Privacy Policy

1. Who We Are

LlamaLink ("we", "our", "us") operates a multi-tenant professional website platform that allows professionals in the US and UK to create and publish their own online presence. Our registered address and data controller details are available at privacy@llamalink.app.

2. Data We Collect

When you register for or use LlamaLink, we collect the following categories of personal data:

• Account information: your name, email address, and password (stored as a secure hash).
• Profile information: professional name, occupation, country, city, biography, and profile photo you choose to display on your public site.
• Billing information: payment method details processed and stored by Stripe (we do not store raw card numbers). We retain transaction records including amount, currency, and customer country.
• Usage data: log data such as IP address, browser type, pages visited, and timestamps, collected automatically when you use our service.
• Communications: messages you send us via support or contact forms.

3. How We Use Your Data

We use your personal data to:

• Provide and maintain your professional website hosting service.
• Process payments and manage your subscription via Stripe.
• Send transactional emails: account confirmation, invoice receipts, password reset, and service notifications via Resend.
• Respond to your support requests and enquiries.
• Monitor platform health, detect abuse, and improve our service.
• Comply with applicable legal and regulatory obligations.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

4. Third-Party Service Providers

We share data with the following sub-processors as necessary to operate our service:

Each provider is bound by their own privacy policy and, where applicable, a Data Processing Agreement with us.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons (e.g., billing records retained for 7 years under UK and US tax law).

6. Cookies and Tracking

We use strictly necessary session cookies to maintain your authenticated session. We do not use third-party advertising cookies or behavioural tracking technologies. You can disable cookies in your browser settings, but this may affect your ability to log in.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
• Portability: request a machine-readable export of the data you have provided to us.
• Objection / restriction: object to or request restriction of certain processing activities.

To exercise any of these rights, email us at privacy@llamalink.app. We will respond within 30 days. UK and EEA residents also have the right to lodge a complaint with their local supervisory authority (ICO in the UK).

8. International Data Transfers

Our infrastructure is operated primarily in the United States via Cloudflare and Supabase. If you are located in the UK or EEA, transfers are made under appropriate safeguards (Standard Contractual Clauses or equivalent mechanisms) in accordance with applicable data protection law.

9. Security

We implement industry-standard measures to protect your data, including TLS encryption in transit, encrypted storage at rest, and access controls limiting who can view personal data. No transmission over the internet is 100% secure; we encourage you to use a strong, unique password for your account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our platform at least 14 days before the changes take effect. Continued use of the service after that date constitutes acceptance of the revised policy.

11. Contact Us

For any privacy-related questions, requests, or concerns, please contact us at: