Privacy, Cookies and Data Protection

We take your privacy seriously.

IDLINK is built around trust, transparency and user control. This page explains how we collect, use, protect and manage personal data, and how we give you clear choices over cookies and similar technologies.

International privacy standards GDPR-aligned LGPD-aware Cookie control Data rights

Manage privacy choices Contact privacy support

1. Who we are and who this Policy applies to

IDLINK is a digital platform that allows users to create, manage and distribute bio pages, links, shortened URLs, QR Codes, digital content, analytics dashboards, social features, integrations, APIs and related functionality.

This Policy applies to visitors, registered users, page owners, people who access links or QR Codes created through IDLINK, customers, partners and anyone who interacts with the platform.

Depending on the context, IDLINK may act as the controller of data related to platform operation, accounts, security, billing, support, cookie consent, internal analytics and service administration. Users may also act as independent controllers when they decide to publish content, links, pages, campaigns, forms, integrations or their own flows through IDLINK pages.

Privacy contact: help@idlink.io. This channel may be used for questions, data subject requests, consent withdrawal, objection, access, correction, deletion or other requests permitted by applicable law.

2. How the cookie notice and preference panel work

IDLINK uses a cookie notice with four main paths: change language, open preferences, reject optional cookies, or accept all and continue. Optional analytics and marketing technologies are designed not to load before the applicable authorization is given.

Taal

The language icon opens the platform language selector. This action does not authorize optional analytics or marketing cookies.

Voorkeuren

The settings icon opens the preference panel. This panel shows the available categories: strictly necessary cookies, analytics cookies and marketing cookies.

Save and continue

In the current flow, Save and continue applies the selected choices and returns the user to the notice when needed. This button alone does not load analytics or marketing technologies unless those categories have been selected.

Reject optional cookies

When the user rejects optional cookies, IDLINK does not load optional analytics or marketing technologies. Strictly necessary cookies remain active because they are required to keep the platform secure and functional.

Accept all and continue

This option authorizes strictly necessary cookies, analytics cookies and marketing cookies. After this choice, technologies such as Google Analytics, Google Ads, DoubleClick, Meta Pixel and similar tools may be loaded according to the authorized categories.

You can reopen cookie preferences at any time: open cookie preferences .

3. Categories of cookies and similar technologies

tekst	Purpose	When it is used	Voorbeelden
Strictly necessary	Keep the platform secure, enable sessions, login, basic functionality, preference records, fraud prevention and protection against abuse.	Always active because the service cannot operate securely without them.	Session cookie, security token, consent record, language preference and access controls.
Analytics	Measure platform usage, visits, pages, technical events, devices and performance in order to improve the service.	Only after analytics authorization when required by applicable law.	Google Analytics and IDLINK internal analytics.
Marketing	Measure ads, conversions, campaigns, remarketing, attribution and advertising performance.	Only after marketing authorization when required by applicable law.	Google Ads, DoubleClick, Meta Pixel and similar technologies.

IP addresses and technical metadata may be processed by servers, infrastructure providers, security tools, technical logs and anti-fraud systems when necessary for operation, availability, security, abuse prevention and compliance with legal obligations.

4. Personal data we may process

IDLINK may process different types of data depending on how the platform is used. The data involved may vary if a person only visits a public page, creates an account, publishes content, uses links, scans QR Codes, subscribes to paid features, uses APIs or contacts support.

Account data: name, email address, public identifier, user ID, password protected through one-way encryption, preferences, language, settings and account status.
Profile and content data: bio pages, links, URLs, QR Codes, texts, images, videos, avatars, descriptions, metadata, posts and uploaded or connected content.
Usage data: clicks, visits, accessed pages, traffic source, events, interaction time, device, browser, operating system, language, screen size and performance metrics.
Technical and security data: technical logs, session records, tokens, login attempts, security events, abuse signals, request limits, blocks and anti-fraud records.
Payment data: plan, subscription status, billing history, transaction references, invoices, tax information and data processed by payment providers.
Support data: messages, requests, attachments, email communications and information required to resolve issues or respond to requests.
Consent data: notice version, date, selected categories and technical records required to remember and demonstrate the applied choice.

