Privacy Policy

Account information: When you sign in with Google, we receive your name, email address, and profile picture from Google's OAuth service. A copy of your profile picture is stored on our servers to ensure availability.

Saved content: URLs you submit, along with the extracted text and markdown content, embedded images, AI-generated summaries, tags, key insights, and your personal notes.

Usage data: API request logs associated with your API tokens, plus AI usage logs such as provider, model name, token counts, estimated cost, feature name, and timestamp. This is used to monitor usage, enforce plan limits, and track AI cost.

Chat history: Conversations you have with the AI within the Service, stored to provide conversation continuity.

Billing data: Subscription status, plan type, and payment processor identifiers. Payment details (card numbers, billing address) are handled entirely by our payment processor, Polar, and are never stored on our servers.

• To provide, operate, and maintain the Service
• To process and extract content from URLs you save
• To generate AI-powered summaries, tags, and insights using third-party AI providers
• To enable semantic search and RAG-based chat over your saved content
• To enforce usage quotas and rate limits
• To measure AI workload and validate pricing against actual model usage
• To communicate with you about your account or service changes
• To detect and prevent abuse, fraud, or security incidents

We process your personal data on the following legal grounds:

• Contractual necessity: Processing your saved content, generating AI summaries, and enabling search are necessary to deliver the Service you signed up for.
• Legitimate interest: Usage monitoring, abuse prevention, AI cost tracking, and service improvement, where these interests are not overridden by your rights.
• Legal obligation: Where we are required to retain or disclose data by applicable law.

Content you save is processed by our AI pipeline, which uses third-party AI providers to generate summaries, insights, and tags. Extracted text is routed through Sumopod, an AI LLM router, which may forward requests to underlying model providers such as OpenAI, Anthropic, or Google depending on the model selected. Your content is subject to the privacy policies of these providers. We maintain Data Processing Agreements (DPAs) with our AI processors to ensure your data is handled in accordance with applicable data protection laws.

Vector embeddings of your content are stored in our database to power semantic search. These are mathematical representations of text and do not contain readable content.

AI processing is fully automated and is used to organize and summarize your content (e.g., generating tags, summaries, and collection assignments). These automated processes do not make decisions with legal or similarly significant effects on you. If you have concerns about automated processing, you may contact us to request a review.

Your data is stored on servers located in Singapore. We take reasonable technical and organizational measures to protect your data, including encrypted connections (TLS), access controls, and regular security reviews.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we will notify affected users and relevant authorities within 72 hours in the event of a data breach that affects your personal data.

Your data is stored on servers in Singapore. AI processing is performed via Sumopod, which routes requests to model providers (such as OpenAI, Anthropic, or Google) whose servers may be located in the United States or other regions. By using the Service, you acknowledge that your content may be transferred to and processed in countries outside your country of residence, including the United States and Singapore.

For transfers of personal data from the European Economic Area (EEA) or United Kingdom to countries that have not received an adequacy decision, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, along with Data Processing Agreements with our processors (including Sumopod and Polar), to ensure your data receives an equivalent level of protection.

We retain your data for as long as your account is active. Specific retention periods by data type:

• Saved content & notes: Retained while your account is active. Deleted items are soft-deleted and permanently purged after 30 days.
• Chat history: Retained while your account is active. Deleted when you delete a conversation or your account.
• AI usage logs: Retained for up to 12 months for billing verification and abuse prevention, then automatically deleted.
• API token logs: Retained for up to 90 days for security monitoring, then automatically deleted.

You may request deletion of your account and all associated data at any time by contacting us. We will fulfill such requests within 30 days.

We do not sell, trade, or rent your personal information to third parties. We may share data only with:

• Sumopod — AI LLM router that forwards content to underlying model providers (such as OpenAI, Anthropic, or Google) for AI processing (text only, not your account info)
• Polar — for subscription billing and payment processing (email, subscription status, customer identifiers), under a Data Processing Agreement
• Google — for authentication via OAuth, and for anonymized analytics via Google Analytics (only with your consent)
• Infrastructure providers — hosting and storage services under confidentiality agreements
• Law enforcement — if required by valid legal process

Essential cookies: We use a session cookie to keep you signed in. This cookie is strictly necessary and does not require consent.

Analytics cookies: With your consent, we use Google Analytics to understand how the Service is used. Google Analytics collects anonymized usage data (pages visited, session duration, device type) using cookies. IP addresses are anonymized. You can opt out at any time by choosing "Essential only" in the cookie banner or clearing your browser's local storage.

We do not use advertising networks or sell data collected through cookies.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format
• Object to certain processing of your data
• Withdraw consent at any time, where processing is based on consent

To exercise these rights, contact us at hello@userelink.com. We will respond within 30 days.

The Service is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, by sending an email notice. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy, please contact us at hello@userelink.com.

Relink App
Indonesia