addendum. The creator's own notice explains their follow-up and use outside Linkella. A provider such as Paddle may separately control information it collects for its own purposes.

Information we handle

Waitlist. Your email is required; your name and phone are optional. We use the information to manage your request and contact you about Linkella access. Providing a phone number is not blanket permission for promotional calls, SMS or messaging-app marketing.

Accounts and authentication. We handle your username, email, display name, password hash where you use a password, verification status, preferences and account/session records. Depending on your use, account information may include a country, business tax identifier or region preference. If you choose Google sign-in, Google supplies the identity and basic profile information needed for that flow, including email and name. We do not request your Google password. Account preferences do not select a data-residency commitment.

Profiles and media. We store draft and published text, links, social links, themes, images, content settings, publication versions and preview links. Published content is available to visitors and may be indexed by search engines. Imported content is obtained from the source you specify. We resize uploaded gallery images and remove their original metadata. Other attachments may still contain metadata; check files before sharing them.

Visitor activity. We process page and interaction events, such as link/QR/short-link use, supported form/gate events and announcement interactions. Analytics uses an identifier that changes daily for each profile, derived from a visitor’s IP address and browser information. We also record interaction times, the page and content involved, device category, referring website and campaign information. Analytics records do not retain the original IP address or browser user agent, although security and service logs may contain them. These identifiers are pseudonymous, not necessarily anonymous. Visitor counts are estimates.

Forms and audience data. A creator can collect answers, contact details, consent choices and supported attachments. We store the submission, its relevant context and, where selected, the consent wording, version and time. Authorised people for that creator can view and export the information. Submitting an enquiry or email address alone does not opt you into marketing. Avoid sensitive information and children's information in forms. Attachments can contain personal information and are not guaranteed free of malware.

Purchases. Paddle collects checkout and payment information as reseller and merchant of record. Linkella receives the customer, subscription and transaction identifiers and the billing/status details needed to manage your access, receipts, refunds and disputes. Payment-related records may contain personal information received from Paddle. Linkella's integration does not receive your full card number or card security code. See Paddle's Privacy Notice.

Support, safety and technical records. We process messages you send, information needed to investigate abuse and payment issues, and security/diagnostic records. Server and infrastructure providers may receive IP addresses, request details, user agents and timestamps. We retain limited identifiers derived from email addresses to prevent repeated use of free trials. These identifiers are protected but are not necessarily anonymous. Please do not send secrets or identity documents unless we establish a necessary secure request process.

Browser storage and embeds. We use authentication and other browser storage described in the Cookie Notice. Embedded media and external links can send information to their providers. YouTube's privacy-enhanced embed mode still makes third-party requests.

Purposes and legal grounds

We use account, content and necessary billing information to provide the service you request and fulfil our agreement. Where EU/UK-style lawful bases apply, this is contractual necessity only for processing actually necessary for that agreement.

We use proportionate technical and security information to prevent fraud, protect accounts, address abuse, diagnose faults and maintain reliable service. Where applicable, we assess legitimate interests and the effect on individuals rather than treating all analytics or advertising as necessary. A legitimate-interest assessment does not remove a separate browser-storage consent requirement.

We process records needed to comply with applicable legal, accounting and disclosure duties. We use consent for optional marketing, consent-requiring technologies and other processing that requires consent. You can withdraw that consent without making earlier lawful processing unlawful. A creator must choose and explain their own legal ground for audience collection.

For waitlist access notifications, we use the information to respond to your request; unrelated promotional messages require separate permission where applicable. Indian processing will follow the law applicable to the purpose and date, including consent or other grounds where available. We do not automatically substitute a GDPR lawful basis for an Indian legal requirement.

We do not sell audience lists or make them available for unrelated marketing. These purposes do not authorise using private audience content to train a general-purpose AI model. We do not use the described profile analytics to make decisions with legal or similarly significant effects about visitors.

Who receives information

• The public, for the content you publish or make accessible through a shared preview.
• Creators and their authorised users, for audience submissions and reports concerning their pages. A creator may download data and use other providers under their own notice.
• Service providers, for hosting, delivery, storage, email, support and security under appropriate arrangements. The provider register explains provider roles and how to request more information.
• Paddle, for purchase administration, fraud handling and payment disputes, under its own applicable terms and privacy notice.
• Google and embedded/external services, when you use their sign-in or content. Their own notices apply to their separate processing.
• Authorities and parties to a dispute, where disclosure is legally required or necessary and proportionate to protect rights and safety. We review requests and avoid unnecessary disclosure.
• A successor operator, if the service is transferred, with appropriate safeguards and notice of material changes. A transfer is not permission for incompatible new uses.

International processing

The operator is in India and intends to serve customers internationally. Information may be accessed in India and processed in the locations used by our actual providers. We do not promise India-only, US-only or EU-only storage.

Contact [email protected] for current provider names, processing locations and applicable transfer safeguards. The provider register is not yet final for account and audience features.

Where a restricted transfer requires safeguards, we will identify the applicable mechanism and explain how to request information about it, subject to necessary redactions. Browser location and an account region preference do not select a data-residency commitment.

Retention and deletion

We keep personal information only as needed for its purpose and applicable obligations. The following retention periods apply to the relevant features:

Deletion does not automatically cancel Paddle billing. Cancel the subscription first or ask us and Paddle for help. A cancellation alone is not an instruction to erase the account. Third-party caches or a creator's exported copy are outside direct Linkella deletion control, although applicable requests and assistance duties still apply.

We have not yet set fixed retention periods for waitlist records, support messages, consent and marketing preferences, reports, service logs, payment-related records and backups. Contact [email protected] for the retention information relevant to your request.

We may retain limited payment, dispute and fraud-prevention records after account deletion where needed for those purposes or a legal duty. We restrict their use and retain them only while that reason applies. Retained identifiers are not necessarily anonymous.

Your choices and rights

You can edit supported account/profile information, manage available email preferences and request an account export. Export archives may include audience information and media; protect download links and exported files.

Depending on applicable law, you may request access, correction, deletion, restriction, portability, objection to certain processing, withdrawal of consent and other available rights. Indian nomination and grievance rights will be supported when applicable. Contact [email protected] with the subject “Privacy request”. We will verify identity proportionately, explain necessary exceptions and respond within the applicable legal deadline, including notice of a permitted extension where required. We do not charge a routine request fee unless applicable law permits one.

For data submitted to a creator, contact that creator first if possible. You can still contact us; we will identify the responsible recipient and assist as appropriate without exposing someone else's private records. We cannot recall an independent export from a creator, but that creator's legal obligations continue.

You may complain to Ruchir Harbhajanka through [email protected] and to a competent privacy or consumer authority where available. You do not waive that right by using our internal process. We will provide the appropriate escalation information for the law and jurisdiction involved.

Security and age limits

We use proportionate access controls, account security, protected transport and other safeguards appropriate to the information and service. No service is perfectly secure. We will respond to incidents and make legally required notifications.

Creator accounts are for people aged 18 or over. Public pages may be visible to a general audience; that is not an invitation to collect children's personal information. Contact us if you believe a child has supplied information contrary to these rules. We will investigate and take the action required by the applicable law.

Changes and contact

We will update the date and give appropriate notice of material changes before a new use begins. If a new purpose requires consent, a notice update or continued use alone will not supply it.

Privacy, support and grievance contact: Ruchir Harbhajanka — [email protected]. Postal contact: Astra Towers, ANO 616, Action Area II C, Rajarhat, New Town, Kolkata - 700161, India.