Privacy Policy
This document was written from how Linki actually works, so it is honest, but it has not been checked by a qualified lawyer and it is not final. Anything marked [TO BE COMPLETED] still needs a real answer. Do not rely on this as legal advice.
Last updated: 17 September 2026
1. Who is responsible for your data
The data controller is [TO BE COMPLETED] registered data controller name, registered in [TO BE COMPLETED] jurisdiction (e.g. Rwanda). For anything about this policy or your data, contact [TO BE COMPLETED] privacy contact address.
2. What we collect from sellers
When you sign in with Google we receive your email address, your display name and your profile picture. We store the phone number you verify, because that is how we send you order alerts. We store your shop details: its name, link, products, photos, prices, stock, your chosen design, and the MTN MoMo code or number you want shown at checkout. We also keep a record of important actions on your account — such as going live, changing your link, or confirming a payment — with the time they happened.
3. What we collect from buyers
A buyer does not create an account and does not set a password. To place an order they give a name, a phone number, and optionally a delivery area. We store those with the order, because you need them to fulfil it and both of you may need them if there is a dispute. We do not ask buyers for an email address, an address, or any payment details — payment happens outside Linki, between the buyer and the seller.
4. Payment details
We never see, receive or store a buyer’s Mobile Money PIN, and no money passes through Linki. For an order we store the amount, whether it was confirmed, when, and by whom, plus any reference note the seller adds. That is a record of the order, not of the payment instrument.
5. Shop visitor numbers
We count visits to shop pages so sellers can see how their shop is doing. This is done without cookies and without any third-party tracking script. Each recorded event holds only: which shop, what kind of event (a shop view, a product view, an add to cart, a checkout start), which product, a broad category of where the visitor came from (direct, WhatsApp, Instagram, search, or other), a random one-off value used to avoid counting the same view twice, and the date. There is no name, no phone number, no IP address, no device identifier and no full web address in these records, and they cannot be linked back to a person or followed across other websites.
6. Marketing site numbers
On this website we count how many people view a page and, broadly, where they arrived from. We do not use cookies and we do not set any identifier, so these are counts, not journeys — we cannot tell that a particular visitor came back, and we do not try to.
7. A future Linki marketplace
Shops and products carry a setting for whether they may appear in a future Linki marketplace — a place where buyers could browse across shops. It is on by default and you can switch it off for your shop or for individual products in your settings at any time. No marketplace exists yet, and nothing has been published anywhere outside your own shop.
8. Why we are allowed to hold this
We hold seller account data because it is necessary to provide the service you signed up for. We hold buyer order details because they are necessary to complete the order the buyer asked for and for the seller’s records. We hold audit records because we have a legitimate interest in being able to show what happened to an order or an account. [TO BE COMPLETED] confirm the lawful bases under Rwanda's data protection law (Law No. 058/2021)
9. Who else sees it
Your buyers’ order details are visible to you, the seller. Our own staff can see shop and order data when they need to help you or investigate a problem; that access is recorded. We use an SMS provider to deliver notifications, which necessarily receives the recipient’s number and the message. We do not sell anyone’s data, and we do not share it for advertising. [TO BE COMPLETED] name the SMS gateway and hosting provider
10. How long we keep it
Order and audit records are kept while your account exists, because they are the history of your shop. Encrypted backups are kept for 30 days and then deleted. [TO BE COMPLETED] retention period after account deletion
11. Your rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete your account and shop. A buyer who wants their order details removed should ask the seller they ordered from; if that is not possible, contact us and we will help. To make any of these requests, write to [TO BE COMPLETED] privacy contact address. [TO BE COMPLETED] the statutory response deadline and complaint route
12. Security
Connections are encrypted. Backups are encrypted before they leave our server. Passwords do not exist on Linki, because sign-in goes through Google. We keep records of administrative actions so misuse can be detected. No system is perfectly secure, but we treat buyer phone numbers and seller payment details as the most sensitive things we hold and keep them out of our logs.
13. Children
Linki is for people running a business and is not intended for children. [TO BE COMPLETED] minimum age, per local law
14. Changes
If we change this policy in a way that matters, we will tell sellers before it takes effect. The date at the top shows when this version was written.