5. Purposes of processing

We process personal data only for purposes compatible with IDLINK operation, the user relationship, service delivery and legal, contractual, regulatory and security obligations.

Create, authenticate, maintain and protect accounts.
Operate bio pages, links, shortened URLs, QR Codes, dashboards, APIs and platform features.
Enable publication, hosting, display, organization and distribution of user-submitted content.
Process payments, plans, subscriptions, invoices, chargebacks and tax obligations.
Prevent fraud, phishing, spam, malware, abusive scraping, attacks, misuse and security violations.
Measure performance and improve the experience when analytics is authorized or when the measurement is strictly technical and necessary.
Measure ads, conversions and campaigns when marketing is authorized.
Respond to support, privacy, abuse, report and administrative communications.
Comply with legal, regulatory, tax, accounting obligations and valid orders from competent authorities.
Exercise rights in judicial, administrative, arbitration, investigation, collection and dispute matters.

6. Legal bases

IDLINK processing of personal data may rely on different legal bases depending on the purpose, applicable jurisdiction and relationship with the data subject.

Legal basis	How it applies to IDLINK
Performance of a contract	Account creation and maintenance, delivery of contracted features, operation of links, QR Codes, bio pages, dashboards, plans, APIs and service-related support.
Consent	Optional analytics and marketing cookies, pixels, remarketing, campaigns, advertising measurement and other non-essential technologies when required by law.
Legitimate interests	Security, abuse prevention, proportional service improvement, aggregated analytics, protection of rights, platform integrity and administrative communications when the rights of the data subject do not override those interests.
Legal or regulatory obligation	Tax, accounting, anti-fraud, regulatory, recordkeeping obligations and responses to competent authorities.
Exercise of rights	Defense of IDLINK, users and third parties in collections, disputes, investigations, judicial, administrative or arbitration proceedings.
Fraud prevention and security	Authentication, prevention of unauthorized access, phishing, spam, malware, API abuse and prohibited activities.

7. International privacy standards

IDLINK is available globally. Depending on the country or region, local privacy, data protection, consumer protection, electronic communications, cybersecurity, tax, accounting or platform-specific rules may apply.

General commitments

Provide clear information about relevant processing activities.
Use legal bases appropriate to the context and jurisdiction.
Respect rights requests when required by applicable law.
Apply technical and organizational measures designed to protect personal data.
Limit optional tracking technologies until authorization when required.
Maintain records and security logs when necessary for compliance, protection of rights and security.

8. GDPR — European Union, United Kingdom and equivalent regions

For data subjects protected by the GDPR or equivalent rules, IDLINK seeks to observe the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality and accountability.

Data subject rights

Where applicable, you may request access, rectification, erasure, restriction of processing, portability, objection to processing and withdrawal of consent. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Non-essential cookies

Analytics cookies, marketing cookies, pixels and similar technologies are treated as optional when they are not strictly necessary to provide the requested service. When required, these technologies load only after consent.

International transfers

IDLINK may use providers located in other countries. Where applicable, we seek to adopt contractual, technical and organizational safeguards to protect data in international transfers.

9. LGPD — Rights in Brazil

For data subjects protected by the Brazilian General Data Protection Law, IDLINK seeks to observe principles such as purpose, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination, accountability and responsibility.

Data subject rights

You may request confirmation of processing, access, correction, anonymization, blocking, deletion, portability, information about sharing, review of automated decisions when applicable, objection to processing and withdrawal of consent.

Consent and withdrawal

When processing depends on consent, you may withdraw it. Withdrawal does not invalidate processing previously carried out lawfully and does not prevent processing based on other applicable legal bases.

