Privacy Policy - Linksii

1. Introduction

Linksii ("we", "our", or "us") operates the linksii.com website and the Linksii AI brand monitoring platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and, if you sign in with Google, your name and profile picture. We also store your workspace name, brand domain, and tracking preferences.

Usage Data

We collect information about how you interact with our platform, including pages visited, features used, and tracking prompts configured. This helps us improve the service.

Behavioural Analytics

We use two complementary analytics tools to understand how visitors and users interact with our website and product:

Self-hosted Umami — privacy-first, cookie-less analytics that record anonymous page views, referrers, and custom events such as which call-to-action was clicked. Umami does not identify you personally and runs on infrastructure we control within the European Union.
Umami session replay (self-hosted) — records anonymised session replays and generates heatmaps to help us diagnose usability and conversion friction. It runs on the same infrastructure we control within the European Union and is not shared with any third party. Session replay is only enabled after you accept it via our cookie banner. Sensitive input fields (passwords, payment details, and all other form inputs) are masked by default and never recorded.

AI Tracking Data

When you run brand tracking scans, we query third-party AI platforms (ChatGPT, Claude, Gemini, Perplexity) on your behalf and store the results, including mention data, visibility scores, sentiment analysis, and source citations. This data is associated with your workspace.

3. How We Use Your Information

To provide, operate, and maintain the Linksii platform
To process your brand tracking queries across AI platforms
To generate analytics, reports, and insights for your workspace
To send transactional emails (account verification, password resets)
To send product updates and onboarding communications (you can opt out)
To process payments through our payment provider (Stripe)
To respond to support requests
To detect and prevent fraud or abuse

4. Data Sharing

We do not sell your personal information. We share data only with the following categories of third parties, solely to provide our service:

AI Platform Providers (OpenAI, Anthropic, Google, Perplexity) — we send your configured tracking prompts to these platforms. No personal data is included in these queries.
Payment Processor (Stripe) — to process subscription payments. We do not store your card details.
Behavioural Analytics — our self-hosted Umami instance processes anonymised page views, custom events, and (with consent) session replays and heatmaps. Sensitive form fields are masked. It runs on infrastructure we control within the EU and does not share data with any third party.
Infrastructure Providers — we use self-hosted infrastructure for our database and email services. Your data is stored on servers we control.

5. Data Storage and Security

Your data is stored on self-hosted infrastructure within the European Union. We use encryption in transit (TLS/SSL) and implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, or destruction.

6. Data Retention

We retain your account data for as long as your account is active. Tracking results are retained for the lifetime of your account to provide historical analytics and trend data. If you delete your account, we will remove your personal data within 30 days. Anonymised, aggregated data may be retained for analytical purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access — request a copy of the personal data we hold about you
Rectification — request correction of inaccurate data
Erasure — request deletion of your personal data
Portability — request your data in a machine-readable format
Objection — object to processing of your data for certain purposes

To exercise any of these rights, contact us at [email protected].

8. Cookies and Similar Technologies

We use essential cookies required for authentication and session management. We do not use third-party advertising cookies or cross-site marketing tracking.

Our self-hosted Umami analytics is cookie-less by design and does not track you across other websites.

Our self-hosted Umami session replay, used for session replays and heatmaps, uses local storage to identify a session for the duration of the recording. This is not used to track you across other websites or for advertising. Session replay does not run until you explicitly accept it via the cookie banner shown on your first visit. You can revoke that consent at any time using the control below, or by emailing [email protected] and we will exclude your visits.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy, please contact us at [email protected].