Privacy Policy

1. What we collect

Account data: your name, email address and password (stored only as a secure bcrypt hash - we never see or store your actual password).

Website data: the URLs of sites you register, and the pages we crawl from them (titles, headings, text content, word counts, link structure).

Usage data: how many sites, pages and suggestions you consume, and basic actions you take in the app.

Billing data: your plan, subscription status and payment references. Payments are processed by Paystack (South Africa, ZAR) or Stripe via Systeme.io (international, USD) - we never see or store your full card details.

Communications: emails we send you (password resets, receipts, product updates you can unsubscribe from).

2. Why we process it

To provide the Service you signed up for: crawling your registered sites, generating AI link suggestions, monitoring citations, and showing your dashboard.

To manage your account and billing, prevent abuse, and provide support.

To send you service emails and - only if you opt in - product updates. Marketing emails always include an unsubscribe link.

Legal basis: performance of our contract with you (the Terms of Service), legitimate interests in operating and securing the Service, and consent where required (e.g. optional marketing emails).

3. Who we share it with

We use a small number of processors to run the Service: a managed Postgres database provider, a hosting provider, a transactional email provider, and payment processors (Paystack / Stripe). They process data only on our instructions.

We do not sell your personal data, and we do not share it with advertisers.

4. How long we keep it

Account and crawled data are kept while your account is active. Deleting a site removes its crawled pages and suggestions; deleting your account removes your personal data.

Billing records may be retained longer where tax or accounting law requires it.

5. Where it is stored

Data is stored with our managed database provider, which may process data outside South Africa. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

6. Your rights

You can access, correct or delete your personal data at any time: most of it directly in the app, the rest by emailing support@linkhaunter.live.

If you are in the EU/UK you have additional rights under GDPR (access, portability, objection, complaint to a supervisory authority). If you are in South Africa, POPIA applies similarly.

7. Security

Passwords are hashed with bcrypt. Sessions use signed, httpOnly cookies. Data is stored in a managed cloud database with access restricted to the Service.

No system is perfectly secure - if a breach affecting your data occurs, we will notify you as required by law.

8. Cookies

We use strictly necessary cookies for authentication (a signed session cookie) and local storage for preferences. We do not use third-party advertising cookies.

9. Data controller and contact

Data controller: LinkHaunter, operated by Jerome Solomon (sole proprietor), South Africa.

Privacy questions or requests: support@linkhaunter.live.