Privacy Policy

1. Overview & Scope

This Privacy Policy applies to all services offered by GoLink, including our marketing website (golink.buzz), dashboard and API endpoints (app.golink.buzz), and short link redirection services (go.golink.buzz and connected custom domains).

We act as a Data Controller for personal data collected from our direct account holders, visitors, and organization managers. When processing click-level redirect analytics on behalf of our users, we operate as a Data Processor in accordance with applicable data protection laws.

2. Information We Collect

We collect information in three main categories: information you provide directly, information collected automatically, and information from third-party integrations.

3. How We Use Information

We use the information we collect for the following legitimate business purposes:

• Providing & Operating Services: Executing ultra-fast, sub-millisecond link redirects, managing workspaces, and generating dynamic QR codes.
• Analytics & Reporting: Aggregating click counts, geographic distribution, referring domains, and device metrics for workspace dashboards.
• Security & Abuse Prevention: Detecting phishing, malware distribution, bot traffic, denial-of-service attempts, and violations of our Acceptable Use Policy.
• Communications: Sending account confirmations, security notices, transactional emails, and essential product updates.
• Customer Support: Diagnosing technical issues, investigating error reports, and responding to inquiries.

4. Link Click Analytics & End Users

When an end user clicks on a short link powered by GoLink, our edge servers process minimal technical data required to route the request and generate analytics for the link creator:

• IP Address & Geolocation: We inspect the incoming IP address solely to determine coarse location (Country, Region, City) and Internet Service Provider (ISP). We do not store raw, unmasked IP addresses in public analytics logs.
• Referrer URL: The webpage or mobile application from which the visitor followed the short link.
• User-Agent: Browser type, operating system, and device category (Desktop, Mobile, Tablet) used to access the link.
• Timestamp: Date and time of the click event.

Privacy-First Commitment: We do not track individual end users across unrelated third-party websites, nor do we construct behavioral advertising profiles from link clicks.

5. Data Sharing & Third Parties

We never sell, rent, or monetize your personal data or link traffic. We share information only under the following limited circumstances:

• Service Providers & Infrastructure: Trusted vendors who provide cloud hosting, edge compute, database hosting, email delivery, and performance monitoring under strict confidentiality agreements.
• Organization Members: Collaborators you explicitly invite to your GoLink workspace will have access to shared links and analytics according to their assigned role.
• Legal Requirements: If required to do so by applicable law, court order, or governmental regulation, or when good-faith disclosure is necessary to protect the safety and rights of GoLink, our users, or the public.
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

6. Security & Data Retention

We implement industry-standard technical and organizational security measures to protect your information, including:

• Encryption in transit using TLS 1.3 across all endpoints.
• Encrypted data storage at rest with strict role-based access control.
• Automated bot detection, rate limiting, and DDoS mitigation.
• Secure authentication with salted password hashing and OAuth tokenization.

We retain personal data for as long as your account is active or as needed to provide you services. When you delete a link, workspace, or account, associated data is purged or irreversibly anonymized in accordance with our retention schedules.

7. Your Rights & Choices (GDPR / CCPA)

Depending on your location, you may have specific statutory rights regarding your personal information, including:

• Right to Access & Portability: Request a copy of the personal data we hold about you in a structured, machine-readable format.
• Right to Rectification: Correct inaccurate or incomplete profile information directly through your dashboard settings.
• Right to Erasure (“Right to Be Forgotten”): Delete your account and associated workspace data at any time.
• Right to Restrict or Object to Processing: Object to specific processing activities or withdraw consent.
• Non-Discrimination: We will never discriminate against you for exercising any of your statutory privacy rights.

To exercise any of these rights, please email us at privacy@golink.buzz. We will authenticate and respond to requests within 30 days.

8. Cookies & Local Storage

We use cookies and browser local storage strictly for essential operations:

• Authentication & Session Cookies: Maintaining your logged-in state across dashboard navigation.
• Security Tokens: Protecting forms and API routes against Cross-Site Request Forgery (CSRF).
• Preferences: Storing UI preferences such as active workspace selections and theme settings.

9. Children's Privacy

GoLink is designed for businesses, creators, and professionals. Our services are not directed to children under the age of 16, and we do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data, we will promptly delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect modifications in our practices, technologies, or legal obligations. We will notify you of material changes by updating the “Last Updated” date at the top of this page or by sending an email notification to registered account holders.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please reach out to our privacy and legal team: