Privacy Policy

1. Introduction

This Privacy Policy explains how Linkflow ("we," "us," or "our") collects, uses, discloses, retains, and protects personal data when you use our website, native application, and related services (collectively, the "Service"). It also explains which professional information is public and which documents have restricted access.

2. Information We Collect

We collect the following categories of data:

Contact Info

• Email Address: Used for account creation, login, notifications, and transactional communications
• Phone Number: Optionally provided for display on your public profile and business contact purposes
• Name: Display name shown on your profile

Account & Professional Information

• Profile Data: Username, bio, location, professional focus, experience, education, skills, links, account type, and verification status
• Recruiter Verification: Organization details, professional role, work email, verification method and status, review notes, and proof of professional HR status
• Applications: Job or project applications, applicant details, status history, attachments, recruiter notes, interview stages, and decisions
• Candidate Check: Assessment questions, answers, submission status, results, scores, and recruiter review information

User Content

• Photos & Images: Profile avatars and post images you upload
• Posts & Articles: Text, links, post photos, and articles you create and publish
• Work Achievements: Titles, organizations, roles, descriptions, measurable outcomes, status, verification labels, planned, revised, and actual dates, milestones, progress information, and modification timestamps
• Restricted Files: Work Achievement evidence, application documents, Candidate Check attachments, recruiter-verification proof, and message attachments you choose to submit
• Messages: Direct messages exchanged with other users, including text, images, voice messages, and file attachments

Financial Info

• Purchase & Entitlement History: Subscription tiers, product identifiers, transaction and entitlement status, expiration or renewal status, and historical website purchases
• Payment Information: Apple processes native iOS purchases; RevenueCat helps us validate subscription entitlements; Stripe processes historical website billing where applicable. The public website does not offer new subscription checkout. Linkflow does not receive or store full payment card details

Location

• Coarse Location: Approximate geographic location derived from IP address or optionally provided for posts and profile display

Sensitive Info

• Government ID: Government-issued identification documents submitted for identity verification (verified badge)
• Selfie Photos: Selfie images submitted alongside ID documents for identity verification matching
• Professional Proof: Documents and verified work-email information submitted to establish professional HR status and eligibility before a new Recruiter Pro purchase

Identifiers

• User ID: Unique identifier assigned to your account for authentication and data association
• Device ID: Used for push notification delivery and session management

Usage Data

• Product Interaction: Pages visited, features used, click patterns, profile views, link clicks, and content engagement metrics
• Browsing & Search: In-app browsing activity and explore/search interactions
• Recruiting Workflow: Application submissions, Candidate Check submissions, recruiter decisions, failed retries, related account and opportunity identifiers, status changes, timestamps, and limited failure metadata
• Evidence Access: The approved recruiter account, achievement, evidence item, preview or download action, file name, and timestamp when restricted Work Achievement evidence is accessed

Diagnostics

• Performance Data: App performance metrics, crash logs, and error reports used to improve service reliability
• Device Information: Device type, browser type, operating system, and IP address

Personal data may be linked to your account when needed for Service functionality, security, verification, support, subscriptions, and workflow reliability. We do not use your data for cross-app advertising, sell it to data brokers, or share it with advertising networks.

3. How We Use Your Information

We use your information for the following purposes:

• Provide, maintain, and improve the Service
• Authenticate accounts, maintain profiles, and provide public professional pages
• Publish Work Achievement data and provide restricted evidence access to approved Recruiter Pro accounts
• Operate applications, Candidate Check assessments, recruiter reviews, interview stages, and decisions
• Review identity, skill, and professional HR-status verification submissions
• Process purchases, validate subscription access, restore entitlements, and send related notifications
• Send service communications and, where permitted, promotional messages that you can opt out of
• Monitor and analyze usage trends and preferences to enhance user experience
• Monitor successful workflow events and failed retries, diagnose performance, and address technical issues, fraud, abuse, and security concerns
• Enforce our Terms of Service and other policies
• Develop new products, services, features, and functionality
• Create aggregated or de-identified analytics that do not reasonably identify an individual

4. Data Sharing & Disclosure

We may share your information with:

