Privacy Policy

LinkRithm ("we", "us", "our") is a business operating system for service-based companies. We are the data controller for the personal data you provide when using our platform at linkrithm.com.

You can reach us at hello@linkrithm.com for any privacy-related questions.

We collect the following categories of personal data:

• Account data — your name, email address, and profile photo when you create an account, including via Google OAuth.
• Organisation data — the name and details of the workspace you create or are invited to.
• Usage data — pages visited, features used, actions taken, and timestamps, collected automatically to improve the product.
• Content you create — clients, projects, invoices, time entries, documents, and any other data you enter into the platform.
• Billing data — handled directly by Stripe; we do not store payment card details.
• Communications — emails you send us, and messages we send you about your account or the service.

• To provide, operate, and maintain the LinkRithm platform.
• To authenticate your identity and manage your account.
• To process payments and manage subscriptions via Stripe.
• To send transactional emails (password resets, invitations, notifications).
• To analyse usage patterns and improve the product.
• To respond to your support requests and communications.
• To meet our legal and regulatory obligations.

If you are located in the European Economic Area or United Kingdom, we process your personal data under the following legal bases:

• Contract — processing necessary to provide the service you have signed up for.
• Legitimate interests — improving the product, preventing fraud, and ensuring security.
• Legal obligation — compliance with applicable laws.
• Consent — where we have asked for and you have given explicit consent (e.g. marketing emails).

We do not sell your personal data. We share it only with the following sub-processors where necessary to deliver the service:

• Supabase — database hosting and authentication.
• Vercel — application hosting and edge delivery.
• Stripe — payment processing and subscription management.
• Resend — transactional email delivery.
• Anthropic — AI-powered features within the platform.

Each sub-processor is contractually bound to protect your data and use it only for the purpose of providing the service.

We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymise your data within 30 days, except where we are required by law to retain it longer (e.g. financial records).

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your personal data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Restriction — ask us to limit how we use your data.

To exercise any of these rights, email hello@linkrithm.com. We will respond within 30 days.

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take reasonable precautions to protect your data.

Your data may be processed in countries outside your own, including the United States, where our infrastructure providers operate. Where required, we rely on Standard Contractual Clauses or equivalent mechanisms to ensure adequate protection for transfers outside the EEA or UK.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice in the platform. Continued use of LinkRithm after the effective date of any update constitutes acceptance of the revised policy.