Legal
Privacy Policy
What personal data Linq collects, why, who helps us process it, how long we keep it, and the choices and rights you have.
Last updated October 24, 2026
The short version
- We collect your account details, what you put on your card, the contacts you collect and how your card is used (views, saves, taps).
- Your public card is public: anyone with its link, QR code or NFC card can see it.
- We don't sell your data and we don't show ads. Payments go through PayPal; we never see your card details.
- A few trusted providers help us run Linq (hosting, sign-in, email, payments, notifications).
- You can see, correct, export or delete your data at any time. Just email us.
This summary helps you find your way; the full text below is what applies.
1. Who we are
Linq Business (“Linq”, “we”, “us”) runs the Linq web app (app.linq-business.com), the Linq mobile apps and this website (linq-business.com). This policy explains how we handle personal data when you use them.
- For your account, your card and how you use Linq, we decide how your data is used: we’re the “controller”.
- For the contacts you collect with Linq (people who share their details from your card, or whom you add or scan), you decide how they’re used. We process them on your behalf (we’re a “processor”). If you’re one of those contacts, see section 9.
You can reach us at hello@linq-business.com.
2. What we collect
Your account
- Your name, email address and language.
- How you sign in. Passwords are handled by our sign-in provider, Clerk, and we never see them. If you sign in with Google or GitHub, we receive your name, email address and profile picture from them.
- Your plan, and the teams you belong to and your role in them.
Your card
- What you add to your card: name, job title, company, phone and WhatsApp numbers, email, website, social links, bio, photo, logo, colors and your card link.
- Documents you upload (for example a CV or brochure) and whether each is public.
- Physical NFC cards linked to your account.
Contacts you collect
- Details people share with you from your card: name, email, phone, company, job title, website and their message.
- Contacts you add yourself or by scanning a QR code, and what you note about them: notes, tags, where you met and follow-up reminders.
How your card is used (insights)
- Views of your card and where they came from (NFC tap, QR code, link, email signature or video call background), contact saves, taps on your links, document views and downloads, and contact form submissions.
- We record these events against your card to show you insights. We don’t record visitors’ IP addresses or device details with them. Our hosting providers keep standard technical logs (which include IP addresses) for a short time for security and troubleshooting.
Payments
- Your subscription’s status, plan, number of seats, dates and PayPal subscription ID. PayPal handles your payment details under its own privacy statement; we never see your card or bank details.
The mobile app
- If you allow notifications, your device’s push token, its platform (iOS or Android) and the app’s language, so we can tell you about new contacts.
- If you scan a QR code, the camera is used on your device only. We don’t upload or keep camera images.
Emails we send
- A record of each email (recipient, type and whether it was delivered), kept for 180 days to make sure emails arrive and to help with support.
Other
- If you join the NFC card waitlist: your name, email, country, and optionally your city, phone and a note.
- What you tell us when you contact us.
- On this website: Google Analytics collects pages visited, approximate location and device and browser information using cookies. See our Cookie Policy.
3. How we use it
| Purpose | Data | Legal basis (where GDPR applies) |
|---|---|---|
| Run Linq: show your card, deliver contacts to you, sync your devices, show insights, run teams | Account, card, contacts, insights, teams | Contract |
| Sign you in and keep accounts secure; prevent abuse and fraud | Account, technical logs | Contract; legitimate interests |
| Take payments and manage subscriptions and seats | Payments, account | Contract; legal obligation (accounting) |
| Send service emails: welcome guide, billing confirmations and receipts, team invitations and team alerts | Account, teams, payments | Contract; legitimate interests |
| Send push notifications about new contacts | Push token, contacts | Consent (you can turn them off on your phone) |
| Help when you contact us | Account, what you send us | Contract; legitimate interests |
| Improve Linq, using aggregated or de-identified information | Usage of the app and website | Legitimate interests; consent for analytics cookies where required |
| Comply with the law and enforce our terms | Any relevant data | Legal obligation; legitimate interests |
We don’t send marketing emails unless you’ve agreed to receive them, and you can unsubscribe at any time. We don’t sell personal data, share it for advertising, or use it to make decisions about you that have legal or similarly significant effects.
4. Who can see your data
- Anyone with your card’s link, QR code or NFC card sees what you publish on it.
- Your team. If you’re in a team, its owners and admins can see and edit your team card, see its insights and the contacts it collects, and see your name, email and role. Other members can see the team’s cards.
- Services you connect. If you export contacts or send them to a webhook, Zapier, Make or your CRM, they go to that service.
- Our service providers, who process data for us under contract and only on our instructions:
| Provider | What they do |
|---|---|
| Clerk | Sign-in and account security |
| Convex | Database, file storage and backend |
| Vercel | Hosting for this website and the web app |
| PayPal | Payments and subscriptions |
| Resend | Sending emails |
| Expo, Apple and Google | Delivering push notifications to phones |
| Google (Analytics and Fonts) | Website statistics and fonts on this website |
- Authorities, if the law requires it, or to protect the rights, safety and property of our users, the public or Linq.
- A buyer or successor, if Linq is involved in a merger, acquisition or sale of assets. We’ll tell you before your data becomes subject to a different privacy policy.
5. International transfers
Our providers may process data in the United States and other countries outside your own. When data leaves the European Economic Area, the United Kingdom or another country with transfer rules, we rely on safeguards such as the European Commission’s Standard Contractual Clauses or the provider’s certification under an adequacy framework.
6. How long we keep it
- Account, card and team data: for as long as your account exists. When you delete your account, we delete or anonymize its data within 30 days, apart from what we must keep by law. Copies in backups are removed on the backups’ regular cycle.
- Contacts: until you delete them or your account. Contacts collected by a team card stay with the team until the team deletes them.
- Insights events: for as long as your card exists.
- Email records: 180 days.
- Billing records: as long as tax and accounting laws require.
- Security and audit logs: as long as needed to keep Linq secure and to investigate problems.
- Waitlist entries: until ordering opens in your country and we’ve told you, or until you leave the waitlist.
7. Your rights and choices
Depending on where you live, you have the right to:
- access the personal data we hold about you and get a copy of it;
- correct it (you can edit most of it directly in the app);
- delete it, including your whole account;
- export it in a portable format (Pro accounts can also export contacts to CSV from the app);
- object to or restrict some uses of it, and withdraw consent where we rely on it;
- complain to your data protection authority.
To use any of these rights, email hello@linq-business.com from the address on your account. We’ll answer within 30 days. We may need to confirm it’s you first. You can also delete your account yourself with Delete account in the mobile app’s Settings.
You can also turn off push notifications in your phone’s settings, change your language in the app, and block or delete cookies in your browser.
8. Security
We protect your data with measures such as encryption in transit (HTTPS), access controls, sign-in handled by a dedicated provider, hashed PINs for physical cards and signed webhook deliveries. No system is perfectly secure, so please use a strong, unique password and tell us right away if you notice anything suspicious.
9. If someone shared your details with a Linq user
If you shared your details from someone’s Linq card, or they added or scanned your details, that person (or their team) decides how your details are used. Please contact them first to access, correct or delete your details. If you can’t reach them, email us and we’ll help.
10. Children
Linq isn’t meant for children. You must be at least 16 to create an account, and we don’t knowingly collect data from children under 16. If you think a child has given us personal data, contact us and we’ll delete it.
11. Changes to this policy
We may update this policy when Linq or the law changes. We’ll show the date of the latest version at the top of this page, and we’ll tell you by email or in the app before a significant change applies.
12. Contact
Questions or requests about your privacy: hello@linq-business.com.
Questions about this policy?
Email us at hello@linq-business.com and we'll get back to you.