Privacy Policy

1. Introduction

Welcome to LinkPay. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services. We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. LinkPay operates as a platform provider that integrates with Stripe for payment processing. We collect and store only minimal personal data necessary for platform functionality.

2. Data Controller Information

3. Data We Collect and Store

LinkPay collects and stores ONLY the following minimal information:

• Email address - Used for account authentication, login, and essential service communications
• Stripe Account ID - A reference identifier that links your LinkPay account to your Stripe account
• Payment link settings - Names, custom URLs, usage limits, expiration dates, and other configuration data for your payment links
• Platform usage data - Information about how you use the Service, such as login times and feature usage
• Device and browser information - Basic technical information for security and service improvement

5. Stripe as Payment Processor

LinkPay uses Stripe Connect to process all payments:

• Stripe is an independent data processor and controller for all payment-related data
• When you connect your Stripe account, you enter into a direct agreement with Stripe
• Stripe collects and stores all payment information, including card details, customer data, and transaction records
• Stripe's Privacy Policy governs how they handle your payment data
• LinkPay only stores your Stripe Account ID as a reference to enable platform functionality
• Payment processing, security, and compliance are handled entirely by Stripe

To learn more about how Stripe handles your data, please review Stripe's Privacy Policy at https://stripe.com/privacy.

6. How We Use Your Information

We use the limited information we collect solely for the following purposes:

• To provide and maintain the Service
• To authenticate your account and enable login
• To connect your account with Stripe for payment processing
• To enable you to create and manage payment links
• To send you essential service-related communications
• To provide customer support
• To improve and optimize the Service
• To detect and prevent fraud and security threats
• To comply with legal obligations

7. Data Protection Principles (GDPR Compliance)

We process your personal data in accordance with GDPR principles:

8. Data Processing and Storage Location

Your personal data is processed and stored within the European Union, primarily in data centers located in the EU. We use secure cloud infrastructure providers that comply with GDPR and industry security standards. All data is encrypted in transit and at rest.

9. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of Access - You can request copies of your personal data
• Right to Rectification - You can request correction of inaccurate or incomplete data
• Right to Erasure - You can request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing - You can request that we limit how we use your data
• Right to Data Portability - You can request transfer of your data to another service
• Right to Object - You can object to certain types of processing
• Right to Withdraw Consent - You can withdraw consent at any time

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month as required by GDPR.

10. Data Security Measures

We implement appropriate technical and organizational security measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Secure cloud infrastructure with redundancy and backups
• Employee training on data protection and security
• Incident response procedures

11. Data Retention Periods

We retain your personal data only as long as necessary for the purposes outlined in this Privacy Policy. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or regulatory purposes. Payment link data may be retained for accounting and tax compliance purposes as required by law.

12. Third-Party Service Providers

We use the following third-party service providers:

• Stripe - Payment processing (see section 5)
• Cloud hosting providers - For secure data storage and platform infrastructure
• Email service providers - For sending essential service communications
• Analytics services - For understanding platform usage and improving the Service

13. International Data Transfers

We primarily process and store data within the European Union. If data is transferred outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or reliance on adequacy decisions.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: