Privacy Policy

1. Who is responsible

DoneLink is responsible for the processing described here. Contact: donelinks.com/support.

2. Data about account holders

When you create and use an account we process: your email address, name and (optionally) company, country and billing address; your password in hashed form only; your plan, subscription status and invoices; the DoneLinks you create; and technical security data such as sign-in times.

Card payments are handled by Stripe. We receive the payment status and invoices, but never your full card number.

3. Data about people who open a DoneLink

When someone opens a DoneLink we record the time, the device type, operating system and browser (read from the browser’s user agent), the approximate country, the website they came from, campaign (utm) parameters, and a shortened IP address with its last part removed. The country is worked out on our own server from the IP address, which is not sent to anyone else. When the owner runs an A/B test, the visitor’s version is chosen from the shortened IP address and the browser, so the same visitor keeps seeing the same version without anything being stored on their device. We use this only to send the visitor to the right destination and to show the DoneLink’s owner aggregated statistics. Visitors of DoneLinks receive no cookies.

4. Why we use the data

To provide the service you asked for (contract), to protect accounts and the service against abuse, such as limiting repeated sign-in attempts (legitimate interest), to process payments and keep invoices (legal obligation), and to send service emails such as security alerts and — unless you turn it off — the weekly report.

5. Service providers

We share data only with providers who help us run the service: our hosting provider, Stripe for payments, and our email delivery provider. They may only use the data on our behalf.

Country data: IP address ranges published by the Number Resource Organization (nro.net) under the CC BY 4.0 license.

6. How long we keep data

Account data is kept while your account exists and deleted when you delete it. Statistics of a DoneLink are kept while the DoneLink exists and deleted with it. Invoices are kept as long as tax law requires.

7. Your rights

You can access and correct your data in your account settings and delete your account at any time (Settings → Login Security). You can also ask us for a copy of your data, object to processing or file a complaint with a data protection authority. Write to donelinks.com/support.

8. Security

Connections are encrypted (HTTPS), passwords are stored only as salted hashes, sessions can be ended on all devices, and access to account data is limited to what is needed to run the service.

9. Changes

We update this policy when our processing changes and show the date of the latest version at the top of this page.