Privacy policy

Last updated: 5 November 2026 (version 1.10)

This policy explains what personal data Linkento collects, why, who it is shared with, and the choices and rights you have. It covers creators who sign up for Linkento, and visitors who open a Linkento page or use the tools on it, such as booking a call or signing up for a creator's emails.

1. The short version

We collect what we need to run your page: your sign-in details, your date of birth, the content you add, your plan, and simple statistics about visits to your page.
Your date of birth is never shown to anyone. We use it only to check your age (see section 3).
We do not sell your data or show ads. Linkento itself does not set advertising or tracking cookies.
A creator on the Ultra plan can add their own Meta Pixel or Google Analytics to their page. If they do, visitors are asked first, and those services receive information about the visit only if the visitor allows it (see section 7).
When a visitor books a call, signs up for emails or sends a message through a creator's page, those details go to that creator, who decides how to use them (see section 4).
Payments are handled by Razorpay. Your card, bank and UPI details go to Razorpay, not to us.
Anything you put on a published page is public.
You can see and change your data in your dashboard, and you can delete your account at any time.

2. Who we are

Linkento (linkento.com) is operated by Konetisetty Venkateswara, an individual based in Bengaluru, India ("Linkento", "we", "us"). For personal data about creators, and for running Linkento itself, we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). For details visitors send to a creator through the creator's tools, see section 4.

Contact for privacy questions, requests and complaints: contact@linkento.com.

3. What we collect about creators

Your account

Your email address.
Your password, if you sign up with email. Passwords are handled by our sign-in provider and stored only in hashed form; we cannot see your password.
If you sign in with Google: your name, email address and profile photo, which Google shares with us when you choose to sign in.
Security records. When you sign in on a browser we haven't seen before, change your password, email, username or name, or ask to delete your account, we record what happened, when, the type of device and browser (for example "Chrome on Android") and an approximate place worked out from your IP address (city and country). We use this to email you about each change and to show it to you in Settings → Account history. We don't store the IP address itself.
Previous usernames and when you changed them. Your old username is held for you for 30 days and forwards to your page.

Your date of birth

We ask for your date of birth when you sign up (or in Settings, if your account was made before we asked). If you are between 13 and 18, we also record when you confirmed that a parent or guardian agreed.

We use it for these two things, plus the birthday ring below if you choose it:

to check you are old enough to use Linkento (13 or older), and that a parent or guardian has agreed if you are under 18;
when you are signed in, to open pages and links that creators have limited to people aged 18, 21 or 25 and over, or keep them closed if you are younger, without asking you each time.

Optional: the birthday ring. If you are 18 or older, you can choose to show a festive ring around your photo on your birthday (Settings, Date of birth). It is off unless you turn it on. When it is on, anyone who visits your page that day can tell it is your birthday; your age and year of birth are never shown. We also keep the time zone of the device you turned it on from, so the ring shows on your day. You can turn it off at any time.

It is kept apart from your public profile, where only you can read it. Your age is worked out from it on our servers, and the date itself is never shown on your page or to other creators, visitors or anyone else. You can add it only once, so it cannot be changed to get past an age limit; if it is wrong, email us and we will correct it.

Your page

Your username, display name, bio and profile photo.
Files you upload: profile photos, background photos and videos, link images, and fonts.
Your links and other blocks: titles, web addresses, descriptions, badges, social profile addresses, a WhatsApp number if you add the WhatsApp button, and a GitHub username if you add the GitHub block.
Your design choices, custom CSS, saved designs, and whether your page is published.
Page footer choices: whether to hide the Linkento line, and the line you write instead.

Your plan and payments

If you buy a paid plan, we keep which plan you are on, whether you pay monthly or yearly, its status (for example active or cancelled), when the current period ends, and the reference number Razorpay gives your subscription. We pass your name and email address to Razorpay to fill in the payment form.

Your card number, bank account and UPI details are entered on Razorpay's form and kept by Razorpay; we never see or store them. Razorpay may also send you receipts and renewal messages.

Tools and connected accounts

Book a call: your meeting types, weekly hours, time zone and booking rules, and the meetings visitors book with you.
Book a table (Ultra): your sittings, booking limits and time zone, and the table requests guests send you.
Google Calendar: if you connect it, we keep a sign-in token from Google, stored encrypted, so we can check when you are busy. We ask Google only for your busy times, never for what your events are, who is invited or where they are.
YouTube and Spotify: if you connect them, we keep the public channel or artist you chose (its name, picture and address), so your page can show your latest videos or music.
YouTube API Services: Linkento uses YouTube API Services to get the public videos of the channel you connect (titles, thumbnails, dates and view counts). We keep this for no more than a few hours before asking YouTube again, and we stop as soon as you disconnect YouTube in Tools. YouTube's handling of this data is covered by the Google Privacy Policy, and your use of it by the YouTube Terms of Service.
Auto DMs (Instagram): to connect your Instagram professional account, you sign in through Meta (with Instagram or Facebook) and choose the business portfolio and Instagram account to share with Linkento. We keep the account's username, account id and profile picture address, an id for that connection, and an access token from Meta, stored encrypted, so we can show your posts, read comments on them and send the DMs your rules set up. We also keep your rules (the post, keywords, message, link and any public replies). We use this data only to run Auto DMs for you: we never post, like or send anything other than what your rules say, and we do not sell it, use it for advertising or share it with anyone except Meta. You can disconnect at any time in Tools → Auto DMs, which deletes the token straight away. You can also remove Linkento's access in Meta's settings, which stops our access at once.
Marketing tools (Ultra): the Meta Pixel and Google Analytics IDs you add, your contact form auto-reply, and, if you turn on email-list sync, your Mailchimp or Kit key (stored encrypted) and audience or form ID.
Scheduled links: a record of which "your link is live" and "your link has closed" emails we have already sent you.

Community designs

If you publish a design, we keep the design, its name, your username (shown with it) and how many times it has been installed, including which accounts installed it.

Founding creator programme

Your invite code, who invited you (if anyone), when an invitation qualified, and when your reward ends.

Verification requests

If you ask for the Verified badge, we collect what you put in the request: your name or your organisation's name, the social profile you link (and that its bio shows the code we give you), and, for organisations, the website and work email address you confirm with a code. You may also upload documents: an identity document (PAN card, passport, driving licence, voter ID, national ID card, or a masked Aadhaar where only the last 4 digits are visible; we do not accept full Aadhaar numbers) and, for organisations, a registration document.

We use these only to decide your request. Documents are kept in private storage that only Linkento administrators can open, each time through a link that expires within a minute, and every time a document is opened is recorded. We delete the documents as soon as we approve or decline your request. We keep only a record of the request: the type of document you sent (not the document itself), the decision, the date and, if declined, the reason.

Short links

If you make short links, we keep the ending, the address it leads to, the title you give it and whether it is switched on, along with the statistics described in section 5. Linkento administrators can see your short links in order to deal with reports and misuse.

Messages and technical logs

If you email us, we keep the message and our reply so we can help you.
Like any website, our hosting and database providers keep short-term technical logs, which can include IP addresses, browser information and the time of a request. These are used to keep the service running, find errors and prevent abuse.

4. Details visitors send through a creator's page

Creators can add tools to their page that ask visitors for details:

Book a call: the visitor's name, email address, the meeting time and, if they give them, a phone number and a note.
Book a table: the guest's name, phone number, email address, how many people are coming, the time they ask for and, if they add one, a note.
Email sign-up: the visitor's email address, and when they confirmed it.
Contact form: the visitor's email address and message, and their name if they give it.

These details go to the creator whose page it is. The creator decides what to do with them, and is responsible for using them lawfully, as our Terms of service require. For these details we act on the creator's behalf: we store them, show them to the creator in their dashboard, and send the emails the tool needs. We do not use them for anything else.

The emails we send for these tools are:

to visitors: a link to confirm an email sign-up; a meeting confirmation with a calendar file and a link to cancel; emails about a table request (sent, confirmed, declined or cancelled) with a link to cancel; and, if the creator has turned it on, an automatic reply to a contact-form message;
to creators: an alert about each new message, each booked meeting and each table request.

