Privacy notice
This notice explains how LinkBounce processes information across the website, workspace and billing lifecycle. LinkBounce is operated by SALEFDE LLC.
Information we process
- Your account: name, email address, protected password credentials, session information and workspace ownership.
- Your Instagram connection: professional account ID, username, account type, granted permissions, token expiry and an encrypted access token. Instagram authentication happens with Meta; LinkBounce does not collect your Instagram password.
- Your campaigns: selected post IDs and cached post details, trigger words, reply text, destination links and campaign status.
- Comment and delivery records: IDs of matching comments, posts and commenters, event times, delivery state, error codes and quota accounting. We process comment text to match your rule. The current delivery event records do not store the commenter's username or comment text.
- Billing and subscription records: when paid billing is enabled and you start a checkout or manage a paid plan, our Merchant of Record (Dodo Payments) processes payment credentials, billing address and tax details. LinkBounce stores only Dodo Payments customer, subscription and payment identifiers, plan and billing interval state, invoice references, amounts and timestamps. LinkBounce never receives or stores your raw payment card number or bank credentials.
- Optional website analytics: only if you explicitly grant analytics consent, we use Google Analytics 4 to collect sanitized page locations (without query strings), referrer origins, allowlisted campaign parameters (
utm_source,utm_medium,utm_campaign,utm_contentandutm_term) and marketing interactions (such as viewing the pricing section, selecting a plan option, clicking a call-to-action or navigating to sign up). - Privacy requests: the contact email, request type and information you choose to enter in our form.
Why we use this information
We use it to provide account access, connect Instagram, show your posts, run campaigns you explicitly activate, send eligible private replies through Meta, prevent duplicates, enforce plan entitlements and usage limits, synchronize subscription billing state, troubleshoot failures, understand how visitors use the marketing website when optional analytics consent is granted, and handle privacy requests. You decide which campaign to activate. Saving a draft does not send a message.
Who receives information
Meta processes Instagram sign-in, account permissions, API requests and private replies under its own policies. If you connect an AI assistant, its provider receives the tool results described under AI assistant connections. When paid billing is enabled, Dodo Payments acts as Merchant of Record for paid subscriptions and processes checkout, tax calculation, invoicing and payment method updates under Dodo Payments' Privacy Policy. Resend delivers transactional account verification and password reset emails when configured. When you explicitly grant optional analytics consent, Google (Google LLC and its applicable regional contracting affiliates under the Google Analytics Terms of Service and Google Ads Data Processing Terms) processes website measurement events and analytics cookies on our behalf as an analytics service provider. Application records are stored in our PostgreSQL database on infrastructure operated for LinkBounce. Authorized operators can access records when necessary for service operation and request handling. We do not sell personal information.
Optional campaign link measurement
When a creator enables tracking, the explicit destination link in a private reply is replaced with an opaque LinkBounce link. The server stores its approved HTTPS destination, workspace, campaign, media and DM intent association, expiry, API acceptance time and first eligible request time. It keeps daily raw request, suspected scanner/preview and estimated unique link counts. Redirects set no tracking cookie and store no visitor IP address, full User-Agent, browser fingerprint or Instagram identity in the token. IP and request headers are processed transiently for rate limiting and approximate scanner filtering. One link's first eligible request counts once; this does not establish a unique human, delivery or purchase.
Links expire 90 days after creation. Pausing a campaign or turning tracking off preserves existing links; explicit revocation, destination approval withdrawal and workspace suspension or deletion stop redirects. Expired destination mappings are cleared by maintenance. Link attribution, event deduplication keys and daily aggregates are retained for up to 400 days, with bounded maintenance cleanup; verified workspace deletion purges them. Backups follow the existing retention and deletion-registry process.
Creators must give recipients appropriate transparency, establish an applicable legal basis and obtain consent where required for their use and jurisdiction before enabling measurement. First-party routing and the absence of cookies do not automatically exempt tracking from privacy or ePrivacy obligations. Ask the creator or use our data request process to exercise applicable rights.
Cookies, local storage and optional Google Analytics 4
LinkBounce uses necessary session cookies on the workspace origin to keep you signed in and protect your workspace. The service does not use advertising cookies, and Google Signals and ad personalization signals are disabled in our configuration.
Optional Google Analytics 4 measurement is disabled by default. No Google Analytics script is loaded and no analytics requests are sent unless and until you explicitly grant analytics consent in the privacy banner or Privacy preferences dialog. Your preference on the marketing website (linkbounce.com) is stored in that origin's browser localStorage under the versioned key lb-consent-v1 for up to 180 days, after which a new decision is requested. Because browser localStorage is scoped per origin, your consent choice on linkbounce.com is separate from any consent choice on the customer workspace origin (app.linkbounce.com, which uses its own origin-scoped key when workspace analytics is enabled); granting or withdrawing consent on one origin does not automatically grant or withdraw consent on the other, though first-party cookies set at the shared .linkbounce.com domain may be visible across subdomains while consent is active.
