Privacy policy
Last updated: 2 September 2026
Who we are
Linkpreneur is a trading name of R.B. Projecten B.V., Slenterweg 3, 6905 DM Zevenaar, The Netherlands (Chamber of Commerce 59974907, VAT NL853716833B01), which is the controller for the personal data described here. For privacy questions, write to the address published on this website or reply to any message from us.
What we collect
Account data (name, email, company), billing data (invoices, payment status through our payment providers; we never store card numbers), usage data (pages visited inside the platform, actions in the audit log) and the campaign data you provide (domains, keywords, guidelines).
Why we process it
To deliver the service you pay for, to invoice you, to secure the platform, and to send you service messages about your campaigns. We do not sell personal data and we do not use it for third-party advertising.
Third parties
We use data processors for hosting (EU), email delivery, payment processing and SEO data providers. Processors only receive what they need to perform their function and are bound by data processing agreements.
Retention
Account and campaign data are retained while your account is active and for up to 24 months after closure. Invoices are retained as long as tax law requires.
Google user data
If you connect your Google account, we access your Google Search Console data (search queries, impressions, clicks and positions for the website you connect; scope webmasters.readonly) and, only if you separately connect it, your Google Analytics data (aggregated traffic metrics for that website; scope analytics.readonly). We use this data solely to show you your own search and traffic performance inside your Linkpreneur portal and in the reports we generate for you, and to measure the effect of link placements on your own pages. We only read; we never modify anything in your Google account. This data is stored on our EU servers for as long as your connection is active, is never sold, never used for advertising, never used to train machine-learning models, and never shared with third parties except the processors that host our infrastructure. You can disconnect Google at any time on the Domains page of your portal or via your Google account permissions (myaccount.google.com/permissions); on disconnect we stop reading, the stored tokens are deleted, and you can request deletion of any stored aggregates, which we honour within 30 days. The protection mechanisms described under "How we protect your data" below (encryption in transit and at rest, restricted key-based access, audit logging, EU hosting, encrypted backups and breach notification) apply in full to all Google user data. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How we protect your data
All traffic to and from the platform is encrypted in transit (TLS 1.2 or higher, enforced with HSTS). Google OAuth tokens are stored encrypted at rest with per-application keys and are never written to logs; other sensitive fields are protected the same way. Production systems live on EU infrastructure, access is limited to authorised personnel using key-based authentication with no shared accounts, and administrative actions inside the platform are recorded in an audit trail. Google user data is processed server-side only, is never exposed to other customers, and is never used to train machine-learning models. Backups are encrypted and follow the same retention rules as the live data. If a breach affecting your personal data ever occurs, we will notify you and the supervisory authority without undue delay, as the GDPR requires.
Your rights
You can request access, correction, export or deletion of your personal data at any time by contacting us. You can lodge a complaint with your data protection authority.