Privacy Policy

REPARTO CUBANO STORE LLC ("Company," "we," "us," or "our"), operating the LNK99 platform at https://lnk99.app, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.

This Policy applies to all users of lnk99.app and complies with applicable US privacy laws including the California Consumer Privacy Act (CCPA), and incorporates principles aligned with the General Data Protection Regulation (GDPR) for international users.

This Policy describes our data practices. Where applicable law requires consent for optional technologies, we request it separately and you may withdraw it at any time.

A. Information You Provide Directly:

• Account data: name, email address, and chosen username. Password authentication is handled by Firebase Authentication; LNK99 does not receive or store your plaintext password.

• Profile content: bio, links, social media handles, profile photo, and any other content you add to your public page.

• Payment data: billing name, billing address, and last 4 digits of card (full card details are handled exclusively by Stripe — we never store raw card numbers).

• Domain registration data: when you buy a domain, Stripe collects your legal name, email, telephone number, and postal address so we can send the required registrant contact to Cloudflare Registrar. LNK99 stores the order and registration status, not a separate copy of the checkout contact details.

• Communications: messages you send to our support team.

B. Information Collected Automatically:

• Log data: IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps.

• Device data: device type, unique device identifiers, and mobile network information.

• Usage data: features used, links clicked on your public profile, time spent on pages.

• Cookies and similar technologies: session cookies, persistent cookies, and local storage (see Section 6).

C. Information from Third Parties:

• OAuth providers: If you sign in via Google, we receive your name, email address, and profile photo from that provider, subject to their privacy policy.

• Connected TikTok accounts: If you choose to connect TikTok, we receive the TikTok account identifier, display name, avatar, approved scopes and, only when separately authorized, public profile or video metadata. TikTok does not provide LNK99 with your email through Login Kit.

• Connected Shopify stores: If you install or connect the LNK99 Shopify app, we receive the store domain, store name, approved scopes and product catalog information needed to provide the integration. The initial integration requests read-only product access and does not request customer or order data.

• Analytics providers: Aggregated and anonymized usage statistics from analytics services.

We use your personal information for the following purposes:

• Service Delivery: Creating and managing your account, providing the link-in-bio platform, processing payments, registering and configuring domains at your request, and displaying your public profile.

• Communication: Sending transactional emails (receipts, password resets, subscription renewals), service announcements, and, with your consent, marketing communications. You may unsubscribe at any time.

• Analytics & Improvement: Understanding how users interact with the Service to improve features, fix bugs, and optimize performance.

• Security & Fraud Prevention: Detecting and preventing fraudulent transactions, unauthorized access, abuse, and violations of our Terms of Service.

• Legal Compliance: Complying with applicable laws, regulations, legal processes, and enforceable government requests.

• Dispute Resolution: Resolving disputes, investigating complaints, and enforcing our Terms of Service.

Legal basis (for GDPR users): We process data on the basis of (a) contractual necessity, (b) legitimate interests (security, fraud prevention, service improvement), (c) consent (marketing), and (d) legal obligation.

We do NOT sell your personal information. We may share your data only in the following circumstances:

• Service Providers: Vendors that support the Service, including Vercel (application hosting and custom-domain routing), Firebase/Google Cloud (authentication and database services), Stripe (payments and domain-registration checkout data), Cloudinary (media hosting), Cloudflare (security, DNS, certificates, and domain registration), Resend (transactional email), and MailerLite (creator email marketing features).

• User-authorized platforms: TikTok and Shopify process authorization and integration data under their own terms and privacy policies when you explicitly connect those services.

• Creator-configured advertising tools: A profile creator may configure Meta Pixel or TikTok Pixel on a public profile. These optional tools load only after the visitor gives explicit consent through the privacy control.

• Public Profile: Information you choose to display on your LNK99 profile page is publicly accessible by anyone with your profile URL. You control what content appears on your public page.

• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or a prominent Service notice before your data is transferred and becomes subject to a different privacy policy.

• Legal Requirements: We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

• With Your Consent: We may share information with third parties when you explicitly authorize us to do so.

We retain your personal data for as long as your account is active or as needed to provide the Service. We also retain data to comply with legal obligations, resolve disputes, and enforce our agreements.

When you request account deletion, we disable your public profile and delete primary application data associated with the account. We may retain limited records when necessary for fraud prevention, payment disputes, tax, accounting, or other legal obligations.

Connected-account credentials are stored encrypted and removed when you disconnect the provider or delete your LNK99 account. We also request revocation or uninstallation from the provider when its API is available. Short-lived authorization and webhook replay records expire automatically and are used only for security.

Domain-registration records and registrant contact data may need to be retained by Cloudflare, the registry, ICANN-accredited service providers, and us for the life of the registration and any legally required period afterward. Account deletion does not erase registry records or automatically cancel a registered domain.

Aggregated or de-identified information that can no longer reasonably identify you may be retained for service analytics and security.

We use cookies and similar technologies to:

• Essential cookies: Maintain your login session and security state. These cannot be disabled.

• Functional cookies: Remember your preferences (theme, language).

• Analytics cookies: Understand aggregate usage patterns to improve the Service.

Public profiles may include creator-configured Meta Pixel or TikTok Pixel. These advertising technologies are disabled until you accept them, and you can reject or withdraw consent using the profile privacy control. You can also control cookies through your browser settings; disabling essential storage may affect Service functionality.

We use safeguards including TLS for data in transit, Firebase Authentication, verified-email checks for protected actions, server-side authorization, least-privilege database rules, rate limiting, and security reviews.

Payment data is processed exclusively by Stripe, which is PCI-DSS Level 1 certified. We do not store full credit card numbers.

Despite our efforts, no security measure is 100% impenetrable. We cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you in accordance with applicable law.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.

• Correction: Request correction of inaccurate or incomplete data.

• Deletion: Request deletion of your personal data ('right to be forgotten'), subject to legal retention obligations.

• Portability: Request your data in a machine-readable format.

• Opt-Out of Marketing: Unsubscribe from marketing emails at any time via the link in any email or by emailing support@lnk99.app.

California Residents (CCPA): You have the right to know what personal information is collected, to delete it, to opt-out of its sale (we do not sell data), and to non-discrimination for exercising these rights.

To exercise any right, email support@lnk99.app with the subject line 'Privacy Request.' We will respond within 30 days (45 days for complex requests with notice).

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will delete it promptly.

If you are a parent or guardian and believe your child has provided information to us, contact support@lnk99.app immediately.

REPARTO CUBANO STORE LLC is based in the United States. If you access the Service from outside the US, your data may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

Where required, international transfers are handled using legally recognized safeguards provided by us or our service providers. Contact support@lnk99.app for information relevant to your jurisdiction.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by a prominent notice on the Service at least 14 days before the changes take effect and update the 'Last updated' date.

Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

Data Controller: REPARTO CUBANO STORE LLC

Operating as: LNK99

Website: https://lnk99.app

Privacy & Data Requests: support@lnk99.app

State of Registration: New Mexico, United States