Personal Data Protection Policy

Scope and accountability

This policy governs internal handling of personal data by linkhaus, LLC, including creator account details, connected-platform identifiers and tokens, private content, support information, and earnings records. The owner is responsible for the data inventory, processing decisions, provider reviews, and privacy requests. This internal handling policy is published for transparency and complements the customer-facing Privacy Policy.

Collection and use

Collect and use only data needed for stated product functions, authorized integrations, support, security, and applicable obligations. Document the purpose and applicable authorization or other basis before introducing a new use. Access platform data only through permitted means and within granted permissions. Do not use personal data for unrelated purposes without the required notice and authorization.

Storage and sharing

Apply the Data Classification and Encryption Policy, least-privilege access, and approved retention rules. Review providers before sharing personal data, including their purpose, safeguards, terms, and processing locations. Document storage, backup, support-access, and transfer locations; do not assume all processing occurs in the United States merely because the primary application region is there. Use required contractual and transfer safeguards where applicable.

Retention, deletion, and individual requests

Maintain a retention schedule based on feature needs, platform requirements, and applicable obligations. Delete or de-identify data when no longer needed, including temporary exports and unnecessary logs. Document backup expiry and any justified retention exceptions. Handle account deletion and platform disconnection through supported product controls and support procedures.

Requests for access, correction, deletion, or other applicable privacy rights may be sent to shie@linkhaus.ai. Verify the requester proportionately, record the request, and respond within the applicable deadline. Escalate conflicts or exceptional retention needs to the owner, and explain the outcome to the requester.

Changes, incidents, and review

Assess privacy impact before material changes to data collection, integrations, sharing, or automated processing. Personal data incidents follow the Incident Response Policy. Review this policy and the data inventory at least annually and whenever processing materially changes, retaining the review record and corrective actions.