Privacy policy

LinckUp is a Nigeria-founded service that provides NFC cards, counter stands and connected digital profiles that let businesses and professionals share their contact details, links and services with a single tap or scan. We serve customers in Nigeria and, where available, internationally.

This policy explains what information we collect, why we collect it, how it is used and protected, and the choices you have. Contact us using the details below if you need more information about how a feature uses your information.

We collect information you give us directly, and limited technical information generated when the service is used:

• Account details: name, email address, and authentication details (handled securely by our authentication provider, Supabase Auth, including Google sign-in if you choose it).
• Profile content: the business details, links, images, text and theme you choose to publish on your LinckUp page. Anything you publish on a public profile is publicly visible by design.
• Order details: name, phone number, delivery address and order preferences needed to fulfil a physical card or stand order.
• Payments: Paystack processes payments for physical products. We use your order amount, email address and transaction reference to request and verify payment. Payment status and provider transaction records are retained for order support and reconciliation. Payment card details are entered through Paystack’s checkout, not through a LinckUp card-details form.
• LinckUp connections: when you choose to share your details with a profile owner, we store the name, email address and any phone number you submit, together with the connection time and your account association where you are signed in. Those details are available to that profile owner.
• Reviews: if you leave a review of LinckUp, we collect the display name, star rating and review text you submit, plus a verified email address. Your email is used only for verification and moderation and is never shown publicly.
• Messages: anything you send us through the contact form, support channels or WhatsApp.
• Usage analytics: privacy-safe, aggregated events such as profile views and link clicks that power your dashboard statistics. Our application analytics use hashed visitor identifiers rather than storing raw IP addresses in those event records. Hashed identifiers can still relate to a visitor; they are not a guarantee of anonymity. Details voluntarily shared through LinckUp forms are handled separately, as explained above.
• Security data: short-lived, hashed identifiers used to rate-limit abuse-sensitive actions (for example signing in or verifying a code). These are not used to profile you.

• To create and operate your account and public profile.
• To process, produce and deliver physical orders (cards, counter stands, review stands).
• To show you analytics about how visitors interact with your profile.
• To verify reviews and moderate content submitted to the site.
• To respond to support and contact requests.
• To keep the service secure, prevent abuse and meet legal obligations.

We do not sell personal information. We may use your LinckUp plan and paid-product purchase history to show relevant LinckUp product or feature announcements. We do not share these audience selections with third-party advertising networks. You can dismiss an announcement and continue using the site.

We use a small set of technologies that store data in your browser, and nothing more than the service needs:

• Authentication cookies: required to keep you signed in and to secure your dashboard, Admin and account pages. These are strictly necessary.
• Appearance preference: your light/dark mode choice is remembered on your device.
• Promotion preferences: browser storage remembers which LinckUp announcements have appeared, so they do not repeatedly interrupt your visit. For signed-in customers we also keep account-level display records. Clearing browser storage may cause an announcement to appear again.
• Cloudflare Turnstile: a bot-protection challenge on sensitive forms (for example signup and login). It may set its own short-lived cookies to detect automated abuse.
• No advertising cookies. We do not run advertising trackers, retargeting pixels or third-party ad networks, and we do not share data with advertising platforms.

You can clear cookies and other website storage through your browser settings. Doing so may sign you out and reset appearance and announcement preferences.

We do not sell personal information. We share information only with service providers that help us run LinckUp — for example database hosting (Supabase), email delivery (Resend), deployment infrastructure (Vercel), bot protection and scheduled jobs (Cloudflare), and payment processing (Paystack) — and only to the extent needed to provide the service, or when required by law.

Paystack explains its handling of payment data in its privacy notice.

LinckUp is built on cloud infrastructure that may process data in countries other than your own, including the United States and the European Union. Where we transfer personal information across borders, we rely on appropriate safeguards and applicable legal mechanisms.

If you are in Nigeria, your personal information is processed in line with the Nigeria Data Protection Act 2023, including its principles of lawfulness, purpose limitation and data minimisation. If you are in a jurisdiction with additional rights — for example the EU or the UK under the GDPR or UK GDPR — those rights also apply to you where the law does, including rights to access, rectification, erasure, restriction, portability and objection.

LinckUp connection records are set to expire after 30 days for registered members and 15 days for guests. Expired connections stop appearing in the dashboard, and a scheduled cleanup removes their stored records. Copies a profile owner has already saved outside LinckUp are not removed by this cleanup.

We keep account and order information for as long as your account is active, or as needed to meet legal, accounting or dispute-resolution requirements. Transactional order records needed for accounting and consumer-protection purposes may be retained in a minimal, non-identifying form after account deletion. Hashed security identifiers are kept only briefly and are not used to identify you.

You can deactivate your account from your dashboard at any time — this hides your public profile and pauses activity while keeping your data, and you can reactivate later. You can also permanently delete your account, which removes your profile and personal data. Account deletion requires you to verify a code sent to your email, and we clean up your uploaded files as part of the process.

We use industry-standard measures including row-level database security, encrypted connections (HTTPS), server-side validation and rate limiting. No method of transmission or storage is completely secure, so while we work hard to protect your information we cannot guarantee absolute security.

LinckUp is intended for businesses, professionals and adults. We do not knowingly collect personal information from children under 13, and accounts require users to be of legal age in their jurisdiction.

You may access, correct, export or request deletion of your personal information at any time from your account settings, or by contacting linckup.nfc@gmail.com. We respond to legitimate requests without undue delay.

We may update this policy as the service evolves. Material changes will be reflected here with an updated "Last updated" date, and where practical we will notify account holders.

Questions about this policy can be sent to linckup.nfc@gmail.com. You may also contact us through the contact page on this website.