Privacy policy

Effective October 22, 2026

This policy explains how deeplinkit ("we", "us") handles information when you use our website, developer dashboard, and deep-link services. Contact us at paulxuca@gmail.com with privacy questions or requests.

Information we handle

• Accounts and teams. Your name, email address, profile picture, account identifier, team memberships, invitations, and authentication activity. When you choose Google sign-in, we receive your basic Google profile and email through our authentication provider, Clerk.
• Billing. Subscription status, usage totals, billing contact information, and payment-provider identifiers. Stripe processes payment details through its checkout and billing portal.
• Deep links. Application and link identifiers, the JSON payload supplied by an app developer, timestamps, and records of link creation and app checks or opens.
• Browser, device, and network information. Browser and operating-system information, language, time zone, display characteristics, browser-storage identifiers, network information such as IP addresses or derived network identifiers, and diagnostic and timing measurements. Depending on the integration, these measurements may include graphics, rendering, font, software-capability, or DNS signals. This information helps associate a browser interaction with an app on the same device.
• Support and service logs. Information you send us and technical records needed to investigate errors, prevent abuse, and operate the service.

How we use information

We use information to sign you in, manage accounts and teams, create and deliver deep-link payloads, associate browser and app activity, display usage and opens, process subscriptions, provide support, and maintain the reliability and security of deeplinkit.

Google account information is used for authentication and account management. We do not use it for advertising or to train deep-link matching models. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements where applicable.

Developer applications

When an app or website integrates deeplinkit, its developer chooses the payload and how to use the returned information. We process that integration data to provide the service to the developer. The developer is responsible for its own privacy disclosures, permissions, and lawful use of the integration. For a request about information supplied by another app, contact that app’s developer first; we can help route your request.

Sharing and service providers

We use service providers to operate deeplinkit, including Clerk for authentication and team management, Stripe for billing, and Google Cloud and Cloudflare for hosting, infrastructure, and delivery. Providers receive information needed for their services. Their handling of information is also described in their privacy notices.

Authorized members of your team can access information permitted by their role. An integrating developer can access its app’s link payloads and activity. We may disclose information when required by law, to protect the service or people from fraud or harm, or as part of a business transfer subject to appropriate protections. We do not sell personal information or share it for targeted advertising.

Cookies and browser storage

Our dashboard and authentication provider use cookies and similar storage to maintain sessions. The SDK may store a browser identifier to support matching and avoid repeating work. You can clear or restrict browser storage using your browser settings; doing so can affect sign-in and deep linking. Integrating developers are responsible for obtaining consent when their use requires it.

Retention, security, and location

We keep account, link, usage, and billing information for as long as needed to provide the service, meet legal obligations, resolve disputes, and prevent abuse. Matching and diagnostic records may use shorter retention windows. Deletion from backups or provider systems can take additional time, and some records may need to be retained for legal or security reasons.

We use encrypted connections and access controls to protect information. No service can guarantee absolute security. Our infrastructure includes systems in the United States, and our providers may process information in other countries.

Your choices and requests

You can manage available profile information in your account, clear browser storage, and disconnect Google access through your Google Account. Disconnecting Google does not itself delete your deeplinkit account or previously stored data.

Email paulxuca@gmail.com to request access, correction, deletion, or an export of your information, or to exercise privacy rights available where you live. We may verify your identity and coordinate with an app developer before acting on a request. Legal obligations and the rights of others may limit what we can provide or delete.

Children and updates

The developer dashboard is intended for adult developers and business users. If you believe a child has provided account information to us, contact us. Developers integrating deeplinkit into apps used by children must assess and meet the requirements that apply to those apps.

We may update this policy as the service changes. We will update the effective date and provide additional notice of material changes when required.