Privacy Policy

This Privacy Policy explains how Link Agents ("Link Agents," "we," "us," or "our") collects, uses, discloses, and protects information when you use our website and application at linkagents.io and app.linkagents.io (together, the "Service"). By using the Service, you agree to the collection and use of information as described here.

1. Who we are

Link Agents is a link-building software platform for SEO agencies and marketing teams. The Service helps you find, qualify, and contact prospects for backlink outreach, and can connect to your own email accounts to send outreach and detect replies.

2. Information we collect

2.1 Information you provide directly

• Account information: your name, email address, password (stored as a salted hash, never in plain text), and organization name when you sign up.
• Campaign and prospect data: websites, contacts, and outreach content you create, upload, or generate in the Service, including CSV uploads, campaign settings, and client information for the organizations you work with.
• Email sending configuration: if you connect an SMTP account for sending outreach, we store the credentials you provide (encrypted at rest using industry-standard AES-256 encryption) solely to send email on your behalf.
• Billing information: if you subscribe to a paid plan, our payment processor collects your payment details directly; we do not store full card numbers on our own servers.

2.2 Information from connected Google and Microsoft accounts

If you choose to connect a Gmail or Outlook inbox for automatic reply detection, we request read-only access to that mailbox through Google's or Microsoft's official sign-in flow (OAuth). Specifically:

• For Gmail, we request the gmail.readonly scope — read-only access to your inbox. We cannot send email, delete email, or modify your Gmail account through this connection.
• For Outlook, we request the Mail.Read scope (plus offline_access so the connection doesn't require you to re-authenticate constantly) — the equivalent read-only access for Microsoft 365 / Outlook.com mailboxes.

We use this access only to automatically detect when a prospect replies to an outreach email you sent through the Service, and to match that reply back to the correct prospect and campaign so it appears in your dashboard. Specifically, our system:

• Periodically checks the connected mailbox for new messages that match the sender and subject line of outreach you sent through Link Agents (or that directly reference a message we sent, via standard email threading headers).
• Reads the content of a matched message so it can be classified (for example, as "Interested," "Not Interested," or "Unsubscribe") and shown to you in your inbox view.
• Does not read, store, or process email that does not match one of your own outreach threads — unrelated personal or business email in a connected mailbox is never retrieved or retained beyond what is technically necessary to check for a match.

Google API Services User Data Policy: Link Agents' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We do not use Gmail data to serve advertisements.
• We do not allow humans to read Gmail data except: (a) with your affirmative agreement, for a specific message, in order to provide customer support you requested; (b) where necessary for security purposes; (c) to comply with applicable law; or (d) where the data has been aggregated and anonymized.
• We do not transfer or sell Gmail data to third parties, including ad networks or data brokers.
• We do not use Gmail data to train or improve generalized (non-personalized) AI or machine learning models.

You can disconnect a Gmail or Outlook mailbox at any time from Settings → Inbox Connections within the Service, or by revoking access directly from your Google Account or Microsoft account security settings. Revoking access stops all further reading of that mailbox immediately; previously synced reply data already shown in your dashboard is retained as part of your campaign history unless you separately request its deletion.

2.3 Information collected automatically

We collect standard technical information when you use the Service, including IP address, browser type, device information, pages visited, and timestamps, generally through our hosting and analytics providers, to keep the Service secure and understand how it's used.

3. How we use information

• To provide, operate, and maintain the Service, including the AI-assisted prospecting, qualification, contact discovery, and outreach-drafting features.
• To send outreach emails and detect replies on your behalf, exactly as you've configured your campaigns.
• To communicate with you about your account, service changes, and support requests.
• To process payments and manage subscriptions.
• To monitor, secure, and improve the Service, including debugging and fraud prevention.
• To comply with legal obligations.

4. How we share information

We do not sell your personal information. We share information only with:

• Service providers who process data on our behalf under contract, including our database and hosting infrastructure (Supabase, Vercel), our AI model provider (Anthropic) for the AI-assisted features, and our transactional/fallback email delivery provider (Resend).
• Third parties you connect, such as Google or Microsoft when you link a mailbox, and any SEO data, contact-verification, or web-search providers used to power prospecting features — these interactions are governed by that provider's own terms as well as ours.
• Legal and safety purposes, where required to comply with law, enforce our Terms of Service, or protect the rights, property, or safety of Link Agents, our users, or others.
• Business transfers, if Link Agents is involved in a merger, acquisition, or sale of assets, in which case we'll notify you before information becomes subject to a different privacy policy.

5. Data retention

We retain account and campaign data for as long as your account is active. If you close your account, we delete or anonymize your data within a reasonable period, except where retention is required for legal, tax, or security purposes. OAuth tokens for a disconnected mailbox are deleted immediately upon disconnection.

6. Security

We use industry-standard safeguards to protect your data, including encryption of sensitive credentials at rest (AES-256), encrypted connections in transit (TLS), and access controls that restrict data to your own organization (row-level security enforced at the database layer, so one organization's data is never visible to another). No system is perfectly secure, and we cannot guarantee absolute security.

7. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at admin@linkagents.io. You can disconnect any linked mailbox and update or delete your account information directly within the Service.

8. Children's privacy

The Service is intended for business use by adults and is not directed to children under 16. We do not knowingly collect personal information from children.

9. International data transfers

Our infrastructure providers may process and store data in the United States and other countries. Where required, we rely on appropriate safeguards for any such transfers.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the effective date above and, where appropriate, notify you directly.

11. Contact us

Questions about this Privacy Policy or how we handle your data? Email us at admin@linkagents.io.