Privacy Policy

1. Information We Collect

1.1 Account Information

When you register, we collect your name, email address, and password. If you subscribe to a paid plan, payment processing is handled by Paddle; we do not store your credit card details.

1.2 Link Analytics Data

When someone clicks a HikrLink short link, we collect:

• IP address (used for geolocation, then anonymised within 30 days)
• Referring URL (where the click came from)
• Browser and device type (user agent)
• Approximate geographic location (country and city level)
• Timestamp of the click
• A first-party identifier (hkclid) used to attribute the click within our platform

1.3 Cookies and Tracking

HikrLink uses first-party cookies for session management and authentication. We use a first-party click identifier (hkclid) for attribution across our platform services. We do not use third-party advertising cookies. We do not sell your data to third parties.

1.4 Usage Data

We collect information about how you use the Service, including pages visited, features used, and actions taken within the dashboard.

2. How We Use Your Information

We use collected information to:

• Provide and maintain the Service, including link shortening, analytics, and QR codes
• Process your subscription and billing through Paddle
• Send transactional emails (account verification, billing receipts, service updates)
• Improve the Service based on usage patterns
• Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations

3. Data Sharing

We share data only with:

Paddle (Merchant of Record): Processes payments, invoicing, and sales tax. Subject to Paddle's Privacy Policy.

Infrastructure providers: Google Cloud Platform hosts our infrastructure in the Asia-Southeast1 region. Subject to Google Cloud's data processing terms.

Legal requirements: We may disclose data if required by law, regulation, or valid legal process.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Retention

• Account data is retained for the duration of your account plus 30 days after deletion
• Click analytics data is retained for 24 months, after which it is aggregated and anonymised
• IP addresses are anonymised within 30 days of collection
• Billing records are retained as required by applicable tax and accounting laws

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Export your data in a portable format
• Object to or restrict certain processing of your data

To exercise these rights, email privacy@hikrl.ink. We will respond within 30 days.

6. Security

We implement industry-standard security measures including encryption in transit (TLS), secure credential storage, and access controls. While we take reasonable precautions, no method of transmission or storage is 100% secure.

7. International Data Transfers

Our infrastructure is hosted on Google Cloud Platform. Your data may be processed in jurisdictions outside your country of residence. We ensure appropriate safeguards are in place for any cross-border data transfers.

8. Children's Privacy

HikrLink is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at privacy@hikrl.ink.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The “Effective Date” at the top indicates when the policy was last revised.

10. Contact

For privacy-related enquiries:

Bouletteproof Ltd
East Wing, First Floor, Lifestyle Boulevard, Sottise Road, Grand Baie, Mauritius
privacy@hikrl.ink