Privacy Policy

1. Introduction

LinkDrop (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our document sharing platform and related services (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account Information: When you create an account, we collect your name, email address, and profile information. We use Google Sign-In for authentication, which provides us with your Google account email and name.
• Documents and Content: We store the PDF documents you upload to the Service, along with extracted text, preview images, and any metadata associated with your documents.
• Organization Information: If you create or join an organization, we collect organization names, member information, and workspace settings.
• Communication: When you contact us for support or request an invite, we collect your email address and any information you provide in your message.
• Payment Information: If you purchase a subscription, payment information is processed by third-party payment processors (such as Stripe). We do not store your full payment card details.

2.2 Information Automatically Collected

When you use the Service, we automatically collect certain information, including:

• Usage Data: Information about how you interact with the Service, such as pages viewed, documents accessed, share links created, and features used.
• Device Information: Device type, operating system, browser type and version, IP address, and device identifiers.
• Log Data: Server logs, including timestamps, request URLs, error messages, and performance metrics.
• Analytics: Aggregated usage statistics, document view counts, share link analytics, and engagement metrics.

2.3 Information from Third Parties

We may receive information about you from third-party services:

• Authentication Providers: When you sign in with Google, we receive your Google account information (email, name) as permitted by your Google account settings.
• Payment Processors: Payment processors provide us with transaction information, subscription status, and billing details necessary to process payments.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process and store your documents, including AI-powered analysis and review features
• Create and manage your account, organizations, and workspace settings
• Enable document sharing, including generating shareable links and managing access controls
• Process payments and manage subscriptions
• Send you service-related communications, such as account updates, security alerts, and support responses
• Monitor and analyze usage patterns to improve the Service and develop new features
• Detect, prevent, and address technical issues, security threats, and fraudulent activity
• Comply with legal obligations and enforce our Terms of Service

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Your Consent

We share information when you explicitly consent, such as when you share a document link with others or invite members to your organization.

4.2 Service Providers

We may share information with third-party service providers who perform services on our behalf, including:

• Cloud Storage: We use Vercel Blob Storage to store your documents and files.
• Payment Processing: Payment processors (such as Stripe) handle subscription billing and payment transactions.
• Authentication: Google Sign-In provides authentication services.
• Analytics: We may use analytics services to understand how the Service is used (aggregated and anonymized data).
• Hosting and Infrastructure: We use cloud hosting providers to operate the Service.

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety, or that of our users or others.

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

5. Document Sharing and Public Links

When you create a shareable link for a document, you control who can access it. We provide tools to:

• Set password protection on share links
• Control whether recipients can download PDFs
• Track who has viewed your shared documents (when available)

Important: Share links may be accessible to anyone who has the link (unless password-protected). You are responsible for:

• Keeping your share links secure and not sharing them publicly unless intended
• Ensuring you have the right to share the documents you upload
• Complying with any confidentiality obligations related to shared documents

We are not responsible for unauthorized access to your documents that results from your failure to secure your share links or account credentials.

6. AI-Powered Features

The Service uses artificial intelligence to analyze, summarize, and review your documents. When you use AI features:

• We process your document content through AI services to generate summaries, reviews, and insights
• AI-generated content is stored on our servers and associated with your account
• We may use aggregated, anonymized data to improve our AI models and features
• AI-generated content is provided for informational purposes only and should not be relied upon as professional advice

We do not use your document content to train third-party AI models without your explicit consent, except in aggregated and anonymized form.

7. Data Security

We implement technical and organizational measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure storage of documents and data
• Access controls and authentication mechanisms
• Regular security assessments and updates
• Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

When you delete your account or documents:

• We will delete your account information and associated documents from our active systems
• Some information may remain in backup systems for a limited period
• We may retain certain information as required by law or for legitimate business purposes (e.g., transaction records, security logs)

If you wish to delete your account or request deletion of specific information, please contact us at hi@lnkdrp.com.

9. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us at hi@lnkdrp.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

You can also manage certain aspects of your information through your account settings, such as updating your profile information, managing organization memberships, and controlling notification preferences.

10. Children’s Privacy

The Service is not intended for individuals under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at hi@lnkdrp.com, and we will take steps to delete such information.

11. International Data Transfers

The Service is operated from the United States. If you are located outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

By using the Service, you consent to the transfer of your information to the United States and other countries, which may have different data protection laws than your country of residence.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to delete your personal information (subject to certain exceptions)
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at hi@lnkdrp.com.

13. European Privacy Rights

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to access, rectify, or erase your personal data
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent at any time
• The right to lodge a complaint with a supervisory authority

Our legal basis for processing your personal data includes: (1) your consent, (2) performance of a contract, (3) compliance with legal obligations, (4) protection of vital interests, and (5) legitimate interests.

14. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and authenticate your account
• Remember your preferences and settings
• Analyze how you use the Service
• Provide and improve the Service

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the Service.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated Privacy Policy on our website
• Updating the “Last updated” date
• Sending you an email notification (for significant changes)

Your continued use of the Service after such modifications constitutes your acceptance of the updated Privacy Policy. If you do not agree to the modified Privacy Policy, you must stop using the Service.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Email: hi@lnkdrp.com

We will respond to your inquiry within a reasonable timeframe.