Privacy Policy

LinkSpring is operated by MachEvo Technologies FZE (“MachEvo”, “we”, “us”, “our”), a Free Zone Establishment registered in the United Arab Emirates. This Privacy Policy explains what personal data we collect when you use LinkSpring (the “Service”), how we use it, and your rights.

1. Contact

Questions about this policy or your data: info@linkspring.app.

2. Information we collect

• Account information — your name, email address, and a securely hashed password when you create an account.
• Connected accounts — when you connect Zoho Books, we store an encrypted OAuth token that lets LinkSpring post entries to your Zoho organization on your behalf. We never receive or store your Zoho password, and access tokens are never stored in plaintext.
• Amazon settlement data — the Amazon settlement reports you upload (sales, fees, refunds, VAT, deposits) which we process to create accounting entries. We retain the raw files you upload so entries can be re-derived, corrected, or audited.
• Billing information — payments are handled by our processor, Stripe. We store your subscription status and a Stripe customer reference; we do not store your full card details.
• Usage and technical data — basic logs such as IP address and browser type, used to operate and secure the Service.
• Analytics and advertising data — when enabled, our website (the public marketing pages and the app) uses cookies and similar technologies to record page views and a small number of events, such as creating an account. See Analytics and advertising below for exactly what is collected, who it is shared with, and how to opt out.

3. How we use your data

• To provide the Service (parse settlements, post to Zoho Books, reconcile to your deposit, produce VAT figures and profitability reports).
• To manage your account, subscription, and support requests.
• To secure the Service and prevent abuse.
• To comply with legal obligations.

We do not sell your personal data.

4. How we share your data

We share data only with service providers who help us operate the Service, and only so they can provide it:

• Supabase (database, authentication, file storage), Stripe (payments), Render and Vercel (hosting), Resend (transactional email), and Zoho (the accounting platform you choose to connect).
• Google (Google Analytics) and Meta Platforms (Facebook and Instagram advertising measurement), for website analytics and advertising — see Analytics and advertising below.

We may also disclose data if required by law.

5. Analytics and advertising

We use two third-party tools to understand how the website is used and to measure our advertising. Both are optional and are only active when configured; where they are not enabled, no data is sent to either provider.

• Google Analytics 4 (Google) — measures page views and basic usage of our website so we can see which pages are useful. It sets cookies and receives your IP address, browser and device information, and the pages you visit.
• Meta Pixel and Conversions API (Meta Platforms) — measures the effectiveness of our Facebook and Instagram advertising and builds audiences for it. It sets cookies (including Meta’s _fbp and _fbc) and receives the pages you view and a small number of events, such as creating an account.

The Meta events are sent in two ways: from your browser, and from our own server (Meta’s “Conversions API”). The server-side copy includes your IP address, your browser user-agent, and the Meta cookies described above. Where an event relates to your account, we also send your email address as an irreversible SHA-256 hash so Meta can match the conversion without ever receiving your actual email address. We do not send your name, phone number, or any of your accounting, settlement, or Zoho data to Google or Meta — analytics and advertising never touch your books.

Google and Meta act as independent controllers of the data they receive and process it under their own policies. We do not sell your personal data, and we do not use these tools inside sensitive parts of your account beyond the page-view and signup events described above.

How to opt out. You can block or delete these cookies in your browser settings, or use your browser’s tracking-protection or an ad-blocking extension — both tools are blocked by common privacy extensions and by browsers that block third-party trackers by default. You can also install Google’s Analytics opt-out add-on and adjust your Meta ad preferences. Opting out does not affect your ability to use LinkSpring in any way. If you would like us to delete analytics data associated with you, contact info@linkspring.app.

6. Storage and security

Your data is held with the infrastructure providers above. Zoho OAuth tokens are encrypted at rest. We apply industry-standard security measures including encryption and access controls. Zoho Books remains your system of record — we store only what is needed to operate the Service.

7. Data retention

We keep your account and processing data while your account is active and as needed to provide the Service and meet legal or accounting obligations. Raw settlement files are retained for a limited period for audit and re-derivation. You may request deletion (see Your rights).

8. Your rights

You may access, correct, export, or request deletion of your personal data, withdraw consent, and disconnect Zoho at any time. To exercise these rights, contact info@linkspring.app.

9. International transfers

Your data may be processed on servers located outside the UAE (for example, our hosting and database regions). We take steps to protect it consistent with this policy.

10. Children

The Service is intended for businesses and is not directed to anyone under 18.

11. Changes to this policy

We may update this policy from time to time. We will post the revised version here with a new “Last updated” date.

12. Contact

info@linkspring.app · MachEvo Technologies FZE, United Arab Emirates.