People who comment on a creator's Instagram posts

If a creator uses Auto DMs, Instagram tells us about new comments on their posts. When a comment contains one of the creator's keywords, we send that person the creator's message as a private reply on Instagram (and, if the creator turned it on, a public reply under the comment). To do this, and to show the creator what happened, we keep the commenter's Instagram username and account id, the comment's text (up to 300 characters), which rule matched, and whether the message was sent. Comments without a keyword are not stored. Instagram allows only one such private reply per comment. To stop receiving them, do not comment the keyword, or block or restrict the creator's account on Instagram. These records are deleted automatically after 90 days. To have them deleted sooner, email us at contact@linkento.com with your Instagram username, and we will delete them.

If the creator is on the Ultra plan and has turned on email-list sync, confirmed sign-ups are also sent to the creator's own Mailchimp or Kit account, where that service's policy and the creator's choices apply.

If you are a visitor and want your details changed or removed, contact the creator first. You can also write to us at contact@linkento.com, and we will pass your request on or help where we can.

5. Statistics about visits to Linkento pages

When someone opens a published Linkento page, clicks a link on it, or opens one of your short links, we record:

that a visit or click happened, when, and which page, link or short link it was for;
the website the visitor came from, as a domain name only (for example "instagram.com"), never the full address;
the type of device (mobile, tablet or desktop), worked out from the browser's information, which we then discard;
the country, as provided by our hosting provider.

We do not store the visitor's IP address with these statistics, we do not set cookies on visitors for statistics, and we do not link visits to a person. Known bots are ignored. To avoid counting the same person twice, the visitor's browser keeps a small note for 30 minutes saying that the page was already counted; it never leaves their browser.

Page owners do not get statistics from their own visits while they are signed in. How far back a creator can see their statistics depends on their plan. After 30 days, individual records are combined into daily totals (for example, views per day, clicks per link and visits per country), and the individual records are deleted. The daily totals are kept for up to 1 year, the longest any plan shows, and then deleted.

6. How we use your data

We use personal data only to:

create and run your account, and let you sign in;
check your age, as described under "Your date of birth";
apply the age limits creators set on their pages and links;
show your page to visitors and show you previews in your dashboard;
run the tools you add, and send the emails they need (section 4);
show you statistics about your page;
take payments for paid plans, apply the features of your plan, and handle cancellations and refunds;
run the Founding creator programme and the Community gallery;
keep Linkento working, find and fix problems, and prevent spam, fraud and abuse;
reply to you and send messages about your account, such as password reset emails, emails about your plan and important changes to our terms;
meet our legal obligations, and handle complaints and legal requests.

We process your data on the basis of the consent you give when you create your account and use Linkento, and for the "legitimate uses" the DPDP Act allows, such as meeting legal obligations. You can withdraw your consent at any time by deleting your account; this does not affect anything we did before.

We do not use your data for advertising, and we do not sell it or rent it to anyone.

7. What loads from other services on Linkento pages

Some parts of a Linkento page are provided by other companies. When a visitor's browser loads them, that company receives the technical information any website receives, such as the visitor's IP address and browser, and may set its own cookies, under its own privacy policy.

Tracking pixels (Ultra). If a creator on the Ultra plan adds a Meta Pixel or Google Analytics, visitors to their page see a short notice naming the services, with "Allow" and "Don't allow". The pixel loads only after "Allow" (and never for the creator themselves). Meta or Google then set their own cookies and receive information about the visit under the creator's agreement with them. The answer is remembered in the visitor's browser for all Linkento pages; "Cookie settings" at the bottom of such a page changes it, and taking back an "Allow" removes the cookies those services set on Linkento. Linkento does not receive the data these services collect.
YouTube. A YouTube block shows thumbnail pictures loaded from YouTube. The video player loads only when a visitor presses play, from YouTube's privacy-enhanced address (youtube-nocookie.com).
Spotify. A Spotify block shows Spotify's own player, which loads from Spotify when the block comes into view.
Spam protection. Forms on Linkento (sign-up and log-in, and the booking, email sign-up, contact and report forms on pages) are protected by Cloudflare Turnstile. It loads from Cloudflare and checks signals from the browser to tell people from bots; when a form is sent, the check and the sender's IP address go to Cloudflare to confirm it.
"Continue with Google". Our home, sign-up and log-in pages show a button loaded from Google. Linkento pages that creators share do not load it.

