Privacy Policy

1. Who we are

Nayalink ("we", "us") is a URL-shortening and link-analytics service operated by [Legal entity name], registered at [registered address]. For any privacy question you can reach us at .

2. Data we collect

• Account data: the email address and authentication details you provide when you create an account, plus your account and profile settings.
• Billing data: processed by our payment provider (Stripe). We do not store full card numbers on our servers.
• Link and click analytics: for each redirect we record aggregate, non-identifying signals — approximate country and city, referrer, browser, operating system, device type, language, and any UTM parameters. We do not store visitors' IP addresses and do not set tracking cookies or build per-visitor profiles.

3. How we use data

We use account and billing data to provide the service, authenticate you, and process subscriptions. We use aggregate click analytics to give you the reporting features of the product and to keep the service secure — including scanning destination URLs for phishing and malware.

4. Legal basis (GDPR)

Where the GDPR applies, we process personal data on the basis of contract performance (providing the service you signed up for), our legitimate interests (security, abuse prevention, and aggregate product analytics), and consent where required. [Confirm the legal bases with your counsel.]

5. Hosting and processors

Our application and databases are hosted in the European Union. Payments are handled by Stripe. These providers act as processors or sub-processors on our behalf. [List all sub-processors and link a Data Processing Agreement.]

6. Data retention

We keep account data for as long as your account is active. Aggregate analytics are retained to power historical reporting. When you delete your account, associated data is removed or anonymized. [Specify exact retention periods.]

7. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact . You may also lodge a complaint with your local data-protection authority.

8. Cookies

The marketing site and app use only cookies that are strictly necessary (for example, to remember your language preference or keep you signed in). We do not use advertising or cross-site tracking cookies, and our click analytics are cookieless.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.