Alllinks Privacy Policy

When you use Alllinks, you're trusting us with your information. We take that seriously — and here's exactly how we collect, use and protect it.

Effective May 14, 2026

1. Who this applies to

This policy covers everyone who interacts with Alllinks:

Alllinks is the data controller for everything inside the dashboard. For paid subscriptions, Paddle is the data controller for billing data — checkout details, card number, billing address, VAT/tax IDs — and a joint controller with us for the subscription record that links a Paddle customer to an Alllinks account.

2. What we collect from account holders

When you create an Alllinks account

When you build your page

When you contact us

3. What we collect from visitors to your page

We don't run third-party advertising trackers on creator pages.

4. Payments & Paddle

Paddle is our Merchant of Record

All paid Alllinks subscriptions (Creator Pro, Business Pro) are sold by Paddle.com Market Limited as our reseller and Merchant of Record. That means:

We only receive a billing reference, the email on your Paddle customer profile, your subscription status, and the country Paddle determined for tax purposes — never card data.

If your buyers pay you through your Alllinks shop, those payouts run on your own Stripe or PayPal account — Alllinks does not sit in the middle of those transactions and does not store your buyers' payment data.

5. How we use information

6. Third parties we use

We don't sell or rent personal data, and we don't share data with advertisers.

7. Your rights

Under GDPR, the UK Data Protection Act, CCPA and similar laws, you have the right to:

For billing data, exercise those rights with Paddle (a link to their customer portal is in every receipt). For everything else, email support@alllinks.cc. We respond within 30 days.

8. Data retention

Profile and content are kept while your account is active. After you delete the account, active systems are wiped within 30 days and encrypted backups within 90 days. Aggregate, fully anonymised analytics may be retained longer. For tax/audit reasons, Paddle and we retain a minimal billing record (transaction ID, country, amount, VAT) for up to 7 years — none of which can be tied back to you as a person.

9. International transfers

Alllinks is a global service. Your data may be processed in countries other than the one you live in (typically the EU, UK, or US, depending on the region serving your page). Where we transfer data outside the UK/EEA, we rely on Standard Contractual Clauses or the UK International Data Transfer Addendum. Paddle's transfers run under the same framework.

10. Security

TLS in transit, encryption at rest for sensitive fields, hashed passwords with modern algorithms, least-privilege access for the team, regular dependency scanning, and continuous monitoring. If a breach materially affects you we will notify you and the relevant data-protection authorities within 72 hours.

11. Children

Alllinks is not directed at children under 13 (or the minimum age in your country). We don't knowingly collect data from anyone under that age. If you believe a minor has signed up, contact us and we will remove the account.

12. Alllinks Assistant (ChatGPT)

Alllinks offers an optional “Alllinks Assistant” custom GPT that lets you manage your own account by chatting inside ChatGPT. It is opt-in and requires an active Alllinks subscription.

13. Changes

If we update this policy materially we post the new version here, update the effective date, and email account holders. Continued use after the effective date means you accept the update.

14. Contact

Privacy questions, GDPR / CCPA requests, or anything else covered here: email support@alllinks.cc. Billing-specific requests can also be sent directly to Paddle from your customer portal.