8. What is public

When your page is published, everything on it is public: your username, display name, bio, profile photo, background, links, the WhatsApp number or GitHub username you add, and the text you add. Anyone with the address can see it, and search engines may list it. If you hide your page, only you can see it, and we ask search engines not to list it. If you publish a design to the Community gallery, the design and your username are shown there.

"About this account" on your page shows when you joined and how many times you changed your username, but not your old usernames.

Your email address, date of birth, plan and payment details, statistics, saved designs, connected accounts, marketing tool settings, account settings and the details your visitors send you are never shown on your page. If you set an age limit, visitors see that your page or link has one. Anyone who opens one of your short links is sent to the address it leads to, so that address is effectively public too.

9. Cookies and similar technologies

Linkento itself uses only what it needs to work:

Sign-in cookies. When you sign in, we set cookies that keep you signed in. Without them you cannot use the dashboard.
Invite code. If you follow an invite link, your browser remembers the invite code until you finish setting up your page.
Visit counting. On Linkento pages, the 30-minute note described in section 5, kept in the visitor's own browser.
Age check. If a visitor answers an age check on a page or link with an age limit, we set a cookie that remembers the answer for 30 days, so they are not asked again on every page. It holds only that they accepted a warning, or their age in years; not their date of birth or anything that identifies them. It is set only after they answer.
Preferences. Your browser remembers choices such as dark mode in the dashboard, or that you closed the "open on your phone" card on a page.
Tracking pixel answer. If a page has a tracking pixel, the visitor's browser remembers whether they allowed it, so they are not asked on every page.
Device recognition. A cookie with a random code that lets us recognise a browser you have signed in on before, so we email you only about sign-ins from browsers we haven't seen.

Linkento does not use advertising or analytics cookies of its own, so these are the only ones we use and they are needed for the site to work. Other services that load on a page may set their own, as described in section 7; a creator's tracking pixels do so only if the visitor allows them.

We share personal data only with service providers that help us run Linkento, and only as much as they need:

Supabase: database, sign-in, file storage and account emails.
Vercel: hosting and delivering the website.
Cloudflare: our domain's name servers, forwarding of emails sent to our address, and the spam protection described in section 7.
Amazon Web Services (Amazon SES): delivers the emails we send, such as sign-up codes, password reset codes, meeting, table and sign-up confirmations, message alerts, security notices and decisions on verification requests.
Twilio SendGrid: delivers some of our emails while we finish moving them to Amazon SES.
Meta (Instagram): if a creator connects Instagram for Auto DMs, Instagram sends us comments on their posts, and we send the creator's DMs and replies through Instagram.
Razorpay: takes payments for paid plans and manages renewals. Razorpay is responsible for the payment details you give it, under its own privacy policy.
Google: "Continue with Google" sign-in, and, if you connect it, your Google Calendar busy times.
YouTube, Spotify and GitHub: we ask them for the public videos, music or profile you choose to show.
Services you connect yourself: Mailchimp or Kit if you turn on email-list sync, and Meta or Google if you add a tracking pixel. Data you send them is handled under your own agreement with them.

These providers handle data on our behalf and under their own security and privacy commitments.

We may also share data when the law requires it, for example in response to a lawful request from a court or government authority, or to protect the rights and safety of our users, the public or Linkento. If Linkento is reorganised or transferred to another owner, your data may be transferred as part of that, and the new owner must respect this policy. We will tell you before that happens.

11. Where your data is kept

Our service providers may store and process data on servers outside India. When data is transferred outside India, we do so as permitted under Indian law, including any restrictions the Government of India places on transfers to particular countries.

