1. Scope and controller information
This Policy explains how the operator of LinkNest processes personal data when you create an account, build or visit a page, use LinkNest AI, submit a form or request, contact support, or interact with administration and security features. Any verified legal business details configured by the operator appear below; blank fields are intentionally not invented.
Legal business name:
Business address:
2. Data we collect
- Account data: username, email, password hash, plan, subscription status, account and login timestamps. LinkNest does not store your plain-text password.
- Page and content data: page title, slug, profile, text, links, social accounts, images, videos, galleries, products, block configuration, publication status and the order of blocks.
- Requests and forms: information a visitor deliberately submits to a page owner, such as form fields, contact details or a request. The page owner determines the requested fields.
- Analytics: page and block identifiers, click or view timestamps, referring context where available, IP address and browser user agent used for security and aggregate analytics.
- AI setup: messages, selections, uploaded media and structured setup data needed to create the draft you request. Draft state may also be held temporarily in your browser session.
- Support, reports and administration: correspondence, reported URL or page, reason, notes, moderation outcome and audited administrator actions.
- Technical data: session identifiers, security events, request limits, file type and size, and operational/error information that avoids passwords and reset codes.
- Billing data: if paid billing is enabled, plan and transaction references, amounts, currency and status. Complete card credentials should be handled by the payment provider, not LinkNest.
3. Why we use data
We use data to create and authenticate accounts; operate the editor and public pages; save content at your instruction; provide analytics and requests; process eligible subscriptions; prevent abuse and secure accounts; send transactional or administrator announcements; answer support; comply with law; investigate reports; maintain and improve performance; and document consent.
Depending on context and applicable law, processing is based on performing the service you request, consent, compliance with legal duties, or legitimate interests such as platform security and service integrity, balanced against your rights.
4. Service providers, sharing and transfers
We do not sell personal data. Data may be provided only as needed to hosting and database providers (currently the configured Hostinger environment), email delivery providers, payment providers when billing is connected, security/technical providers, and professional or public authorities where legally required. Providers should be limited by contract and access controls.
Public page content is intentionally public. Page owners receive the information visitors submit to their forms. Embedded YouTube, Google Maps, Spotify, Apple Music, SoundCloud or Mixcloud content can connect directly to those third parties and is governed by their policies. Cross-border processing, if it occurs, must use safeguards required by applicable data law.
5. Cookies and browser storage
LinkNest uses a necessary session cookie to keep you signed in; local storage for language preferences; and session storage for temporary AI setup state and navigation return data. Current core analytics are server-side and do not require a LinkNest marketing cookie. Third-party embedded media may use its own storage. See the Cookie Policy.
6. Retention
Account and page data is retained while the account is active and for a reasonable period needed for recovery, disputes, security, legal records and backups. Analytics, requests, reports, consent records, administrator logs and transactions may require different periods based on purpose and legal duties. Reset codes and security limits are short lived and should be cleaned after expiry. Data is deleted, anonymized or restricted when no longer reasonably needed.
7. Your choices and rights
Subject to applicable law, you may ask to be informed about processing, access a readable copy, correct or update data, request destruction when allowed, withdraw consent where processing depends on it, object or restrict qualifying processing, and complain to the competent authority. Withdrawal does not affect earlier lawful processing.
Some information can be changed directly in Manage or the Editor. For other requests, contact support@linknestapp.com. We may verify identity and may retain information where law, security, fraud prevention or another person's rights require it.
8. Security and incidents
Measures include password hashing, prepared database statements, CSRF checks, server-side authorization, session protection, file validation, rate limiting, audited administrator activity and restricted credential configuration. No Internet system is risk-free. If an incident creates a notification duty, LinkNest will take appropriate steps under applicable law.
9. Children
LinkNest is not intended for a person who lacks legal capacity to agree or provide valid consent. Parents or guardians who believe a child submitted data without appropriate authorization should contact us.
10. Changes
We may update this Policy when practices, services or legal duties change. The current version and date appear above, and material changes will be notified proportionately.