Privacy Policy
Last updated: 23 September 2026
This Privacy Policy explains what personal data LinkWise collects, why, how it's used, who it's shared with, how long it's kept, and the rights you have over it. It applies both to our subscribers and, separately, to the people our subscribers use LinkWise to research and contact. These two groups are treated very differently, and this policy is split accordingly.
1. Who we are
LinkWise is operated by LinkWise. If you have any questions about this policy or how your data is handled, contact info@getlinkwise.com.
2. The two groups this policy covers
- Section A covers subscribers: people who create a LinkWise account and use the service.
- Section B covers the people subscribers use LinkWise to find and contact: for example, a blog author whose public contact details LinkWise surfaces as a possible opportunity.
We collect and use data about these two groups for very different reasons and under different legal bases, so we've kept them separate below rather than describing them together.
Section A: Our subscribers
3. What we collect
Account data: your email address and password. Your password is handled entirely by our authentication provider (Supabase) using industry-standard hashing. We never see or store your raw password ourselves. If you tell us how you heard about LinkWise when you sign up (for example, LinkedIn, a search engine, another social platform, or word of mouth), we store that answer.
Profile data: your name (used to sign the outreach emails LinkWise drafts for you), your saved source article/topic preferences, and your email-client preference (e.g. Gmail, Outlook).
Usage and search data: the articles or topics you search from, the search queries LinkWise runs on your behalf, the matches found, and technical usage data for each search (used for billing and service-improvement purposes).
Saved-prospect data: the opportunities you choose to save, including any contact details, notes on outreach status, and related information about the third-party websites and individuals involved (see Section B for how we treat this specific category of data).
Subscription and payment data: your subscription status (free trial / active / cancelled) and billing history. Your payment card details are handled entirely by Stripe. We never see or store your full card number.
Technical data: standard web server logs generated by our hosting provider (e.g. IP address, browser type, timestamps), used for security, fraud prevention and diagnosing technical issues.
4. Why we collect it, and our legal basis
| What | Why | Legal basis |
|---|---|---|
| Account and authentication data | To create and secure your account | Performance of a contract (our Terms) |
| Profile and search preferences | To provide the core service | Performance of a contract |
| Usage/search data | To run searches, calculate billing, and improve matching quality | Performance of a contract; legitimate interests (service improvement) |
| Saved-prospect data | To let you track and manage your own outreach activity | Performance of a contract |
| Payment/subscription data | To process payment and manage your subscription | Performance of a contract; legal obligation (accounting/tax records) |
| Technical/log data | Security, fraud prevention, and abuse prevention (for example, preventing repeated free-trial claims using the same account after deletion) | Legitimate interests |
5. Where your data is stored and who processes it
- Supabase (account data, profiles, search history, saved prospects, and your automatically-refreshed backlink profile snapshot): hosted in the EU (Ireland).
- Netlify, Inc. (hosting, and the functions that run each search): based in the United States; data may be processed in US data centres.
- Anthropic (Claude, the AI model that judges matches, drafts outreach copy, and classifies query intent for AI Visibility): based in the United States. We send it the content of your source article and the candidate articles found, or the search queries being classified, so it can generate a judgment, draft copy, or a classification. Anthropic does not use API inputs or outputs to train its models by default; see Anthropic's current commercial terms for details.
- OpenAI (used only by AI Visibility, for Grow subscribers, to check whether ChatGPT cites your domain when answering a question): based in the United States. We send it the question text and the domain being checked; no personal data is involved in this exchange. OpenAI does not use API inputs or outputs to train its models by default; see OpenAI's current API data usage policy for details.
- Serper.dev: runs the underlying web searches that surface candidate articles.
- Keywords Everywhere / Open PageRank: looks up domain-level authority scores. No personal data is involved here, only domain names.
- DataForSEO (DataForSEO OÜ, registered in Estonia): provides backlink and domain-authority data for the Competitor Analysis, Broken Link Finder, and Backlink Profile tools, and Google AI Overview citation data for AI Visibility (Grow only). We send it domain names; it returns publicly-available backlink or citation data. No personal data is involved in this exchange. For Pro and Grow subscribers who set their own domain, we also run this same check automatically once a day to detect new dofollow backlinks and update your Outreach page. For any subscriber (Light, Pro or Grow) who sets their own domain, we separately run a full backlink profile refresh once a week and store the result so your Backlink Profile page stays up to date without you needing to run a manual check. No additional data beyond the domain name is involved in either automatic check.
