Privacy Policy

1. Data Controller

KeepLink is operated by:

Michele Valentinuz
P.IVA: IT02887430300
Via Birti 5A, 39051 Vadena (BZ), Italy

For any privacy-related request, contact: privacy@keeplink.app

2. Data We Collect

We collect only the data strictly necessary to provide the service:

• Email address — collected at registration, used for account management and transactional communications (email verification, password reset, subscription confirmation).
• URLs and UTM parameters — the long URLs you shorten and any UTM parameters you configure. These are stored to make your short links functional.
• UTM templates — saved templates are stored and associated with your account.
• Technical data — IP address and timestamp of link creation, retained for security and abuse prevention purposes. Not used for marketing or profiling.
• Subscription data — if you purchase a paid plan via Gumroad, we receive your email address and subscription details from Gumroad to activate your plan.

3. Legal Basis for Processing

• Contract performance (Art. 6(1)(b) GDPR) — processing your email and content to provide the service you requested.
• Legitimate interest (Art. 6(1)(f) GDPR) — IP logging for security and abuse prevention.
• Legal obligation (Art. 6(1)(c) GDPR) — retention of data required by applicable law.

4. Data Retention

• Account data: retained until account deletion or 2 years of inactivity.
• Free plan links: automatically deleted after 7 days.
• Pro/Business links: retained until manually deleted or account closure.
• Security logs: retained for 90 days.

5. Third-Party Services

• Cloudflare (infrastructure and KV storage) — data processed within Cloudflare's network. Cloudflare Privacy Policy.
• Resend (transactional email) — used only to send verification and notification emails. Resend Privacy Policy.
• Gumroad (payment processing) — if you purchase a paid plan, payments are processed by Gumroad. We do not store credit card data. Gumroad Privacy Policy.

6. Your Rights (GDPR)

You have the right to: access your data, correct inaccurate data, request deletion, restrict processing, and data portability. To exercise these rights, contact privacy@keeplink.app. We will respond within 30 days.

7. International Data Transfers

Some of our service providers are located outside the European Economic Area:

• Gumroad Inc. (USA) — payment processing. Data transferred under Standard Contractual Clauses (SCCs). Gumroad Privacy Policy
• Resend (USA) — email delivery. Data transferred under appropriate safeguards. Resend Privacy Policy

We ensure your data remains protected through legally recognized transfer mechanisms compliant with GDPR requirements.

8. Age Requirement

KeepLink is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we discover data from a user under 18, we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of any material changes. Continued use of the service after notification constitutes acceptance.