Privacy Policy

LinkPilot ("we", "us", "our") provides a link-in-bio platform for creators. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have over it. By using LinkPilot you agree to the practices described here.

• Account data — email, password (hashed), and optionally name and avatar.
• Profile content — username, bio, links, themes, and uploads you choose to publish.
• Analytics data — clicks, page views, referrer, country (from IP), device type, and browser. We do not store full IP addresses long-term.
• Billing data — handled by our payment processor (Stripe or Paddle). We never see or store full card numbers.
• Cookies — strictly necessary cookies for authentication and session management.

• To operate, secure, and improve the service.
• To show you analytics about your public profile.
• To process payments and manage subscriptions.
• To send transactional emails (account, billing, security notices).
• To comply with legal obligations.

We do not sell your personal data. We do not use your data to train AI models.

We share data only with vetted processors that help us run the service:

• Supabase — database, authentication, and storage.
• Stripe / Paddle — payment processing.
• Google — when you choose Sign in with Google.
• Cloudflare — hosting, CDN, and DDoS protection.

We retain account data for as long as your account is active. Analytics data is retained per your plan (7 days on Free, full history on paid plans). If you delete your account, we permanently erase your data within 30 days, except where law requires us to keep it longer.

Depending on where you live (GDPR, CCPA, UK GDPR), you have the right to:

• Access the personal data we hold about you.
• Correct or update it.
• Delete it ("right to be forgotten").
• Export it in a portable format.
• Object to or restrict certain processing.

To exercise any of these rights, email privacy@linkpilot.com.

We use TLS in transit, encryption at rest, row-level security on the database, and least-privilege access controls. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.

LinkPilot is not directed at children under 13 (or 16 in the EU). We do not knowingly collect data from them.

Your data may be processed in countries other than your own, including the United States and the EU. We rely on standard contractual clauses where required.

We will notify you of material changes by email or via an in-app notice at least 14 days before they take effect.

Questions? Email privacy@linkpilot.com.