- Google (favicon service): used to show each saved prospect's site icon in your Outreach page. We send it domain names only; no personal data is involved.
- Stripe: processes payments and manages billing. Based in the United States and Ireland.
- Resend: sends account-related emails (sign-up confirmation, password reset). Processes your email address only for this purpose.
Where any of these processors are located outside the UK/EEA, transfers are made under an appropriate safeguard (such as Standard Contractual Clauses) as required by UK GDPR.
6. Cookies and local storage
LinkWise uses your browser's local storage to remember preferences (like your last-used search source, if you're not logged in) and an authentication session token if you're logged in. We don't use advertising or third-party tracking cookies.
7. Retention
- Account and profile data: retained while your account is active, and deleted (along with associated profile, search history, saved prospects and related data) when you delete your account; see Section 8.
- Suppression-list entries: retained indefinitely, even after other account data is deleted, because their entire purpose is preventing future contact with someone who has asked not to be contacted. Only the minimum information needed for this purpose (the address and domain) is kept.
- A record that your email address has previously claimed a free trial: retained indefinitely, even after full account deletion. This is a narrow, specific exception to the deletion described in Section 8, and exists solely to prevent someone from deleting their account and immediately re-registering with the same email to claim another free trial. No other account data is kept alongside this record.
- Billing records: retained for as long as required by applicable accounting and tax law after your subscription ends.
8. Account deletion
You can delete your account at any time from your account settings. Doing so permanently removes your profile, search history, saved prospects, and related account data. This action cannot be undone.
Two narrow categories of data are deliberately not deleted, for the reasons explained above: suppression-list entries (Section 7), and the minimal record needed to prevent free-trial re-claims using the same email address (Section 7). Neither of these contains any of your other account data.
9. Your rights
Under UK GDPR, you have the right to: access the personal data we hold about you, correct it, request its deletion, restrict or object to how it's processed, request a copy in a portable format, and complain to the Information Commissioner's Office (ICO) if you believe we've mishandled your data.
To exercise any of these rights, contact info@getlinkwise.com. We'll respond within the timeframes required by law.
Section B: The people our subscribers search for and contact
LinkWise helps subscribers discover publicly available information, for example a blog author's name and a contact email listed on their own website, so they can consider a genuine outreach opportunity. If you're such a person and have questions about this section, contact info@getlinkwise.com.
10. What we process, and why
We process publicly available information (article content, author/site contact details where published) to power the matching and outreach-drafting features our subscribers use. This is necessarily automated. LinkWise doesn't manually review or specifically target any individual; it surfaces information already published on the open web in response to a subscriber's search.
Where a contact email is found, it is shown only to the subscriber who ran that specific search, and is used only to help them draft an outreach message, never for any other purpose, and never used to train AI models.
11. This is not the same as consent to be contacted
We do not contact anyone ourselves, and we do not verify that a subscriber has a lawful basis to email any address LinkWise surfaces. Publicly available contact information does not automatically mean someone has agreed to receive marketing. This is a matter for the subscriber to assess before they send anything, and our Terms & Conditions make this their explicit responsibility, not ours.
12. Suppression list
If you ask a LinkWise subscriber not to contact you again, they can record your address in LinkWise's suppression list. Once recorded, LinkWise will not surface your address to that subscriber's account again. If you want to know what LinkWise holds about you, or want an address removed, contact info@getlinkwise.com.
13. Legal basis for this processing
We rely on legitimate interests to process this category of data, specifically our legitimate interest (and that of our subscribers) in providing a research and outreach-organisation tool based on information already publicly available. We have balanced this against the privacy interests of the individuals concerned, including by building safeguards directly into the product (a consent-confirmation step before any draft is opened, a corporate-vs-individual warning, and the suppression list described above).
14. Children
LinkWise is intended for business use by adults and is not directed at children. We do not knowingly collect personal data from anyone under 18.
15. Security
We use reasonable technical and organisational measures to protect the data described in this policy, including row-level database access controls that ensure one subscriber can never access another subscriber's saved data, and encrypted storage of authentication credentials. No system is completely secure, and we cannot guarantee absolute security.
16. Changes to this policy
We'll update the "last updated" date above whenever this policy changes, and notify account holders by email of any material change.
17. Contact
LinkWise
info@getlinkwise.com
If you're unhappy with how we've handled your data, you also have the right to complain to the UK's Information Commissioner's Office at ico.org.uk.