Privacy Policy

1. Information We Collect

Information you provide:

• Account information (email, name, password)
• Profile data (platforms, follower counts, niche, experience level)
• Brand and deal data you enter (contacts, amounts, notes)
• Emails sent and received through the Service
• Portfolio content (collaborations, stats, media)
• Payment information (processed by Stripe; we do not store card numbers)

Information collected automatically:

• Usage data (features used, pages viewed, actions taken)
• Device information (browser type, operating system)
• IP address and approximate location (country/region level)

2. How We Use Your Information

• To provide and improve the Service
• To generate AI-powered pitch suggestions and rate recommendations
• To send follow-up reminders and notifications
• To contribute to anonymized, aggregated rate intelligence (with your consent)
• To process payments and manage subscriptions
• To communicate service updates and respond to support requests

3. Crowdsourced Data & Anonymization

When you opt into crowdsourced features, deal outcomes (rates, brand response patterns) are anonymized and aggregated. This data cannot be traced back to individual users. It is used to power rate intelligence and brand behavior profiles for all users. You can opt out at any time in your account settings without losing access to the Service.

4. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe — for payment processing
• AWS — for infrastructure (hosting, database, AI processing)
• Email providers — to send and receive emails on your behalf

All third-party providers are bound by data processing agreements.

5. Data Security

We protect your data with:

• Encryption in transit (TLS) and at rest
• Authenticated API access (JWT tokens)
• Minimal-permission infrastructure (IAM roles)
• No plaintext storage of sensitive credentials

6. Data Retention

We retain your account data for as long as your account is active. Upon account deletion:

• Personal data is deleted within 30 days
• Emails and brand data are permanently removed
• Previously contributed anonymized/aggregated data is retained (non-identifiable)
• Backups containing your data expire within 90 days

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Export your data in a portable format (CSV)
• Opt out of crowdsourced data contribution
• Object to processing based on legitimate interest

To exercise these rights, email support@linkedandinked.com.

8. Cookies

The Service uses essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us with data, contact us for deletion.

10. International Transfers

Your data is stored and processed in the United States (AWS us-east-1). If you are located outside the US, your data is transferred to the US for processing. We rely on standard contractual clauses and AWS's compliance certifications for lawful transfer.

11. Changes to This Policy

We will notify you of material changes via email at least 30 days before they take effect. Minor clarifications may be posted without notice.

12. Contact

Data protection inquiries: support@linkedandinked.com