This policy explains how LinkHunter handles personal data — the data of people who use the platform, and the business contact data our customers work with when they reach out to website owners. We wrote it to be read, not skimmed past.
1. Who we are
LinkHunter is operated by [Company name — set LEGAL_ENTITY_NAME], [Registered address — set LEGAL_ADDRESS] (“we”, “us”). You can reach our privacy team at support@linkhunter.cc.
This policy covers the LinkHunter website, the web application and the emails the service sends.
2. Our two roles
Data protection law treats us differently depending on whose data it is:
For account data — the people who sign up and use LinkHunter, visitors to our website and people who contact us. We decide why and how this data is used.
For customer data — the prospect websites, publisher contact details, outreach emails and replies that our customers manage in their workspaces. Our customer is the controller and instructs us; we process it only to provide the service. Our Data Processing Addendum sets out those terms.
3. What we collect
Account and usage data (we are controller)
- Account details: name, email address, a password stored only as a salted hash, time zone, workspace names, your role and team invitations.
- Security and activity records: sign-ins, session devices (browser and approximate device type), IP addresses in security logs, and an audit log of important actions such as role changes, approvals and exports.
- Messages to us: what you send through the contact form or by email. The contact form stores your IP address only as a keyed hash used for abuse prevention.
- Integration settings: API keys and mailbox passwords you connect. These are encrypted at rest and never shown again in full.
- Billing: LinkHunter does not take payments yet. When paid plans launch, payment card details will be handled by a payment provider and this policy will be updated first.
Customer data (we are processor)
- Prospect websites: domains, page titles and metrics from search and SEO data providers the customer connects.
- Business contact details: names, job titles and business email addresses published on a website’s own contact, about or team pages, or provided by a contact-data provider the customer connects — always with the source recorded.
- Outreach records: emails drafted and sent from the customer’s own mailbox, replies, internal notes, negotiation offers, approvals and backlink checks.
We do not knowingly collect special-category data (such as health or political opinions), and we ask customers not to store it in LinkHunter.
4. How we use data and our legal bases
| Purpose | Data | Legal basis (UK/EU GDPR) |
|---|---|---|
| Create and run your account and workspaces | Account details | Contract |
| Keep accounts secure, prevent abuse and fraud | Security records, hashed IPs | Legitimate interests |
| Send service emails (verification, password reset, invitations, alerts) | Name, email | Contract |
| Answer your questions and requests | Messages to us | Legitimate interests; legal obligation for rights requests |
| Improve reliability and fix problems | Error logs with secrets removed | Legitimate interests |
| Provide the platform to customers (discovery, analysis, outreach, monitoring) | Customer data | Processed on the customer’s instructions; the customer relies on its own basis, typically legitimate interests for relevant business-to-business outreach |
| Comply with law and enforce our terms | Any relevant data | Legal obligation; legitimate interests |
We do not sell personal data, “share” it for cross-context behavioural advertising, or use it to build advertising profiles. We do not use customer data to train AI models.
5. If you received an outreach email
If a LinkHunter customer emailed you about your website, that customer chose to contact you and is responsible for the message. We provide the software. Here is what you should know:
- Where your address came from: LinkHunter only keeps business addresses published on your website’s own pages (or supplied by a contact-data provider the customer connected), and records the page where it was found.
- Stop all further emails: every email contains a one-click unsubscribe link. Using it adds your address to that customer’s suppression list, and LinkHunter blocks any future email to it from that workspace — including follow-ups already scheduled.
- Access, correction or deletion: send a request through our contact form (choose “Data request / Privacy”) or email support@linkhunter.cc. We will pass it to the customer that holds your data, help them respond, and record your objection so you are not contacted again.
7. International transfers
Some providers process data outside the UK or the European Economic Area. Where they do, we rely on adequacy decisions or on Standard Contractual Clauses (and the UK Addendum or International Data Transfer Agreement) together with supplementary measures where needed. Ask support@linkhunter.cc for a copy of the relevant safeguards.
8. How long we keep data
- Account data: for as long as your account is active. After you close your account or ask us to delete it, we delete or anonymise it within 30 days, unless we must keep a record by law (for example, invoices once billing exists).
- Customer data: as long as the customer keeps it in their workspace. Customers can delete prospects, contacts and campaigns at any time, and we delete a closed workspace’s data within 30 days of the request.
- Suppression records: kept for as long as the workspace exists, because forgetting an unsubscribe would mean contacting that person again.
- Backups: daily server backups are kept on a rolling basis and roll off automatically, normally within 14 days.
- Sessions and one-time tokens: removed automatically after they expire.
9. How we protect data
We use encryption in transit (HTTPS), encryption at rest for API keys and mailbox passwords, hashed passwords and tokens, strict separation between workspaces, protection against cross-site request forgery and server-side request forgery, and regular backups. Read more on our Security page.
10. Your rights
Depending on where you live, you can ask us to:
- confirm whether we process your data and give you a copy (access)
- correct inaccurate data (rectification)
- delete your data (erasure)
- limit how we use it (restriction)
- object to processing based on legitimate interests — including outreach — at any time
- receive your data in a portable format
- withdraw consent where we rely on it
California residents have the right to know, delete and correct personal information, and to not be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined in the CCPA/CPRA.
To exercise a right, use the contact form or email support@linkhunter.cc. We reply within one month (extendable by two months for complex requests, in which case we will tell you) and may ask you to confirm your identity. If the request concerns customer data, we will forward it to the customer and support them in answering.
You can also complain to your data protection authority — in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU, the authority in your country. We would appreciate the chance to help first.
11. AI and automated decisions
LinkHunter uses AI to score websites, draft emails and classify replies. These outputs are suggestions that customers review; they do not make decisions about individuals that have legal or similarly significant effects. Anything involving money always requires a person’s approval.
12. Children
LinkHunter is a business tool and is not intended for anyone under 16. We do not knowingly collect children’s data; if you believe a child has given us data, contact support@linkhunter.cc and we will delete it.
14. Changes to this policy
If we make a material change, we will update the date above and tell account holders by email or in the app before it takes effect.
15. Contact
[Company name — set LEGAL_ENTITY_NAME]
[Registered address — set LEGAL_ADDRESS]
Privacy: support@linkhunter.cc · General support: support@linkhunter.cc