Privacy Policy

Account information

• Email address (for account management and service notifications)
• Password (encrypted and salted; we never store plaintext passwords)
• Full name
• Payment information (processed by third-party payment providers — we do not store full card numbers)

Usage data

• API request logs (endpoint, timestamp, response codes)
• Usage metrics (for billing, rate limiting, and analytics)
• IP addresses (for security, abuse prevention, and rate limiting)
• Browser and device information (for analytics and fraud prevention)

Cookies & tracking

• Essential cookies (authentication, session, theme preferences)
• Analytics cookies (Google Analytics, with your consent)
• Performance monitoring (Ahrefs analytics)

• Provide, operate, and maintain our API service
• Process billing and payments via supported providers
• Send service updates, security alerts, and technical notifications
• Improve our service through aggregated analytics
• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations and respond to lawful requests
• Provide customer support

• Data retrieved via the API is not stored permanently — we cache responses for a maximum of 1 hour for performance only
• Personal data of your end users obtained through your application
• Full credit-card numbers (handled exclusively by our payment processors)
• Sensitive special-category data (health, biometric, etc.) — not collected and not supported by the API

We share data only with sub-processors that support our service:

• NowPayments: Cryptocurrency payment gateway
• Cloudflare: Security, DDoS protection, and CDN
• Google Analytics: Website analytics, with your consent
• PostHog: Product analytics, with your consent
• Brevo: Transactional email delivery

We do not

• Sell your personal information to third parties
• Share your information with advertisers
• Use your information for cross-context behavioral advertising
• Use your data for marketing purposes without your consent

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Hashed and salted password storage
• Regular security reviews and continuous monitoring
• Access controls, least-privilege provisioning, and audit logging
• Automated, encrypted backups

• Account data: retained while your account is active and for a reasonable period after closure
• Usage logs: retained for 90 days
• Billing records: retained for up to 7 years to satisfy tax and accounting obligations
• Cached API responses: maximum 1 hour

Subject to applicable law, you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: correct inaccurate or incomplete personal data
• Deletion: request deletion of your account and associated personal data
• Portability: export your account data in a machine-readable format
• Opt-out: unsubscribe from marketing communications at any time
• Restrict processing: limit how we use your personal data
• Object: object to processing based on legitimate interests
• Lodge a complaint: with your local data protection authority

To exercise these rights, email [email protected]. We will respond within the timelines required by applicable law (typically 30 days under GDPR).

Essential cookies (always active)

• Authentication tokens
• Session management
• Security and CSRF preferences
• Theme and language preferences

Analytics cookies (optional)

• Google Analytics (_ga, _gid)
• Ahrefs analytics
• PostHog product analytics

You can manage cookie preferences at any time through our cookie consent banner.

Your information may be processed in countries outside your residence, including the United States and the European Economic Area. Where personal data is transferred outside its country of origin, we ensure appropriate safeguards through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequate data-protection agreements with sub-processors
• Compliance with GDPR Article 46 transfer mechanisms

Our service is intended for business users and is not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact [email protected] and we will promptly delete it.

If LinkdAPI is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify registered users by email of any change in ownership or use of your personal data, and any continuing use will remain subject to a privacy policy at least as protective as this one.

We may update this policy periodically. Material changes will be communicated via:

• Email notification to registered users
• Prominent notice on our website
• Updated "Last Updated" date at the top of this page