Privacy Policy

This Privacy Policy describes how LinkrAPI ("we", "us", or "our") collects, uses, and protects your personal information when you use linkrapi.com, our REST API, and our dashboard.

1. Information We Collect

We collect only the information necessary to deliver our services:

• Account information: Your email address and name, collected via Clerk authentication at sign-up.
• Discord tokens: Your Discord user token, provided voluntarily so we can interface with Midjourney on your behalf. Tokens are stored encrypted using AES-256 (Fernet) — never stored in plain text. Decryption occurs only in memory at the moment of use and is never logged.
• API usage logs: Task IDs, image generation prompts, timestamps, and status codes — retained for debugging and audit purposes.
• Payment data: Billing is processed by Freemius. We do not store or have access to your card numbers or payment credentials.
• Technical identifiers: IP addresses and browser user-agent strings, collected for security monitoring and abuse prevention.

2. How We Use Your Information

We use your information solely to:

• Deliver the API service — routing image generation requests to Midjourney via your Discord account
• Process billing and manage your subscription via Freemius
• Send transactional emails related to account events and billing
• Monitor for abuse and maintain platform security and stability
• Improve service reliability, latency, and overall performance

3. Data Storage and Security

We take the security of your data seriously, particularly your Discord token:

• Our servers are hosted on DigitalOcean with disk encryption enabled at rest.
• Discord tokens are encrypted with AES-256 (Fernet) before being written to the database. They are never stored in plain text.
• Tokens are decrypted only in memory at the moment of API execution — never logged, never exposed in API responses.
• Generated images are served from Cloudflare R2 CDN (cdn.linkrapi.com) with permanent URLs accessible only via your account.
• API usage logs and task records are retained for up to 90 days for debugging purposes, then purged.

4. Sharing of Information

We do not sell, rent, or trade your personal data. We share data only with the following service providers, strictly as necessary to operate the platform:

• Clerk — authentication provider. Handles sign-in, session management, and JSON Web Tokens (JWTs).
• Freemius — billing provider. Processes payments and manages subscription lifecycle.
• Cloudflare — CDN and DDoS protection layer for cdn.linkrapi.com and our main domain.
• DigitalOcean — hosting infrastructure provider for our backend servers and database.

Each provider is bound by their own privacy policy and, where applicable, a Data Processing Agreement (DPA).

5. Cookies and Tracking

We use essential cookies for authentication, managed by Clerk, and functional localStorage entries for UI preferences such as light/dark mode. We do not use advertising cookies, cross-site tracking, or third-party analytics. For full details, see our Cookie Policy.

6. Your Rights

You have the right to access, correct, or request deletion of your personal data at any time. To exercise these rights, contact us at contact@linkrapi.com. We will respond within 30 days.

Deleting your account removes your Discord tokens, API keys, and personal identifiers from our systems. Anonymized usage logs may be retained for the duration of the standard 90-day retention window.

7. Children's Privacy

LinkrAPI is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us immediately at contact@linkrapi.com and we will delete the account promptly.

8. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after an update constitutes your acceptance of the revised policy.

9. Contact

For privacy-related questions or data requests, contact us at contact@linkrapi.com or use the contact form on our website. We typically respond within 24–48 hours on business days.