Privacy Policy

Last Updated: October 1, 2025 Effective Date: October 1, 2025

1. Introduction

Welcome to Linksh ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy rights. This Privacy Policy explains how CHAGIL OÜ collects, uses, shares, and protects your personal information when you use our mobile application and website (collectively, the "Service").

Data Controller: CHAGIL OÜ Registration Code: 16360108 Address: Ida-Viru maakond, Narva linn, Linda tn 2, 20309, Estonia Email: info@linksh.app

This Privacy Policy is designed to comply with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide Directly

When you use Linksh, you may provide us with:

Account Information: Email address, name, password (encrypted)
Business Information: Bank details, VAT numbers, addresses, contact information, and any other business data you choose to store in the app
Profile Information: Display preferences, language settings
Templates: Custom templates you create containing business information

2.2 Information Collected Automatically

Usage Data: How you interact with the Service, features used, sharing frequency, templates accessed
Device Information: Device type, operating system, unique device identifiers, mobile network information
Log Data: IP address, browser type, access times, pages viewed, app crashes
Location Data: General location based on IP address (not precise location)
Cookies and Tracking Technologies: We use cookies and similar technologies (see Section 5)

2.3 Information from Third Parties

Authentication Providers: If you sign up using Google, Apple, or other third-party services, we receive basic profile information (name, email)
Payment Processors: Transaction information for premium subscriptions (we do not store full credit card details)

3. How We Use Your Information

We use your personal data for the following purposes:

3.1 Service Provision (Legal Basis: Contract Performance)

Create and manage your account
Store and organize your business information
Enable template creation and sharing functionality
Provide customer support
Process payments for premium features

3.2 Service Improvement (Legal Basis: Legitimate Interest)

Analyze usage patterns to improve features
Develop new features and services
Conduct research and analytics
Fix bugs and optimize performance

3.3 Communication (Legal Basis: Legitimate Interest / Consent)

Send service-related notifications
Respond to your inquiries
Send marketing communications (only with your consent)
Notify you of updates, security alerts, and policy changes

3.4 Security and Fraud Prevention (Legal Basis: Legitimate Interest)

Detect and prevent fraud, abuse, and security incidents
Verify user identity
Comply with legal obligations

3.5 Marketing and Business Development (Legal Basis: Consent / Legitimate Interest)

Show targeted advertisements
Analyze market trends
Explore business partnerships and opportunities
Share anonymized, aggregated data with third parties for business purposes

3.6 Legal Compliance (Legal Basis: Legal Obligation)

Comply with applicable laws and regulations
Respond to legal requests and prevent harm
Enforce our Terms of Service

4. Data Sharing and Disclosure

We may share your personal data with:

4.1 Service Providers

Google Firebase: Data storage and authentication (USA)
Google Analytics: Usage analytics (USA)
SendGrid: Email delivery services (USA)
Stripe/RevenueCat: Payment processing (USA)
OneSignal: Push notifications (USA)
Google Ads/AdMob: Advertising services (USA)

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.2 Advertising and Analytics Partners

Google Ads, Facebook Pixel, and other advertising platforms
These partners may collect data through cookies and tracking technologies

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your data may be transferred to the successor entity.

4.4 Legal Requirements

We may disclose your data if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

4.5 Anonymized Data

We may share aggregated, anonymized data that cannot identify you personally with partners, researchers, or for business opportunities.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Maintain your session and preferences
Analyze how you use our Service
Deliver targeted advertisements
Improve user experience

Types of Cookies We Use:

Essential Cookies: Required for basic functionality
Analytics Cookies: Google Analytics and custom tracking
Advertising Cookies: Google Ads, Facebook Pixel, and other ad platforms
Preference Cookies: Remember your settings and preferences

Your Cookie Choices: You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features. You can opt out of targeted advertising through:

Google Ads Settings: https://adssettings.google.com
Your device's advertising settings (iOS/Android)

6. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. These countries may have different data protection laws than your country.

Safeguards: We ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs): EU-approved data transfer agreements with service providers
Adequacy Decisions: Transfers to countries deemed adequate by the EU Commission
Service Provider Certifications: Providers complying with recognized privacy frameworks

By using our Service, you consent to these international transfers.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

Active Accounts: Data retained while your account is active
Deleted Accounts: Upon account deletion, personal identifiers (name, email) are immediately removed or anonymized. Usage data is retained in anonymized form (e.g., "user_23443") for analytics and business purposes.
Legal Requirements: Some data may be retained longer if required by law (e.g., financial records for tax purposes)
Backups: Deleted data may remain in backup systems for up to 90 days before permanent deletion

8. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

8.1 Right of Access

You can request a copy of the personal data we hold about you.

8.2 Right to Rectification

You can correct inaccurate or incomplete personal data.

8.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data when:

It's no longer necessary for the purposes collected
You withdraw consent
You object to processing
It was unlawfully processed

8.4 Right to Restriction of Processing

You can request we limit how we use your data in certain circumstances.

8.5 Right to Data Portability

You can receive your data in a structured, commonly used format and transmit it to another service.

8.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

8.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

8.8 Right to Lodge a Complaint

You can file a complaint with your local data protection authority:

Estonian Data Protection Inspectorate: https://www.aki.ee/en

How to Exercise Your Rights: Contact us at info@linksh.app with your request. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

Encryption: Data encrypted at rest and in transit (SSL/TLS)
Access Controls: Limited access to personal data on a need-to-know basis
Authentication: Secure password storage with encryption
Regular Security Audits: Ongoing monitoring for vulnerabilities
Secure Infrastructure: Firebase and Google Cloud security standards

However, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

10. Children's Privacy

Linksh is intended for users who are at least 16 years old (or the minimum age required in their country). We do not knowingly collect data from children under this age.

If you are under 16, please do not use our Service or provide any personal data. If we discover we have collected data from a child under 16, we will delete it promptly.

If you believe a child has provided us with personal data, contact us at info@linksh.app.

11. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be effective when posted on this page with an updated "Last Updated" date.

Material changes will be communicated via:

Email notification
In-app notification
Prominent notice on our website

Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions, concerns, or to exercise your privacy rights, contact us:

Email: info@linksh.app Mail: CHAGIL OÜ, Ida-Viru maakond, Narva linn, Linda tn 2, 20309, Estonia

Data Protection Authority: Estonian Data Protection Inspectorate Website: https://www.aki.ee/en Email: info@aki.ee

14. Additional Information for California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). Please contact us for more information.

15. Legal Basis Summary

| Purpose | Legal Basis | |---------|-------------| | Account creation and service delivery | Contract Performance | | Service improvement and analytics | Legitimate Interest | | Marketing communications | Consent | | Security and fraud prevention | Legitimate Interest | | Legal compliance | Legal Obligation | | Data transfers for business opportunities | Legitimate Interest / Consent |

By using Linksh, you acknowledge that you have read and understood this Privacy Policy.