Privacy policy

Data controller

Allinks, a service published by Kevin Ragonneau EI (sole proprietorship), 38, rue des Mathurins, 75008 Paris, France.

For any question about your data: dpo@allinks.click.

Our two roles

• For your account, your payments, support and visits to allinks.click, Allinks is the data controller.
• For data about the visitors of your pages (visit statistics, contacts collected through your forms, orders), you are the data controller. Allinks processes this data on your behalf, as a processor, only to provide the service. Visitors of your page exercise their rights with you.

Data processed and purposes

Your account

Email address, name, password (stored hashed, never in plain text), language, time zone and preferences. If you sign in with Google or Facebook, we receive your name and email address from that service. This data is used to create and manage your account (performance of the contract).

Account security

A sign-in log (IP address, browser, operating system, device type) helps detect suspicious access. It is kept for 90 days (legitimate interest: security of the service).

Payments and invoicing

Payments are processed by Stripe or PayPal. Allinks never receives your card numbers. We keep your payment history and invoices (plan, amount, date, billing details you provided) to perform the contract and meet our accounting obligations.

Support

Messages sent through the contact form or the live chat are used to answer your requests. Information sent through the report form (name, email address, reported content and reason) is used to handle the report and inform you of the outcome. The chat, provided by Crisp, only loads on the Support page, when you open it.

Emails

We send you the emails the service requires: sign-up, account security, payments and invoices, alerts, and important information about the service (incidents, changes to the terms or prices). They are sent as long as your account exists.

We may also send you a few tips to get started and offers about Allinks plans (legitimate interest, article L34-5 of the French Postal and Electronic Communications Code). These emails are sent by default. You can turn them off at any time in My account or through the link included in each of them.

The Allinks newsletter (news and updates) is only sent with your consent, given at sign-up or in My account. You can withdraw it at any time in the same place or through the unsubscribe link in each newsletter.

For the newsletter and service information messages, we measure whether each email is opened and which links are clicked, to know whether our messages are read and useful. This data stays with Allinks and is used for nothing else. To prevent open tracking, you can turn off automatic image loading in your email app.

Affiliate program

When a visitor arrives through a referral link, a cookie remembers the referrer for 30 days. Affiliates provide the payment details needed to pay their commissions.

Audience measurement on allinks.click

The allinks.click website uses Google Analytics (Google Ireland Limited) to measure its traffic: pages viewed, source, device type. You can block these cookies in your browser settings.

Page and smartlink statistics (on behalf of users)

On each visit to a page or smartlink, we record: country, region, city and time zone (derived from the IP address using a geolocation database installed on our servers), browser, operating system, device type, language, referring site and UTM parameters. The IP address is not stored. A 24-hour cookie is used to count unique visitors. These statistics are kept for the period set by the page owner's plan.

Data collected by users' pages

Forms on a page (email, phone, message) send the data entered to the page owner. Payments made on a page are processed by the payment provider chosen by its owner.

A page owner may also embed content from third-party services (videos, music, maps…), advertising tracking pixels or Google Fonts. These services may receive the visitor's IP address and set their own cookies, under the page owner's responsibility.

Recipients

Your data is never sold. It is accessible to Allinks and, where relevant, to our service providers:

• OVH SAS (France): website and data hosting, sending emails;
• Stripe Payments Europe Limited (Ireland) and PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg): payments;
• Crisp IM SAS (France): live chat;
• Google Ireland Limited (Ireland): audience measurement, sign-in with Google;
• Meta Platforms Ireland Limited (Ireland): sign-in with Facebook.

We may disclose data to the authorities when required by law.

Transfers outside the European Union

Some providers (Google, Meta, Stripe, PayPal) may transfer data to the United States. These transfers are covered by the safeguards provided by the GDPR, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

Retention periods

• Account: as long as it is open. You can delete it at any time from your account settings: its data is then deleted.
• Sign-in log: 90 days.
• Invoices: 10 years (article L123-22 of the French Commercial Code).
• Page and smartlink statistics: according to the owner's plan, as shown on the Pricing page.

Cookies

Allinks uses cookies that the service needs to work:

• session: keeps you signed in while browsing;
• user_id, token_code: "Remember me" option, 30 days;
• set_language, set_currency: chosen language and currency;
• referred_by: referral, 30 days;
• onboarding_skipped: remembers that you skipped the welcome steps, 1 year;
• s_statistics_…: counts unique visitors of a page, 24 hours;
• link_password_…, link_sensitive_content_…: remember access to a password-protected page or acceptance of a warning;
• rate-limiting cookies: protection against repeated sign-in or sign-up attempts.

In addition, Google Analytics sets cookies on allinks.click, and Crisp sets cookies when you open the chat on the Support page.

Security

Traffic with the website is encrypted (HTTPS), passwords are hashed and access to data is limited to what the service needs.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, and to set instructions for what happens to it after your death. To exercise these rights, email dpo@allinks.click. We reply within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Changes

This policy may change as the service evolves. The update date is shown at the top of the page. In case of a significant change, we will let you know by email or on the website.