Privacy Policy

1. Data we collect

We keep collection narrow and tied to what the service needs to work:

• Account data. Your email address, the confirmation code we send to verify it, and the page of the site you signed up from (for example the pricing page or the demo), including campaign parameters if you arrived through a marked link.
• Usage analytics. We use Microsoft Clarity to understand how visitors use this website: pages viewed, clicks, scrolling and session replays. Clarity may set cookies and collect device and browser information for this purpose.
• Click data on creator pages. When you click a link on a creator's page, we record the click with technical context such as timestamp, referrer, approximate location derived from IP, and device type, and show it to that creator as aggregate analytics. If you unlock a gated link with your email, that email is stored for the creator who owns the page.
• Cookies and session data. We use strictly necessary cookies for sessions and security, and the analytics cookies described above. We do not run third-party advertising cookies.
• Technical logs. IP addresses and request logs kept for security, abuse prevention and debugging.

2. Why we use it

We use this data to provide and operate the service, verify your email and manage your account, show creators the analytics that are the core of the product, keep the platform secure and prevent abuse, improve the website based on how it is actually used, and communicate with you about your account. We do not sell personal data, and we do not use audience data collected on creator pages for our own marketing.

3. Legal bases (GDPR)

Where the GDPR applies, we rely on:

• Contract (Article 6(1)(b)) for account data and everything needed to deliver the service you signed up for.
• Legitimate interests (Article 6(1)(f)) for security logging, abuse prevention and service improvement, balanced against your rights.
• Consent (Article 6(1)(a)) for analytics cookies and session recording, which you can decline or withdraw at any time.

For audience data collected on creator pages (gate emails, click records), the creator is the controller and we act as their processor under a Data Processing Agreement.

4. Retention

Account data is kept while your account exists and deleted or anonymized within 30 days of account deletion. Security logs are kept for up to 12 months. Analytics data in Microsoft Clarity is retained according to Clarity's retention schedule. Audience data on creator pages is kept until the creator exports or deletes it, or until their account closes.

5. Processors and recipients

We share personal data only with service providers who process it on our instructions: our hosting provider (infrastructure and databases), our email delivery provider (to send confirmation codes and account email), and Microsoft Clarity (website analytics). Each is bound by a data processing agreement. We may also disclose data where the law requires it.

6. International transfers

Some processors operate outside the European Economic Area. Where data leaves the EEA, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses. Enterprise customers can request EU data hosting so that audience data stays in EU regions.

7. Your rights

You can ask us to access, rectify, erase or export the personal data we hold about you, to restrict or object to processing, and to withdraw consent where processing is based on it. Email [email protected] and we will respond within one month. If you interacted with a creator's page, we may refer your request to that creator as the controller, and help them fulfil it. You also have the right to complain to your local supervisory authority.

8. Changes and contact

We will post any changes to this policy on this page and update the effective date above; material changes will be announced by email to account holders. The controller for this website is ExclusiveLink, reachable at [email protected].