12. How long we keep data

Your account and page: for as long as you have an account. This includes your date of birth, which is deleted with your account.
Meetings and email sign-ups: until the creator removes them, or deletes their account.
Table requests: declined and cancelled requests are deleted 90 days after the table's date, and all others 1 year after it, automatically. Deleting the account removes them at once.
Auto DMs: the record of each matching comment (username, comment text and what was sent) for 90 days, then deleted automatically. Rules stay until the creator deletes them. Disconnecting Instagram in Linkento deletes its token at once. If you remove Linkento's access in Meta's settings instead, our access stops at once, and when Meta tells us, or when you ask us at contact@linkento.com, we delete the connection, rules and records.
Statistics about visits and clicks: individual records for 30 days, then only daily totals, for up to 1 year (the longest any plan shows), then deleted automatically.
Contact-form messages: until the creator deletes them, and no longer than their plan keeps them: 90 days on Free, 1 year on Pro, and until deleted on Ultra.
Your plan: the record of your plan is kept while you have an account. Razorpay keeps its records of payments and refunds for the period the law requires.
Age check cookie on visitors' browsers: 30 days from the answer; visitors can clear it at any time in their browser.
Files you remove: deleted from storage automatically, normally within a minute of being removed. A file that you could still bring back with Undo is kept until you leave the dashboard.
When you delete your account: your page is hidden, connected accounts (such as Instagram and Google Calendar) are disconnected, and everything Auto DMs kept is deleted, all at once. If you have a paid plan, it stops renewing as soon as you ask to delete your account; you keep it until the end of the period you already paid for if you sign in again before the deletion. Everything else (your profile, page, links, statistics, uploaded files and the details your visitors sent you) is deleted 7 days later, unless you sign in again before then, which keeps your account. Copies may remain in our providers' backups for a limited period, normally no more than 30 days, before they are overwritten.
Security records and username history: kept while you have an account.
Community designs: removed from the gallery when you delete your account. Copies other creators already installed stay on their pages.
Technical logs: kept for a short period by our providers, as their own policies set out.
Verification documents: deleted as soon as we approve or decline the request. The record of the request (document types, decision, date) is kept while you have an account.
Messages to us and reports: for as long as needed to deal with them, and afterwards where we need a record of complaints and the action taken.
Where the law requires us to keep information for longer, for example about content removed after a complaint, we keep it for the period the law sets.

If you do not sign in or use your account for a long time, we may contact you and later delete the inactive account, as the law requires or allows. We will always warn you first.

13. How we protect your data

We use reasonable security safeguards suited to a service like Linkento. These include encrypted HTTPS connections, database rules that let each account access only its own data, hashed passwords, encrypted storage of the keys and tokens for services you connect, and keeping access to production systems to the minimum. No service can be completely secure, so we cannot promise that a breach will never happen.

If a personal data breach happens, we will inform the Data Protection Board of India and the people affected, as the DPDP Act requires.

14. Your rights and choices

Under the DPDP Act, you have the right to:

Access: get a summary of the personal data we hold about you and how we use it.
Correction and update: fix or complete your data. Most of it you can change yourself in your dashboard.
Erasure: have your data deleted. You can delete your account yourself in Settings, and disconnect any connected account in Tools.
Withdraw consent: stop us processing your data, by deleting your account.
Grievance redressal: complain to us and get a response.
Nominate: name another person who can exercise these rights for you if you die or become unable to do so.

To use any of these rights, email contact@linkento.com from the email address on your account. We may need to confirm it is really you. We will reply as soon as we can, and within the time the law requires. Visitors asking about details they sent to a creator: see section 4.

If you are not satisfied with our response, you can complain to the Data Protection Board of India.

15. Children

You must be at least 13 to use Linkento. If you are between 13 and 18, you may use Linkento only with the permission of a parent or legal guardian, as explained in our Terms of service. We ask for your date of birth when you sign up to check this, and we do not let anyone under 13 create an account. While you are under 18 and signed in, pages and links limited to people aged 18 and over stay closed to you. Only a person aged 18 or over, or a parent or guardian, can buy a paid plan.

We do not track or monitor the behaviour of children, and we do not show targeted advertising to anyone. If you are a parent or guardian and believe your child is using Linkento without your permission, contact us at contact@linkento.com and we will help you review or delete the account.

16. Visitors to Linkento pages

Each Linkento page is created by its owner, who chooses what appears on it, where its links lead, which tools it has and, on Ultra, whether it uses tracking pixels. When you click a link, you leave Linkento, and the website you visit has its own privacy policy. If you have a concern about a specific page, contact the page owner, or report it to us at contact@linkento.com.

17. Changes to this policy

We may update this policy as Linkento changes or the law develops. We will change the "Last updated" date at the top. If a change is significant, we will tell you in advance, for example by email or in your dashboard.

18. Grievance Officer and contact

If you have a question, request or complaint about your personal data or this policy, contact:

Grievance Officer: Konetisetty Venkateswara
Email: contact@linkento.com

We will acknowledge complaints within 24 hours and aim to resolve them within 15 days.