Privacy Policy

1. Who we are

LinkChimp (linkchimp.bio) is a link-in-bio service. This policy explains how we handle personal data when you use our website, create an account, publish a page, or visit a page made with LinkChimp.

For your account data, we are the controller. For the data your visitors send you through your page (for example a contact form), you are the controller and we process it on your behalf, only to provide the service to you.

2. What we collect from you (page owners)

• Account: your email address. If you sign in with Google, also your name and profile photo from Google.
• Sign-in sessions: the IP address and browser of each signed-in session, to keep your account secure.
• Your page: what you add to it: handle, name, bio, links, text, images, files, theme and settings, plus any tracking IDs you choose to add (Meta Pixel, Google Analytics).
• Billing: your plan, subscription status, renewal dates and the customer and subscription IDs from Dodo Payments. Dodo Payments collects your payment details, billing address and tax information directly; we never receive your full card number.
• Messages: what you send us when you email support.

3. What we collect from visitors to pages

When someone views a LinkChimp page or taps a link on it, we record a privacy-friendly event so the owner can see stats:

• the page, and which link or social icon was tapped;
• the country (from our host's network, not from GPS), device type and browser;
• the referring website, and any UTM campaign tags in the link;
• a visitor ID that is a one-way hash of the IP address and browser, mixed with a secret that changes every day. It lets us count unique visitors per day without storing the IP address or recognising anyone across days.

We don't set cookies on public pages and don't build profiles of visitors. Known bots and link previews are not counted.

Forms and sign-ups. If a visitor fills in a form or mailing-list block, what they type (for example name, email, phone and message) is saved for the page owner and emailed to them. The page owner decides what to do with it; contact them about their use of your data.

Owner-added tracking. If a page owner adds a Meta Pixel or Google Analytics ID, those scripts load on their page and may set cookies under Meta's or Google's policies. The page owner is responsible for that choice and for any consent it needs. Pages without them make no third-party tracking requests.

Embeds. Videos, music and booking widgets that an owner embeds (for example YouTube, Spotify or Calendly) are served by those providers under their own privacy policies.

4. How we use data, and why we're allowed to

• To provide the service (contract): sign you in, save and publish your page, show you stats, deliver form submissions, and send account emails such as sign-in links and trial reminders.
• To keep LinkChimp safe (legitimate interest): prevent spam and abuse, rate-limit requests, investigate reports, and fix errors. IP addresses are used briefly for rate limiting and appear in our host's request logs, which expire automatically.
• Billing and legal duties (legal obligation): keep records of payments and respond to lawful requests.
• Product updates (consent or legitimate interest): occasional emails about new features, which you can unsubscribe from at any time.

5. Who we share it with

We share personal data only with the service providers below, who process it on our instructions to run LinkChimp, and when the law requires it. Dodo Payments acts as the reseller of our subscriptions and handles your payment data under its own privacy policy.

6. Where data is stored

Our database and file storage are in the United States. If you live elsewhere, your data is transferred there. We rely on our providers' standard contractual clauses and security commitments to protect it.

7. How long we keep it

• Account and page data: for as long as your account exists. A paused page is kept so you can bring it back.
• Analytics events and form submissions: for as long as the page exists, so you can see your history and export it.
• When you delete your account in Settings, we delete your account, pages, blocks, analytics, form submissions and uploaded files. Copies in encrypted backups expire within about 30 days.
• Payment records are kept by Dodo Payments and us for as long as tax and accounting law requires.

8. Your rights

Wherever you live, you can ask us to access, correct, export or delete your personal data, or object to how we use it. You can also withdraw consent you gave and complain to your local data protection authority. Many of these you can do yourself: edit your page and account, download all your data as one file, export your audience as CSV, see and sign out your signed-in devices, and delete your account from Settings.

For anything else, email support@linkchimp.bio from your account's email address. We reply within 30 days. If you are a visitor who sent data to a page owner, we'll pass your request to them. California residents: we don't sell or share personal information for cross-context behavioural advertising, and you won't be treated differently for using your rights.

9. Cookies

We use only the cookies needed to keep you signed in to your dashboard. See our Cookie Policy for details.

10. Children

LinkChimp is not for children under 16, and we don't knowingly collect their data. If you think a child has given us personal data, email support@linkchimp.bio and we'll delete it.

11. Security

Data travels over HTTPS and is encrypted at rest by our providers. Sign-in uses one-time email links or Google, so there are no passwords to leak. Access to production data is limited to what we need to run and support the service. No system is perfectly secure; if a breach affects you, we'll tell you without undue delay.

12. Changes to this policy

When we change this policy we update the date at the top. If a change materially affects how we use your data, we'll email account holders before it takes effect.

13. Contact

Questions or requests about privacy: support@linkchimp.bio, or see our contact page.