Linktree

GDPR Addendum

Source: Signup

Personal Data:

  • Email address
  • Instagram username
  • Real name

Reason:

To provide a login to the service and contact you to help you use the product or learn about features.

Handling:

Secure managed MySQL database (AWS RDS). Only senior developers and DBA has direct access.

Disposal: When user deletes account all information is cleared.

Source: Paid account sign up (PRO)

Personal Data:

  • Credit card expiry
  • Last four digits of credit card
  • Billing address
  • Email address
  • Name

Reason:

To enable payment for the service

Handling:

All credit card data is stored securely by a 3rd party provider ‘Stripe’. Expiry date and last four digits are stored in the database to present users with their previously used cards.

Disposal: On request

Source: Support or Sales via live chat

Personal Data:

  • Email address (optional)

Reason:

To enable user to be notified of reply from support

Handling: Stored in third party provider 'Intercom'

Disposal: Deleted every 14 days

Security Outline

Here are some steps we are taking to further secure your data :

  • Real time data breach protection & monitoring/alerts
  • Common attack vector protection & monitoring/alerts
  • Secure by design/default development process integration
  • Further automated the deletion of personal data based on user action
  • Introduction of data breach plan
  • Hardened security on all infrastructure

Sub Processors

Sub Processor: Autopilot

Data:

  • Email address
  • Username
  • Feature usage

Sub Processor: Stripe

Data:

  • Email address
  • Billing details

Sub Processor: Google Analytics

Data:

  • Anonymised cookie data

Sub Processor: Facebook

Data:

  • Anonymised cookie data

Sub Processor: Intercom

Data:

  • Email address
  • Linktree username

Sub Processor: Datadog

Data:

  • Linktree username
  • User resource utilisation

Sub Processor: Sentry

Data:

  • Linktree username
  • Application usage statistics

Sub Processor: Sqreen

Data:

  • Application security screening

Sub Processor: Paypal

Data:

  • Email address
  • Billing details

Sub Processor: Baremetrics

Data:

  • Email address
  • Subscription details
Exercise Your Rights

Visit https://linktr.ee/gdpr-form