Privacy Policy
Last updated: October 2026
0. Who We Are
The Service is operated by Berkay Şimşek ("LinkTrack", "we", "us"), who acts as the data controller. For any privacy-related request, contact info@linktrackapp.com.
1. Information We Collect
We collect information you provide directly: name, email address, company name, and payment information (processed by Lemon Squeezy). If you sign in with Google, we receive the basic profile information described in Section 1a. When you use the LinkTrack Chrome extension on a LinkedIn profile page that you open yourself, the extension reads the profile text shown on that page (such as name, headline, location, About, experience, education and skills) and the profile photo. These details are sent to LinkTrack only when you click "Get details" or "Save", and are stored as a lead in your own CRM. The extension does not browse LinkedIn on its own, does not send requests to LinkedIn, and does not collect data from pages you have not opened.
1a. Google User Data
If you choose "Continue with Google", LinkTrack requests only Google's basic sign-in scopes (email and profile). From your Google Account we receive your name, email address, profile picture and Google account ID. We use this data solely to create your LinkTrack account, sign you in, and show your name and photo inside the app. We do not access your Gmail, Contacts, Calendar, Drive or any other Google service. Google user data is never sold, is not used for advertising, is not used to train AI models, and is shared only with the service providers needed to operate LinkTrack (Section 4). LinkTrack's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke LinkTrack's access at any time in your Google Account (Security → Third-party apps & services) and delete your LinkTrack account from Settings.
2. How We Use Your Information
We use collected information to: provide and maintain the Service, process transactions, send notifications and reminders, improve the Service, structure publicly visible profile text into organized lead fields using AI-assisted processing (Google Vertex AI), communicate with you, and comply with legal obligations.
3. Data Storage & Security
Your data is stored in a self-hosted PostgreSQL database on our own server (Hetzner, Germany — EU region). Profile photos are stored in self-hosted MinIO object storage. We implement industry-standard security measures including encryption in transit (HTTPS/TLS), storing passwords and session refresh tokens only in hashed form, and regular security audits. Despite our best efforts, no method of electronic transmission is 100% secure.
4. Data Sharing
We do not sell, trade, or rent your personal data. We share data only with: (a) Lemon Squeezy (payment processing), (b) Resend (transactional emails), (c) Cloudflare (CDN, security and cookie-free aggregate website statistics), (d) Google Cloud / Vertex AI (AI-assisted structuring of publicly visible profile text into lead fields; the text is processed transiently and is not used to train Google's models), (e) PostHog (product analytics). Our database and file storage are self-hosted (Hetzner, Germany). All third-party providers are GDPR-compliant.
5. Cookies & Tracking
We use essential cookies for authentication (httpOnly) and a locale preference cookie; the web app also keeps your session in your browser's local storage. We use PostHog for product analytics — including page views, feature usage, and session recordings (with all form inputs masked) — to understand and improve the user experience. A cookie consent banner is displayed to all users. Analytics cookies and session recordings are used only after you accept. Until you accept, or if you reject, no analytics cookies or browser storage are used: visits are counted anonymously, without cookies, using a daily-rotating hash generated on PostHog's servers, and no session is recorded. No third-party advertising cookies are used.
6. Data Retention
We retain your account data for as long as your account is active. When you delete your account, we immediately deactivate it and irreversibly erase your identifying account data (name, email address, phone number, and authentication credentials). Content you created (leads, notes, categories) and security logs (sign-in records) are retained in a deactivated state and are no longer accessible through the Service. You may request complete and permanent erasure of all remaining data at any time by contacting info@linktrackapp.com; we will action such requests within 30 days. Payment records are retained for the period required by applicable tax and accounting law. Anonymized analytics data may be retained for statistical purposes.
7. Your Rights
You have the right to: access your personal data, correct inaccurate data, delete your account and data, export your data (CSV/Excel format), object to processing, and withdraw consent. To exercise these rights, contact info@linktrackapp.com.
8. International Data Transfers
Our application servers, database, and file storage are located in the European Union (Hetzner, Germany), and our product analytics run on PostHog's EU cloud. Some providers listed in Section 4 — notably Lemon Squeezy (payment processing) and Resend (email delivery) — are US-based companies, so limited data is processed outside the EU under those providers' standard contractual clauses. If you access the Service from outside the EU, your data may also be transferred to and processed in your country.
9. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email at least 30 days before taking effect. Continued use after changes constitutes acceptance.
11. Contact
For privacy-related questions, contact: info@linktrackapp.com. For KVKK-specific matters (Turkish residents), please refer to our KVKK Disclosure page.