Back to login

    Privacy Policy

    Last updated: June 24, 2026

    1. Who We Are

    LinkPage.pro ("LinkPage", "we", "us", "our") is operated by Almesto, based in Limassol, Cyprus. For any privacy-related question, request, or complaint, contact us at almesto@gmail.com. For the purposes of the GDPR, Almesto is the data controller of personal data processed through linkpage.pro.

    2. Information We Collect

    Account & profile data:

    • Email address, display name, and profile photo (provided directly or via Google OAuth)
    • Profile slug, bio, links, images, custom tabs, theme settings you create
    • Avatar and uploaded images stored in our object storage

    Billing data:

    • Stripe customer ID, subscription status, invoice history
    • We do not store card numbers — payments are processed by Stripe

    Usage & technical data:

    • IP address, browser type, device info, approximate location (from IP)
    • Login timestamps and login logs (for security and abuse prevention)
    • Page visits, badge clicks, and referral click tracking (for the affiliate program)

    Communications: messages you send via support chat or email.

    3. How We Use Your Information & Legal Basis (GDPR)

    • Provide the service (account, public page hosting, editor) — performance of a contract
    • Process payments and subscriptions — performance of a contract
    • Security, fraud prevention, login logs — legitimate interest
    • Affiliate / referral attribution — legitimate interest
    • Service emails (receipts, password resets, notices) — performance of a contract
    • Analytics & product improvement — legitimate interest or consent where required
    • Legal compliance (tax, accounting, lawful requests) — legal obligation

    4. Subprocessors & Third Parties

    We share personal data only with the following subprocessors, strictly to operate LinkPage.pro:

    • Supabase — authentication, database, file storage, edge functions (hosting infrastructure)
    • Stripe — payment processing, subscriptions, invoices
    • Google — OAuth sign-in (only if you choose Google login)
    • Resend — transactional email delivery
    • Nama Support — in-app support chat widget
    • Lovable — application hosting and deployment

    We do not sell, rent, or trade your personal information. We may disclose data if required by law or to protect our rights.

    5. International Data Transfers

    Some of our subprocessors (e.g. Stripe, Google, Supabase, Resend, Lovable) are based in or transfer data to the United States and other countries outside the EEA/UK. Such transfers are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards as required by the GDPR.

    6. Data Retention

    • Account & profile data: kept while your account is active
    • Deleted accounts: removed within 30 days, except where retention is legally required
    • Billing & invoice records: up to 7 years (tax/accounting law)
    • Login logs & security events: up to 12 months
    • Click and analytics data: up to 24 months in identifiable form, then aggregated

    7. Cookies & Tracking

    We use a small number of cookies and similar technologies:

    • Essential — authentication session, CSRF protection (cannot be disabled)
    • Payments — set by Stripe during checkout
    • Local storage — referral click tracking, UI preferences
    • Analytics — only with your consent via the cookie banner

    You can manage cookies in your browser settings or via our consent banner.

    8. Your Rights (GDPR / UK GDPR)

    You have the right to:

    • Access the personal information we hold about you
    • Request correction or deletion of your data
    • Object to or restrict processing
    • Request portability of your data in a machine-readable format
    • Withdraw consent at any time (where processing is based on consent)
    • Lodge a complaint with your local supervisory authority (in Cyprus: the Office of the Commissioner for Personal Data Protection)

    Email almesto@gmail.com to exercise any of these rights. We respond within 30 days.

    9. California Residents (CCPA / CPRA)

    If you are a California resident, you have the right to know what personal information we collect, to request deletion, to correct inaccurate data, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as defined by the CCPA. To exercise your rights, contact almesto@gmail.com.

    10. Data Security

    We use industry-standard technical and organizational measures, including HTTPS/TLS encryption in transit, encrypted storage at rest, role-based access controls, and Row-Level Security on our database. No system is 100% secure; in the event of a data breach affecting your personal data, we will notify affected users and the relevant supervisory authority within 72 hours as required by the GDPR.

    11. Children's Privacy

    LinkPage.pro is not directed at children. We do not knowingly collect personal information from anyone under 16 years of age (EU/UK) or under 13 years (US). If you believe a child has provided us personal data, contact us and we will delete it.

    12. Third-Party Links

    Public LinkPage profiles may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites.

    13. Changes to This Policy

    We may update this privacy policy from time to time. Material changes will be notified by email or via a notice in the app. The "Last updated" date above always reflects the current version.

    14. Contact

    Almesto
    Limassol, Cyprus
    Email: almesto@gmail.com