Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using the Service:

• Account information: When you create an account, we collect your first name, email address, and password (stored in hashed form). If you sign up through a third-party provider (Google, Apple, or Microsoft), we receive your name and email address from that provider.
• Card information: The professional information you add to your digital business cards, including name, company, position, department, accreditations, headline, phone numbers, email addresses, physical addresses, social media links, website URLs, and any other details you choose to include.
• Profile images: Profile photos and company logos you upload to the Service. These images are stored securely and delivered via our content delivery network.
• Contact exchange data: When you exchange contact information with another person through the Service, we store the contact details shared (such as name, email, and phone number).
• Email signatures: If you use our email signature feature, we store the signature configuration and associated card data.
• Communications: When you contact us for support or feedback, we collect the information you provide in those communications.

1.2 Payment Information

When you subscribe to a paid plan, payment processing is handled by our third-party payment providers:

• Stripe processes payments for web subscriptions. We store your Stripe customer identifier but do not store your credit card number or full payment details on our servers.
• Apple processes payments for iOS in-app purchases. We receive transaction identifiers from Apple but do not have access to your Apple payment details.
• Google Play processes payments for Android in-app purchases. We receive purchase tokens and transaction information needed to verify subscriptions but do not have access to your Google payment details.

1.3 Information Collected Automatically

When you use the Service, we automatically collect certain information:

• Usage data: Pages visited, features used, actions taken within the Service, and the date and time of your activities.
• Device information: Browser type and version, operating system, device type, and screen resolution.
• Network information: Your IP address, which we may use to derive your approximate geographic location (city or region level).
• Card interaction data: When someone views or interacts with your Card, we record the interaction type, referring source, and the viewer's IP address for analytics purposes.
• Push notification tokens: If you use our iOS app and enable push notifications, we collect your device token to deliver notifications.

1.4 Integration Data

When you connect third-party services to your Lynkle account, we may receive information from those services:

• Google Contacts / Microsoft Outlook: If you enable contact syncing, we access your contact list to synchronize contacts exchanged through Lynkle. We only access the data necessary for the integration to function.
• Gmail signature syncing: If you connect Gmail for automatic signature syncing, Lynkle reads your Gmail send-as aliases, updates the authorized account's primary signature with your saved Lynkle signature, and stores encrypted OAuth tokens until you disconnect Gmail. Lynkle does not read or access your email messages.
• OAuth tokens: We store encrypted authentication tokens to maintain your connection with third-party services. You can revoke access at any time through your account settings.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Create and display your digital business cards, facilitate contact exchanges, generate wallet passes, and deliver email signatures.
• Process payments: Manage your subscription, process billing, and provide purchase receipts.
• Send communications: Deliver account verification emails, password resets, subscription confirmations, and push notifications you have opted into.
• Provide analytics: Show you how your cards are being viewed and interacted with, including view counts and interaction trends.
• Improve the Service: Analyze usage patterns to improve features, fix bugs, and enhance user experience.
• Ensure security: Detect and prevent fraud, unauthorized access, and abuse of the Service.
• Comply with legal obligations: Meet applicable legal requirements, respond to legal processes, and enforce our Terms of Service.

3. How We Share Your Information

We do not sell your personal data. We share your information only in the following circumstances:

3.1 With Other Users

The core purpose of Lynkle is sharing your professional information. When you share your Card via QR code, link, NFC, or wallet pass, the information on that Card is accessible to the recipient. You control which information appears on your Card and can enable private card sharing to restrict access.

3.2 Service Providers

We work with third-party service providers who process data on our behalf. These providers are contractually obligated to use your data only as necessary to provide their services to us:

• Amazon Web Services (AWS): Cloud hosting and file storage (profile images, logos). Data is stored in AWS infrastructure.
• AWS CloudFront: Content delivery network for fast and reliable delivery of images and assets.
• Stripe: Payment processing for web-based subscriptions.
• Apple: In-app purchase processing, wallet pass delivery, and push notification delivery.
• Google Play: In-app purchase processing for Android subscriptions.
• Google: Wallet pass delivery, contact syncing, and Gmail signature syncing (when authorized by you).
• Loops: Transactional email delivery (account verification, password resets, notifications).
• PostHog: Product analytics to understand how the Service is used and to improve features.

3.3 Google API Compliance

Lynkle's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3.4 Legal Requirements

We may disclose your information if required by law, legal process, government request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others; investigate fraud; or respond to a government request.

3.5 Business Transfers

If Lynkle is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

3.6 Aggregated Data

We may share aggregated, de-identified data that cannot reasonably be used to identify you. This data may be used for industry analysis, benchmarking, and other purposes.

4. Cookies & Tracking

We use the following technologies to collect and store information:

• Authentication cookies: Essential cookies that keep you logged in and maintain your session. These are required for the Service to function.
• Analytics cookies: PostHog sets cookies to help us understand how the Service is used. These cookies collect information such as pages visited, features used, and general usage patterns.
• Local storage: We use browser local storage to store your authentication token and user preferences for a faster experience.

We do not set any cookies outside of the lynkle.com domain and its subdomains. We do not use advertising cookies or cross-site tracking.

You can control cookies through your browser settings. Please note that disabling essential cookies may prevent parts of the Service from functioning properly.

5. Data Storage & Security

We take the security of your data seriously and implement reasonable technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using HTTPS/TLS.
• Hashing of passwords using industry-standard algorithms.
• Secure cloud infrastructure provided by Amazon Web Services.
• Encrypted storage of refresh tokens for third-party integrations.
• Regular security reviews of our systems and practices.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

6. International Data Transfers

Lynkle Pty Ltd is based in Sydney, Australia. Our service providers, including AWS, Stripe, and others, operate infrastructure in the United States and other countries. This means your personal information may be transferred to and processed in countries other than your country of residence.

These countries may have data protection laws that differ from those in your jurisdiction. Where we transfer personal information outside of your country, we take steps to ensure your data is protected in accordance with this Privacy Policy and applicable data protection laws, including where applicable the use of Standard Contractual Clauses or other appropriate transfer mechanisms.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained while your account is active and deleted upon account closure, subject to a reasonable processing period.
• Card and contact data: Retained while your account is active. Deleted when you delete your cards or close your account.
• Analytics data: Card interaction data is retained for the lifetime of the associated card.
• Payment records: Retained as required for accounting, tax, and legal compliance purposes.
• Shared data: Information you have shared with other users may persist in their accounts or on their devices even after you delete your account.

In limited circumstances, we may retain certain information for a longer period as required by law or for legitimate business purposes such as resolving disputes or enforcing our agreements.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Update or correct inaccurate personal information. You can do this directly through the Service for most data.
• Deletion: Request deletion of your personal information. You can delete your content through the Service or request full account deletion.
• Portability: Request your data in a structured, commonly used format.
• Withdraw consent: Where we rely on your consent to process data, you may withdraw it at any time. This does not affect the lawfulness of processing based on consent before withdrawal.
• Opt out of marketing: You may opt out of promotional communications by following the unsubscribe instructions in those messages or by contacting us. We may still send you non-promotional messages related to your account and transactions.

To exercise any of these rights, please contact us at hello@lynkle.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@lynkle.com.

10. Third-Party Links

Your digital business card and the Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make changes, we will update the "Last updated" date at the top of this page. For material changes, we will make reasonable efforts to notify you via email or through a notice within the Service.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Lynkle Pty Ltd
Email: hello@lynkle.com
Sydney, Australia