Privacy Policy

1. Introduction

Welcome to GrabLink.xyz ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our lead magnet automation services. GrabLink is a platform that helps creators build lead magnet forms and automate email audience management through third-party integrations.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller for your personal information is GrabLink.xyz. For any privacy-related inquiries, you can contact us at dev.samikc@gmail.com.

3. Information We Collect

3.1 Creator Account Information

When you create a creator account on GrabLink, we collect:

• Email address (primary identifier)
• Full name
• Profile image (from Google OAuth)
• Account preferences and settings

3.2 Lead Magnet Visitor Analytics

For visitors to lead magnet forms created by our users, we collect:

• Email addresses (submitted voluntarily in exchange for resources)
• Geographic location (IP-based, for analytics purposes)
• Visit timestamps and duration
• Device and browser information
• Page interaction analytics

3.3 Payment Information

Payment processing is handled entirely by Polar.sh. We do not store payment card details or banking information on our servers.

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Consent: For email marketing and non-essential analytics
• Contract: To provide our lead magnet platform services
• Legitimate Interest: For platform security, fraud prevention, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Information

5.1 For Creators

• Authenticate and maintain your account
• Process payments through Polar.sh
• Provide customer support
• Send important service updates and notifications
• Improve our platform and develop new features

5.2 For Lead Magnet Visitors

• Deliver requested resources via automated email through Useplunk
• Provide analytics to creators about form performance
• Track user engagement for optimization purposes

6. Third-Party Services and Data Sharing

We integrate with the following third-party services. By using GrabLink, you also agree to their respective privacy policies:

6.1 Google OAuth

• Used solely for authentication purposes
• We access only your email, name, and profile picture
• Subject to Google's Privacy Policy

6.2 Polar.sh

• Handles all payment processing and subscription management
• We receive only payment status notifications
• Subject to Polar.sh's Privacy Policy

6.3 Useplunk

• Processes email automation for lead magnet delivery
• Visitor email addresses are sent to Useplunk for automated responses
• We do not store emails permanently; they are processed through Useplunk
• Subject to Useplunk's Privacy Policy

Important: We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. Data Retention

• Creator accounts: Retained until account deletion is requested
• Analytics data: Retained for performance optimization
• Email addresses: Processed through Useplunk and not permanently stored by us
• Payment data: Retained by Polar.sh according to their policies

8. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, contact us at dev.samikc@gmail.com. We will respond within 30 days.

9. Data Security

We implement industry-standard security measures including encryption in transit and at rest, secure authentication protocols, regular security assessments, and access controls. However, no method of transmission over the internet is 100% secure.

10. International Data Transfers

Your data may be processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place for such transfers, including adequacy decisions and standard contractual clauses.

11. Cookies and Tracking

We use essential cookies for authentication and functionality. Analytics cookies are used with your consent to improve our services. You can manage cookie preferences through your browser settings.

12. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will notify users of material changes via email and update the "last updated" date. Continued use of our services after changes constitutes acceptance.

14. Contact Information

For any questions about this Privacy Policy, to exercise your rights, or to request account deletion, please contact us:

15. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority or get in touch with us at dev.samikc@gmail.com, so that we can improve our services.