Data protection contact

LGPD-related requests may be sent to help@idlink.io. We may request additional information to confirm identity and protect accounts against unauthorized requests.

10. Data sharing and providers

IDLINK does not sell personal data. We may share data with providers and partners strictly necessary to operate, protect, measure, bill and improve the platform, always according to the applicable purpose.

Type of third party	Purpose	Basis or control
Hosting, infrastructure and content delivery	Keep the platform available, fast, secure and resilient.	Necessary for operation and security.
Payment processors	Process subscriptions, charges, refunds where applicable, invoices and fraud prevention.	Contract, legal obligation and security.
Analytics	Measure visits, events, performance and platform usage.	Consent where applicable.
Advertising and pixels	Measure campaigns, conversions, remarketing and advertising attribution.	Marketing consent where applicable.
Support and communication	Respond to requests, send operational notices and resolve issues.	Contract, legitimate interests or legal obligation.
Authorities and authorized third parties	Comply with valid orders, legal obligations, defense of rights and abuse investigations.	Legal obligation, exercise of rights or fraud prevention.

11. Public content, links and user responsibility

Content published through IDLINK, including pages, public identifiers, links, images, videos, texts, QR Codes and metadata, may become public depending on the nature of the feature or the user settings. This content may be accessed, shared, copied, indexed by search engines or redistributed by third parties.

Users are responsible for ensuring that they have the rights and authorizations required to publish, link or distribute content, trademarks, images, videos, texts, URLs and third-party materials. IDLINK may remove, restrict or block content that violates laws, third-party rights, platform policies or security measures.

12. Retention and deletion

We retain personal data for as long as necessary to fulfill the purposes described in this Policy, operate the platform, comply with legal obligations, prevent fraud, protect rights, resolve disputes and maintain security.

Account data: retained while the account is active and, after closure, for the period necessary for legal obligations, security and defense of rights.
Published content: retained while active on the platform or until deleted by the user, except when retention is necessary for legal obligations, abuse prevention, security or defense of rights.
Payment data: retained according to tax, accounting, contractual, regulatory and anti-fraud requirements.
Security records: retained for a proportional period for prevention, investigation and response to incidents, abuse and unauthorized access.
Cookie consent: retained to remember the choice, apply preferences and demonstrate the consent state.
Backups: may temporarily retain data until replacement or expiration of backup cycles.

13. Security and incidents

We use technical and organizational measures designed to protect data against unauthorized access, loss, alteration, improper disclosure, destruction, abusive use and fraud. These measures may include access controls, technical logs, session protection, abuse monitoring, request limits, permission review, backups and practices compatible with the nature of the platform.

If a security incident creates a relevant risk to data subjects, IDLINK will evaluate appropriate measures, which may include mitigation, investigation, communication to competent authorities and communication to affected data subjects when required by applicable law.

14. Children and teenagers

IDLINK is not directed to children below the minimum age required by applicable law. Minors may use the platform only when permitted by law and, when required, with authorization from parents or legal guardians.

When we identify use incompatible with legal requirements involving children or teenagers, we may restrict, suspend or remove accounts and content, considering the best interests of the minor where applicable.

15. Automated decisions, anti-fraud and moderation

We may use automated or semi-automated mechanisms to detect spam, phishing, malware, abuse, fraud, security violations, abnormal API use, policy violations and prohibited activities.

These measures are used to protect the platform, users, third parties and service integrity. Where applicable, users may request review or clarification through the privacy or support channel.

16. How to exercise rights

To exercise data subject rights, request information, correct data, request deletion, withdraw consent, object to processing or address any privacy matter, contact us by email at help@idlink.io.

To protect accounts and prevent unauthorized requests, we may request identity confirmation or additional information before fulfilling certain requests.

Manage privacy choices Send request

17. Updates to this Policy

IDLINK may update this Policy to reflect legal, technical, operational, product, security or business changes. When relevant changes occur, we may update this page, display an additional notice or request new consent when necessary.

Last updated: May 2026.