Privacy Policy

1. Information We Collect

We collect information you provide directly (name, email, workspace details) and usage data generated when visitors click short links (device type, browser, country, anonymized IP hash). We do not store raw IP addresses — all IPs are hashed with a daily-rotating salt and truncated for privacy.

2. How We Use Information

Your data is used to operate the service, provide analytics, prevent abuse, and improve the product. We never sell personal data to third parties.

3. Data Retention

Click analytics are retained for the duration of your subscription. Aggregate statistics may be retained after account deletion. You may request data deletion at any time.

4. Your Rights

Under GDPR, CCPA, and similar regulations, you have the right to access, correct, export, and delete your personal data. See our GDPR Request page.

5. Cookies

We use essential cookies for authentication. We do not use third-party tracking cookies.

6. Anonymous Links and Secrets

LinkPilot lets anyone create short links and secret links without an account. To keep this surface safe and private:

• Anonymous short links can be created without an account.
• Anonymous short links expire by default after 30 days.
• Anonymous secrets expire by default after 7 days and may burn after the first view.
• We store privacy-preserving IP hashes (salted, daily rotated) only for rate limiting and abuse prevention — never raw IP addresses.
• Public analytics pages (/p/:token and /ps/:token) are accessible to anyone who has the analytics URL.
• Public analytics show aggregated statistics only — no raw IPs, user agents, full destination URLs, or secret content.
• You can sign up for a free LinkPilot account to claim anonymous links and secrets and manage them privately.

7. LinkPilot for Slack

This section covers the LinkPilot app for Slack specifically.

• What the app receives from Slack. When you run /secret or /shorten, or use Send as secret link, Slack sends our service your Slack user id, your workspace id, the channel id, the text of the command or the chosen message, and a one-time response URL. When a workspace installs the app, Slack sends a bot token scoped to commands and the workspace name.
• What we do with it. The text of /secret or a chosen message is encrypted in memory and turned into a one-time link; only the ciphertext is stored, under your own LinkPilot account, for as long as the link lives (default 24 hours, at most 7 days) or until it is opened. The text itself is never written to a log, a database, or a Slack channel. The URL given to /shorten is stored as the destination of your short link, under your own account, like any link you create here.
• What we store about the connection. The workspace id and bot token (so the app can function), and, for each person who connects, their Slack user id paired with the LinkPilot API key they pasted. These values are encrypted at rest with a key held only by the service. We do not store channel names, message history, or anything from channels the commands were not used in.
• Retention. Connection records are kept until the person disconnects (revoking the API key at /app/api-keys breaks the connection, and the app discards the record the next time it is used) or until the app is uninstalled from the workspace, which deletes the workspace record and every connection in it immediately. Secret and link data follow the retention rules of your LinkPilot account.
• Your choices and deletion. Revoke the API key at any time. Uninstall the app from Slack to remove every stored record for the workspace. To request deletion of anything else, or a copy of what we hold, email privacy@uselinkpilot.com from the address on your LinkPilot account; we respond within 30 days.
• What we never do. We do not read channels, do not retain message content, do not sell or share Slack data, and do not use Slack data to train any model.

8. Contact

For privacy inquiries, contact us at privacy@uselinkpilot.com.