When analytics consent is granted on the marketing website, Google Analytics sets first-party measurement cookies such as _ga and _ga_* to distinguish visitors and sessions, and collects sanitized pageviews (page_view, pricing_view), referrer origins, allowlisted utm_* campaign attribution parameters and marketing interactions (select_plan, signup_navigation and cta_click). Query strings containing non-allowlisted parameters are excluded from reported page locations; however, syntactic filtering cannot prove that a campaign parameter is free of personal data, and campaign links must not include names, email addresses, phone numbers or secrets.
You can reject optional analytics on your first visit or withdraw your consent at any time using the Privacy preferences control in the website footer. Withdrawing consent updates the stored preference, disables subsequent analytics events (including across open tabs on the same origin), sets Google's per-property disable flag, sends a denied consent update and attempts to clear _ga and _ga_* cookies at the host and .linkbounce.com domain scopes. Browser restrictions, differing cookie paths or domains, or requests already in flight may prevent immediate removal or cancellation of data already transmitted. Disconnecting Instagram in the workspace removes the locally stored token and pauses managed campaigns; it is not the same as deleting your entire LinkBounce account.
AI assistant connections (MCP)
You can connect LinkBounce to an AI assistant that supports the Model Context Protocol (MCP), such as Claude or ChatGPT. You start the connection in the assistant, then sign in on app.linkbounce.com and choose what the assistant may do: read your account, posts, automations and results (always included); optionally create and edit drafts and pause automations; and optionally request activation. An assistant can never turn an automation on by itself: every activation needs you to review it and click Turn on automation on LinkBounce's own approval page while signed in, and we email you when an automation is turned on this way.
What we store: the assistant's client registration (its name, redirect addresses and, where published, its client metadata address), your consent (account, assistant, permissions and time), the access and refresh token records needed to keep the connection working (access tokens expire after 15 minutes, refresh tokens after 30 days), approval requests (the reviewed automation snapshot, link domain, status and times) and an activity log of each tool call (time, workspace, assistant, tool name, result, duration, request ID and a one-way hash of the arguments, not the arguments themselves).
What the assistant receives: only the results of the tools it calls on your behalf, for example your plan and usage, Instagram post captions, links and thumbnails, automation settings (trigger words, reply text and links) and performance totals. That information is then processed by the assistant's provider (for example Anthropic or OpenAI) under that provider's own terms and privacy policy, which LinkBounce does not control. LinkBounce does not receive your conversations with the assistant, does not use your data to train AI models and does not share commenters' usernames or comment text with assistants.
Your control: you can see and disconnect connected assistants at any time under AI assistants in the workspace; disconnecting revokes access immediately. Connection, approval and activity records are kept while your account exists and are deleted with verified account deletion.
Retention and deletion
We retain account and campaign records while needed to provide the service. Optional Google Analytics 4 event data is retained in Google Analytics according to our configured Google Analytics property data-retention setting and Google's applicable processor terms; withdrawing consent stops future collection from that browser and attempts to clear local _ga cookies, while already transmitted analytics records remain subject to Google Analytics retention expiration or manual deletion requests. You can request deletion through the form below. Deletion is reviewed and performed manually after we verify the relevant account or data relationship. Verified account deletion cancels any active Dodo Payments subscription first, purges workspace personal data, and de-identifies settled financial payment rows that must be retained for tax and accounting audit integrity. Limited security, abuse-prevention or legally required records may need to be retained separately. Privacy request records are reviewed by the operator and removed when no longer required; no automatic deletion or instant-erasure promise is made.
Your choices
You can accept, reject or withdraw optional website analytics consent at any time through the Privacy preferences button in the website footer or by clearing your browser's site data and cookies. In the workspace, you can pause a campaign, disconnect Instagram in LinkBounce, and remove the app's permission in Instagram's Apps and Websites settings. You can request access, correction or deletion (or exercise other applicable data protection rights, such as objection or restriction where provided by law) through our request form or by emailing info@linkbounce.com. If you commented on a creator's post, identify the creator account and approximate comment date without sending your password, identity documents or access tokens. We may need to coordinate with that creator and verify your request.
Security, locations and changes
Access to workspaces is restricted by account ownership, Instagram tokens are encrypted at rest, and the public service uses HTTPS. Meta, Cloudflare, Dodo Payments, Resend, Google (when optional analytics consent is granted) and the operator's systems may process information in the United States and other countries outside your jurisdiction under their respective terms and applicable data transfer frameworks. No system guarantees absolute security. This notice will be updated when the service, infrastructure or contact process changes. This controlled test notice does not claim a security certification.
Contact the operator
Operator: SALEFDE LLC. Email info@linkbounce.com or submit a privacy request; the form records your request and supplies a reference.