Privacy Policy
Effective date:
This Privacy Policy explains how LinksXpress ("we", "us", "our") collects, uses, discloses, and safeguards information when you use https://linksxpress.com and our related services, including our app‑redirection and URL‑shortening products (the "Service").
1. Scope & Controller
This Policy applies to personal data processed by LinksXpress through the Service. If you are in the EU/EEA/UK, the data controller is LinksXpress (see contact details below). If you use LinksXpress on behalf of an organization, that organization may also act as a controller for data it uploads or directs us to process.
2. Information We Collect
A. Information you provide
- Account details such as name, email, password (hashed), organization, and contact preferences.
- Profile & settings including custom domains, routing rules, API keys, and link metadata.
- Billing information (handled by our payment processor) and subscription details.
- Support content you send us (tickets, chat, or email) and feedback.
B. Information collected automatically
- Usage & diagnostics: IP address, device and browser type, OS, language, timestamps, pages and endpoints accessed, referrers, and identifiers (e.g., cookie IDs).
- Link analytics: for visits to short links, we may log click count, referring URLs, approximate location (city/region), device type, and user‑agent data. We do not build profiles of end users who click links, beyond aggregate metrics.
- Cookies and similar tech: see Cookies & Tracking.
C. Information from third parties
- Single sign‑on / identity providers (if enabled), to create and authenticate your account.
- Payment processors for billing status and fraud prevention.
- Integrations you connect (e.g., analytics, CRM) may provide configuration or usage data.
3. How We Use Information
- Provide, operate, and maintain the Service (including link creation, routing, analytics, and account management).
- Improve and develop new features, including research, testing, and troubleshooting.
- Personalize the Service (e.g., default settings) and communicate with you about updates, security, and support.
- Process payments, detect/prevent fraud and abuse, and enforce our Terms & Conditions.
- Comply with legal obligations and protect our rights, users, and the public.
- With your consent, for optional marketing, ads measurement, and cookies that are not strictly necessary.
4. Legal Bases
Where required (e.g., EU/EEA/UK), we rely on one or more of the following legal bases: (i) performance of a contract; (ii) legitimate interests (e.g., securing and improving the Service); (iii) compliance with legal obligations; and (iv) consent (e.g., for non‑essential cookies/marketing). For India, we align with the Digital Personal Data Protection Act, 2023 (DPDP Act) principles of lawful purpose, consent/legitimate use, and data minimization.
6. Sharing & Disclosures
We may share information in these circumstances:
- Service providers / processors performing services on our behalf (e.g., hosting, CDN, analytics, payments, email, customer support, anti‑abuse).
- Business transfers in connection with a merger, acquisition, financing, or sale of assets.
- Legal, safety, and security to comply with law, enforce our terms, or protect rights, property, users, or the public.
- With your consent or at your direction, including integrations you choose to enable.
We do not sell personal data. Where required by law (e.g., California), we do not "share" personal information for cross‑context behavioral advertising unless you opt‑in, and you may opt‑out at any time if offered.
7. Data Retention
We retain personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and purpose. We may anonymize or aggregate data so it is no longer reasonably associated with an identified or identifiable person.
8. Security
We employ administrative, technical, and physical safeguards designed to protect personal data (e.g., encryption in transit, access controls, audit logging). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
9. Your Rights & Choices
Depending on your location, you may have rights to access, correct, update, delete, or port your personal data; to object to or restrict certain processing; and to withdraw consent. You may also have rights related to automated decision‑making.
- GDPR/UK GDPR (EU/EEA/UK): access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority.
- India (DPDP Act, 2023): the right to access, correction, erasure, grievance redressal, and consent withdrawal.
- California (CCPA/CPRA): rights to know, delete, correct, opt‑out of sale/sharing, and non‑discrimination.
How to exercise: Email us at admin@onlinejaoo.com. We may ask you to verify your identity and jurisdiction before acting on a request.
10. International Transfers
We may transfer, store, and process information in countries other than where it was collected (e.g., where our service providers operate). When we transfer personal data internationally, we use appropriate safeguards, such as standard contractual clauses, as required by law.
11. Children’s Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us personal data, please contact us to request deletion. For certain regions, we may require a higher age threshold (e.g., 16 in the EEA) consistent with local laws.
12. Changes to This Policy
We may update this Policy periodically. We will post the updated version with a new effective date, and, if changes are material, we will provide additional notice (e.g., email or in‑product notice). Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.
13. Contact Us
Questions or concerns about privacy? Contact us:
- Email: admin@onlinejaoo.com