Privacy Policy

LinkPalo (“we”, “us”) is a link-in-bio service at linkpalo.com. This policy explains what we collect, why we collect it, and what you can do about it. It is written to describe what the product actually does rather than to cover every theoretical possibility.

Who this covers

Two different people show up in this policy: creators, who sign up and build a page, and visitors, who open a creator’s page. We collect very different things about each.

What we collect from creators

• Your account. Your email address and name. If you sign up with a password we store a cryptographic hash of it, never the password itself. If you sign in with Google we receive your email address and name from Google and store those — we never see your Google password.
• What you put on your page. Your links, text, images, products and media kit. Images you upload are resized in your browser and stored with your page. Anything you put here is intended to be public, because your page is public.
• Billing details, if you subscribe. Stripe processes the payment and gives us a customer and subscription identifier. Your card number never reaches our servers.

What we collect from visitors

When someone opens a creator’s page we record a page view, and a click if they tap a link. Each record holds the time, whether it was a visit or a click, which link was tapped, the referring site (e.g. “Instagram”), a device category (mobile, desktop or tablet) and a two-letter country code.

We do not store IP addresses. We do not set tracking cookies, use advertising pixels, or follow visitors across other websites — which is why creator pages carry no cookie banner. The country code comes from our hosting provider’s edge network at the moment of the request and is not linked to an individual.

Cookies

We use cookies for exactly two things, both strictly necessary:

• Signing in. A cookie that keeps you logged in to your dashboard. It expires, and clearing it signs you out.
• Password-protected pages. If a creator locks their page, a cookie remembers that you entered the password correctly. It holds a verification code, not the password.

Who else sees your data

We do not sell your data or share it for advertising. We use these providers to run the service, and they only receive what they need:

• Vercel — hosting and delivery.
• Neon — the database your account and page live in.
• Stripe — payments, if you subscribe.
• Google — only if you choose to sign in with Google.
• Anthropic — if you use the AI page builder, the description you type is sent to generate your bio and theme. Don’t put anything confidential in that box.

We may also disclose data where the law requires it, or to protect the service against abuse.

How long we keep it

Your account and page stay until you delete them. Deleting your account from Settings removes your account, page, links, uploaded images, enquiries and analytics, and releases your page name for someone else to use. That is immediate and cannot be undone. Backups may retain copies for a short period afterwards.

Your rights

You can see and edit everything on your page from your dashboard, export your analytics as a CSV, and delete your account at any time. If you want a copy of your data or want it erased and can’t do it yourself, email us and we will handle it.

Children

LinkPalo is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, tell us and we will remove it.

Changes

If this policy changes we will update the date at the top. Material changes will be announced in the dashboard rather than made quietly.