Privacy Policy
Last updated: August 23, 2026
1. Introduction
This policy explains what personal data the Fullink service collects, why it is used, which service providers process it, and the choices available to you.
Where consent is required, Fullink will ask for it separately. Using the service is not treated as consent to processing that requires an affirmative choice.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, username/handle, display name
- Profile Information: Bio, avatar, background images, and social links
- Content: Links, text, images, and other content you create
- Payment Information: Processed securely through Stripe (we do not store card details)
- Communications: Messages you send to our support team
2.2 Information Automatically Collected
- Profile analytics: Link-click events, referrers, UTM source values, and the requesting IP address
- Site analytics: Aggregated, cookieless public-page measurements through Vercel Web Analytics; private paths and URL parameters are excluded before collection
- Technical records: Request, security, and error logs maintained by hosting and infrastructure providers
- Cookies: Essential authentication cookies when you sign in
2.3 Information from Third Parties
- Payment Processors: Stripe provides payment confirmation and billing information
- Authentication: Supabase provides authentication events and session state
3. How We Use Your Information
We use your information to:
- Provide, operate, and maintain the Service
- Process your transactions and send transaction notices
- Maintain and improve the service
- Send authentication, transaction, account, and support messages
- Provide analytics and insights about your profile performance
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
- Enforce our Terms of Service
4. How We Share Your Information
We may share your information with:
4.1 Service Providers
- Supabase: Database and authentication services
- Stripe: Payment processing
- Resend: Email delivery
- Vercel: Hosting and infrastructure
4.2 Public Information
Your public profile (handle, display name, bio, avatar, links) is visible to anyone who visits your Fullink page. This is necessary to provide the core functionality of the Service.
4.3 Legal Requirements
We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety.
4.4 Business Transfers
If Fullink is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
5. Data Retention
Account and profile data is kept while your account is active. When you delete the account, Fullink requests deletion of the account data it controls. Payment, security, backup, and transaction records may be retained for the period needed to meet legal obligations, resolve disputes, prevent fraud, or complete deletion from provider backups.
Fullink does not publish a fixed retention period for every record because the applicable legal and operational requirements have not been verified for every user location. You may ask for the retention period that applies to a particular category of your data.
6. Your Rights and Choices
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate data
- Deletion: Request deletion of your account and data
- Portability: Export your data in a machine-readable format
- Restriction: Ask us to restrict processing where applicable
- Objection: Object to certain data processing activities
- Consent: Withdraw consent where processing is based on consent
To exercise these rights, contact us at privacy@fullink.io.
7. Security
Fullink uses technical controls intended to reduce unauthorized access, including:
- Encryption in transit (HTTPS/TLS)
- Row-level security policies in our database
- Server-side authorization checks and restricted service credentials
- Verified Stripe webhook signatures and duplicate-event protection
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
8. Cookies and Tracking
Fullink uses essential cookies to:
- Keep you signed in
- Refresh and protect your authenticated session
You can control cookies through your browser settings. However, disabling cookies may limit functionality. See our Cookie Policy for details.
9. International Data Transfers
Fullink's infrastructure providers may process data in countries other than yours. Transfer rules and safeguards depend on the provider, account configuration, and your location. Contact us for the transfer mechanism applicable to your data before relying on a particular regional safeguard.
10. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use after such changes constitutes acceptance.
12. Contact Us
For questions, rights requests, or complaints about Fullink data practices, please contact:
Privacy Team
Email: privacy@fullink.io
General Support: support@fullink.io
The verified legal name and postal address of the service operator are not available in the project records used to prepare this notice. The operator must add those controller disclosures before treating this notice as complete for a jurisdiction that requires them.
13. Regional Notices
13.1 European Users (GDPR)
If you are in the European Economic Area, you have additional rights under GDPR, including the right to lodge a complaint with your local data protection authority.
13.2 California Users (CCPA)
California residents may have additional notice, access, correction, deletion, and opt-out rights. Fullink is not configured to sell personal information or share it for cross-context behavioral advertising.