🔒 Privacy Policy

Who We Are

Uplyncio Ltd ("Uplyncio", "we", "us", "our") is a digital marketplace registered in the United Kingdom, operating the platform at uplyncio.com. We connect buyers seeking guest posts and backlinks with verified publishers.

Uplyncio is the data controller for all personal information collected through our platform. For any data-related enquiries, contact us at info@uplyncio.com.

What Data We Collect

2.1 Data You Provide Directly

2.2 Data Collected Automatically

• IP address and approximate geolocation
• Browser type, operating system, device type
• Pages visited, time on site, referring URLs
• Order history and platform activity logs
• Cookies and local storage data (see Section 5)

How We Use Your Data

We use your personal data for the following purposes:

• Account management — Creating and maintaining your buyer or publisher account
• Order processing — Matching orders to publishers, sending notifications, managing delivery
• Payment processing — Handling withdrawals, refunds, and balance top-ups
• Communication — Sending order updates, invoices, and support responses via email
• Platform security — Detecting fraud, spam, and abuse
• Quality control — Reviewing delivered content and resolving disputes
• Marketing — Sending relevant offers and updates (only with your consent; you may unsubscribe at any time)
• Legal compliance — Meeting our obligations under UK and EU law

Who We Share Data With

We share your data only where necessary to operate the platform:

• Supabase — Our database provider (PostgreSQL). Data stored on EU/UK servers.
• Resend / SendGrid — Email delivery service for transactional emails (order confirmations, OTP codes).
• Stripe — Payment processing. Stripe is PCI-DSS compliant. We never see or store your full card details.
• PayPal — Used for withdrawal payments to publishers.
• Anthropic (Claude AI) — Our Ace chatbot uses Anthropic's API. Conversation content may be processed by Anthropic's servers for generating responses.
• Vercel — Our hosting provider. Handles all HTTP requests and serverless functions.
• Law enforcement — We may share data if required by law, court order, or to protect against fraud or harm.

All third-party processors are bound by data processing agreements and are required to protect your data in accordance with applicable law.

Cookies & Tracking

We use the following types of cookies and local storage:

• Essential cookies — Required for login, session management, and security. Cannot be disabled.
• Functional cookies — Remember your preferences (language, filters, dashboard state).
• Analytics — We may use anonymised analytics to understand how the platform is used. No personal identifiers are shared with analytics providers.

We use localStorage (browser storage) to maintain your session, cache site data, and preserve dashboard state across refreshes. This data remains on your device and is not transmitted to our servers unless you interact with the platform.

You can clear all local storage at any time through your browser settings. This will log you out and reset your preferences.

Data Retention

We retain your data for as long as your account is active and as required by law:

• Account data — Retained for the duration of your account. Deleted within 30 days of account deletion request.
• Order data — Retained for 7 years for tax and legal compliance purposes.
• Chat messages — Retained for 2 years, then anonymised.
• Payment records — Retained for 7 years as required by HMRC (UK) tax regulations.
• Support emails — Retained for 3 years.

Your Rights (GDPR & UK GDPR)

Under UK and EU data protection law, you have the following rights:

• Right to access — Request a copy of all personal data we hold about you.
• Right to rectification — Correct inaccurate or incomplete data.
• Right to erasure — Request deletion of your data ("right to be forgotten"), subject to legal retention requirements.
• Right to portability — Receive your data in a structured, machine-readable format.
• Right to object — Object to processing based on legitimate interests or for direct marketing.
• Right to restrict processing — Request that we limit how we use your data.
• Right to withdraw consent — Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email info@uplyncio.com with the subject "Data Rights Request". We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK at ico.org.uk.

Security

We implement industry-standard security measures to protect your data:

• All data transmitted over HTTPS/TLS encryption
• Passwords are hashed using bcrypt — we never store plain-text passwords
• HSTS (HTTP Strict Transport Security) enforced across all pages
• Content Security Policy (CSP) headers to prevent XSS attacks
• Rate limiting on all API endpoints to prevent brute-force attacks
• Supabase Row Level Security (RLS) ensures users can only access their own data
• Admin access requires separate authentication with a secret key

Despite our best efforts, no internet transmission is 100% secure. If you suspect your account has been compromised, change your password immediately and contact us.

Children's Privacy

Uplyncio is a business-to-business platform intended for adults aged 18 and over. We do not knowingly collect data from children under 18. If you believe a minor has created an account, please contact us immediately and we will delete the account and all associated data.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page
• Send an email notification to all registered users
• Display a notice on the platform for 14 days after the change

Continued use of Uplyncio after changes are published constitutes acceptance of the updated policy.