Privacy Policy

1. Introduction

LinksToBook ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at linkstobook.com.

By using LinksToBook, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Business Account Information

When you sign up for LinksToBook, we collect:

• Business name and description
• Contact information (email address)
• WhatsApp phone number (E.164 format)
• Business location (city, address)
• Service offerings and pricing
• Business logo and gallery images (optional)
• Custom link slug (e.g., linkstobook.com/yourname)

2.2 Analytics and Tracking Data

We collect aggregated, non-personal analytics data about visitors to your LinksToBook page:

• Page views: Count of visits to your booking page
• WhatsApp clicks: Count of WhatsApp button taps
• UTM parameters: Marketing campaign tracking codes (source, medium, campaign, term, content)
• Referrer information: Which website or platform referred the visitor
• Timestamps: Date and time of visits
• Variant tracking: Which A/B test variant was shown (if applicable)

Important: We do NOT collect personal information about your visitors (no names, phone numbers, email addresses, or device identifiers). We only log counts and aggregate statistics.

IP Addresses: We do not store or use IP addresses for analytics. Our hosting providers (Vercel) may briefly process IP addresses in server logs for security and operational purposes only. These logs are transient and not used for tracking.

2.3 Form Submission Data (Growth+ Plans Only)

If you enable the optional fallback contact form (available on Growth and Premium plans), we collect and process submissions containing:

• Customer name, phone number, and email address
• Selected service and message content
• Source and referrer information

This data is sent directly to your designated Google Sheet and/or email address. You control the Sheet and can delete entries there at any time. On our side, retention is transient (temporary processing only, typically cleared within 24 hours). We do not store form submission contents on our servers beyond this brief processing period.

2.4 Payment Information

Payment processing is handled securely by Paddle, our payment processor. We do not store your credit card information or full payment details on our servers. Paddle collects:

• Billing name and address
• Payment method details
• VAT/GST tax identification (if applicable)

We receive only subscription status updates and metadata (subscription ID, plan type, payment success/failure events) from Paddle. For Paddle's privacy practices, visit paddle.com/legal/privacy.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To create and host your custom booking page with WhatsApp integration (legal basis: performance of a contract)
• Analytics & Reporting: To provide you with page view, click tracking, and performance insights (monthly reports for Growth+, weekly insights for Premium) (legal basis: performance of a contract, legitimate interests)
• AI Copy Generation: To generate professional headlines, CTAs, and service descriptions during setup (legal basis: performance of a contract)
• Communication: To send service-related emails (activation, billing reminders, performance alerts, A/B test winner notifications) (legal basis: performance of a contract, legitimate interests)
• Billing: To process subscription payments and manage your account lifecycle (active, grace period, degraded, canceled states) (legal basis: performance of a contract, legal obligation)
• Customer Support: To respond to your inquiries and provide technical assistance (legal basis: performance of a contract, legitimate interests)
• Improvement: To improve our service, detect issues, and optimize performance (legal basis: legitimate interests)

Legal Bases (EEA/UK): We process your data based on (1) performance of a contract (to provide the LinksToBook service you subscribed to), (2) legitimate interests (improving our service, security, and analytics), and (3) legal obligation (tax, accounting, and compliance requirements).

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

• Service Providers (Subprocessors): We use third-party services to operate our platform. Current providers include:
  • Paddle (Paddle.com Market Limited, UK/US): Payment processing and subscription management. Paddle acts as the Seller of Record and data controller for billing transactions.
  • Vercel Inc. (US): Hosting, CDN, and infrastructure provider
  • Email Service: Gmail SMTP (Google), Resend, Postmark, or custom SMTP for transactional emails
  • AI Providers: Groq (US) or Anthropic Claude (US) for copy generation (only business details, no personal customer data)
  • Supabase (Supabase Inc., US): Database storage for form submissions (Growth+ only) and event tracking
• Legal Requirements: If required by law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred (you will be notified)
• With Your Consent: We may share information with your explicit permission

5. Data Security

We implement industry-standard security measures to protect your information:

• HTTPS/TLS encryption for all data transmission
• Secure server infrastructure with regular security updates
• Webhook signature verification for payment events
• Access controls and authentication for admin functions
• Regular backups of client data

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our services:

• Active Accounts: All data retained while your subscription is active
• Canceled Accounts: Account data retained for 90 days after cancellation (for reactivation purposes), then permanently deleted
• Event Logs: Tracking data retained for 12 months, then archived or deleted
• Financial Records: Payment records retained for 7 years for tax and legal compliance
• Backups: System backups may retain data slightly longer than the periods above before being automatically purged (typically 30-90 days)

7. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Portability: Request export of your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing emails (transactional emails required for service operation)
• Restriction: Request limitation of processing in certain circumstances

To exercise these rights, contact us at info@linkstobook.com. We will respond within 30 days, extendable by 60 days for complex requests (we'll notify you if additional time is needed).

8. Cookies and Tracking Technologies

LinksToBook uses minimal tracking:

• No Third-Party Cookies: We do not use advertising or tracking cookies from external services
• Analytics: We use Vercel Analytics (cookie-less analytics, privacy-focused, no personal data collection)
• Local Storage: We may store non-sensitive preferences in your browser (e.g., theme settings)

9. Children's Privacy

LinksToBook is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request deletion.

10. International Data Transfers

LinksToBook is operated from servers located globally (via Vercel's CDN). If you are located outside the United States or European Union, your information may be transferred to, stored, and processed in these regions.

We rely on Standard Contractual Clauses (SCCs) approved by the European Commission when transferring data to service providers in the United States and other jurisdictions that may not have equivalent data protection laws.

By using our service, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Significant changes will be communicated via email.

Your continued use of LinksToBook after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: info@linkstobook.com
• Website: linkstobook.com/contact