• Public Visitors: Public profile information, published posts and articles, and public Work Achievement data and milestones
• Recruiters: The recruiter responsible for an opportunity receives the candidate's application, Candidate Check answers and results, attachments, status history, and related professional information
• Approved Recruiter Pro Users: Work Achievement evidence may be previewed or downloaded only by accounts with an eligible subscription and approved professional HR status; access is logged
• Service Providers: Providers that help us operate the Service, including Supabase for authentication, database, functions, and storage; Apple and RevenueCat for native subscription processing and entitlement validation; Stripe for historical website billing where applicable; and providers supporting email, notifications, moderation, and security
• Authorized Reviewers: Personnel or service providers who review identity, skill, recruiter, safety, or appeal submissions under confidentiality and access controls
• Business Transfers: In connection with any merger, acquisition, sale of assets, or transition of service to another provider
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Protection of Rights: To protect the rights, property, safety, and security of Linkflow, our users, or the public
• With Your Consent: When you have given us explicit permission to share your data

Work Achievement evidence files, identity documents, selfies, recruiter proof documents, private messages, and non-public application materials are not part of the public profile. Users who receive restricted information must use it only for its intended professional purpose.

5. Data Retention

• Account data and User Content are generally retained while your account is active or until removed through available controls.
• Public Work Achievement data is removed from the active public record when you delete the achievement. Limited private audit history, access logs, security records, and backups may remain for integrity, fraud prevention, dispute handling, or legal compliance.
• Recruiting workflow monitoring events for application submissions, Candidate Check submissions, recruiter decisions, and failed retries are retained for up to 90 days in the operational monitoring table.
• Identity and skill-verification evidence: We delete an uploaded identity document, selfie, or skill-certificate file that is not attached to a verification submission within 24 hours. We retain rejected verification evidence for 30 days after the final decision so you can appeal. We retain approved verification evidence until 30 days after the verification expires or is revoked. Appeals must be submitted within that 30-day period. Deleting your Linkflow account removes these active document files immediately. We may retain limited non-document metadata (for example, the decision, dates, and audit records) when needed for security, disputes, accounting, or legal compliance.
• Transaction and subscription records may be retained as required for accounting, tax, fraud prevention, refunds, disputes, and legal compliance.
• Aggregated or de-identified data that no longer reasonably identifies you may be retained for analytics and service improvement.

6. Content Ownership & License

You retain ownership of content you upload. You grant Linkflow a worldwide, non-exclusive, royalty-free license to host, store, process, transmit, and display that content only as reasonably necessary to operate, secure, support, and improve the Service and to make content available to the audience you select. The license ends when the content is deleted, except for limited copies in backups, security or legal records, or content already shared with others.

7. Security

We use administrative, technical, and organizational measures designed to protect personal data. Restricted Work Achievement evidence is stored outside the public profile, access requires an approved Recruiter Pro account, access links are time-limited, and preview or download activity is logged. Access to verification material and recruiting monitoring data is restricted by role. No transmission or storage method is completely secure, so we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate personal data
• Request deletion or destruction of your personal data, subject to lawful exceptions
• Object to or restrict processing of your data
• Withdraw consent where consent is the legal basis for processing, without affecting earlier lawful processing
• Appeal or ask questions about an eligible verification decision

You can delete your account from Settings in the Linkflow app. Deleting the account does not cancel an Apple subscription; cancel it separately in your Apple Account subscription settings. To exercise another privacy right, email mindslinks@gmail.com. We may verify your identity before processing a request and may charge a reasonable fee for manifestly unfounded or excessive requests where permitted by law.

9. Third-Party Services

The Service relies on third-party infrastructure and payment providers, including Supabase, Apple, RevenueCat, and Stripe where applicable. Those providers process data under their own terms and privacy notices and may process data in countries other than your country of residence. Where required, we use contractual and other safeguards for lawful transfers.

The Service may also contain links to third-party websites. We do not control their privacy practices or content. Review the privacy notice of a third party before providing information directly to it.

10. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes to the Service, law, or our data practices. We will post the revised policy with a new effective date and provide additional notice of material changes where required by law.

12. Limitation of Liability

To the extent permitted by applicable law, Linkflow is not liable for indirect, incidental, special, consequential, or punitive damages arising from use of the Service. Nothing in this Policy limits data-protection, consumer, or other rights that cannot lawfully be limited.

13. Governing Law

This Privacy Policy is governed by laws applicable to the Linkflow operator, including applicable data-protection requirements, without limiting mandatory rights available in your place of residence.

14. Contact Us

If you have any questions or concerns about this Privacy Policy, email mindslinks@gmail.com.