Privacy Policy

1. Introduction

PromoLinks.me ("we", "us", "our") operates the promolinks.me website and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address, profile picture) when you sign up
• Artist page information (artist name, bio, genre, social links, avatar)
• Content you create (promo links, link configurations, custom domains)
• Analytics data (page views, link clicks, geographic location, device type, referrer)

3. Google User Data

When you choose to sign in with your Google account, we access the following Google user data through OAuth 2.0:

3.1 Data Accessed

• Email address — your primary Google email address
• Name — your Google account display name (first and last name)
• Profile picture — your Google account avatar/photo URL

We only request the minimum OAuth scopes necessary for authentication (openid, email, profile). We do not request access to your Google Drive, Gmail, Calendar, or any other Google services.

3.2 How We Use Google User Data

Google user data is used exclusively for the following purposes:

• Authentication — to create and verify your PromoLinks.me account
• Account profile — to pre-fill your display name and avatar so you don't have to set them up manually
• Communication — to send you essential service-related emails (e.g., account verification, billing receipts)

We do not use Google user data for advertising, marketing to third parties, or training AI/ML models.

3.3 Google Data Sharing

Google user data is shared only with the following service providers, strictly for the purpose of operating our platform:

• Clerk (clerk.com) — handles OAuth authentication flow, stores your email, name, and profile picture for identity management
• Supabase (supabase.com) — our database provider where your account profile (name, email, avatar URL) is stored

We do not sell, rent, or share your Google user data with any other third parties, data brokers, or advertisers.

3.4 Google Data Storage & Protection

Google user data is stored securely with the following measures:

• All data is transmitted over HTTPS/TLS encryption
• Database access is restricted by row-level security policies
• Authentication tokens are managed by Clerk's secure infrastructure and are never stored in our database
• Access to production systems is limited to authorized personnel only
• We do not store Google OAuth refresh tokens or access tokens in our own database

3.5 Google Data Retention & Deletion

Your Google user data (name, email, profile picture) is retained for as long as your PromoLinks.me account is active.

• You may request deletion of your account and all associated data at any time by emailing info@promolinks.me
• Upon account deletion, all your Google user data is permanently removed from our database within 30 days
• You can also revoke PromoLinks.me's access to your Google account at any time through your Google Account permissions page

4. Information from Other Third-Party Services

When you sign in using other third-party services (such as Facebook or Apple), we receive your name, email address, and profile picture from those services. We only request the minimum information necessary for authentication.

5. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Create and manage your account
• Generate analytics and insights for your promo links
• Send you service-related notifications
• Respond to your requests and support inquiries
• Protect against fraud and abuse

6. Data Sharing

We do not sell your personal information. We share data only with service providers necessary to operate our platform:

• Clerk — authentication and user management
• Supabase — database and backend services
• Vercel — hosting and deployment
• Stripe — payment processing (we do not store your credit card information)

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting us at info@promolinks.me. All personal data will be permanently deleted within 30 days of your request.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• HTTPS/TLS encryption for all data in transit
• Encryption at rest for stored data
• Row-level security policies on our database
• Regular security audits and monitoring
• Restricted access to production systems

However, no method of transmission over the Internet is 100% secure.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, contact us at info@promolinks.me.

10. Cookies

We use essential cookies for authentication and session management. We may also use analytics cookies to understand how our service is used. You can control cookie preferences through your browser settings.

11. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: info@promolinks.me