Privacy Policy

Last updated: April 2026

1. Introduction

ReviewLinker™ (“we”, “us”, or “our”) is operated by Eight Two Studio Ltd. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the ReviewLinker website located at www.reviewlinker.io (the “Service”).

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

We collect the following types of information:

Account information — when you create an account, we collect your email address and, optionally, your first and last name.
Book and link data — the book titles, ASINs, custom URL slugs, and settings you create within the Service.
Subscription and billing data — your subscription plan and Stripe customer ID. We do not store your full payment card details — these are handled directly by Stripe.
Link click data — when a reader clicks a ReviewLinker redirect link, we log the destination Amazon marketplace, approximate country, and traffic source (link or QR scan). No personal data about the reader is stored.
Usage data — through Google Analytics (with your consent), we collect anonymised data about how visitors interact with the site (e.g. pages visited, time on site, device type, country). This data does not identify you personally.
Contact form submissions — if you contact us via our contact form, we store your name, email address, and message.
Technical data — server logs and error reports collected automatically by our hosting and error monitoring providers.

3. How We Use Your Information

We use the information we collect to:

Create and manage your account and provide the Service.
Process payments and manage your subscription.
Send transactional emails (e.g. account confirmation, billing receipts).
Send product updates and announcements (email marketing — you can unsubscribe at any time).
Display click analytics within your dashboard.
Understand how the Service is used so we can improve it.
Diagnose technical issues and maintain service reliability.
Respond to support requests.
Comply with legal obligations.

We will never use your information for any purpose not listed above.

4. Legal Basis for Processing (UK GDPR)

Where UK GDPR applies, we process your personal data on the following legal bases:

Contract performance (Article 6(1)(b)) — we process your account data, book data, and billing information to provide the Service you have signed up for.
Consent (Article 6(1)(a)) — we process your email address for marketing communications and use Google Analytics cookies only with your consent. You may withdraw consent at any time by unsubscribing or adjusting your cookie preferences.
Legitimate interests (Article 6(1)(f)) — we process anonymised analytics data, redirect click logs, and error monitoring data on the basis of our legitimate interest in improving the Service and maintaining its security. This processing does not override your rights and freedoms.
Legal obligation (Article 6(1)(c)) — where required, we process data to comply with applicable laws.

5. Email Communications

When you create an account, we may send you product updates and announcements about ReviewLinker. You can unsubscribe at any time using the link at the bottom of any marketing email we send.

We will always send transactional emails required to deliver the Service (e.g. email verification, billing confirmations). These cannot be opted out of while you have an active account.

We use Kit (formerly ConvertKit) to manage email subscribers and Resend to send transactional emails. Your email address is processed by these providers in accordance with their own privacy policies.

6. Cookies and Analytics

We use Google Analytics to understand how visitors use the Service. Google Analytics uses cookies to collect information about site usage. This data is anonymised and aggregated — we do not use it to identify individual users.

We only load Google Analytics after you have given your consent via our cookie banner. You can change your preferences at any time using the cookie preferences link in the footer.

For full details of the cookies we use, see our Cookie Policy.

7. Third-Party Services

We use the following third-party services that may process your data:

Stripe — payment processing and subscription management. Card details are handled directly by Stripe and are never stored on our servers.
Supabase — database and authentication infrastructure. Your account and book data is stored in Supabase’s EU-hosted infrastructure.
Kit (ConvertKit) — email marketing. Your email address and optional first name are stored and processed by Kit, Inc.
Resend — transactional email delivery (e.g. account verification, billing receipts).
Google Analytics — anonymised website usage analytics (consent required). Data is processed by Google LLC.
Sentry — error monitoring. Error reports may include technical data such as browser type, operating system, and the page where an error occurred. No account credentials are included.
Cloudflare Turnstile — spam and bot protection on our contact form. Turnstile operates without tracking cookies.
Vercel — hosting provider. Server logs may be retained by Vercel for operational purposes.
Cloudflare R2 — object storage used to hold automated daily database backups. Backups contain account and book data and are retained for 30 days before deletion.

We do not sell your personal data to any third party, and we do not share it with third parties beyond those listed above.

8. Amazon Redirect Links

When a reader follows a ReviewLinker redirect link, we detect their approximate country (using request headers — we do not store IP addresses) and redirect them to the appropriate Amazon marketplace. We log the destination marketplace, general country, and traffic source (link or QR) for analytics purposes.

We do not store any personally identifiable information about readers who follow redirect links.

9. Data Retention

Account data — retained for as long as your account is active. If you request deletion, we will remove your personal data within 30 days.
Book and click data — retained for as long as your account is active and deleted with your account upon request.
Billing records — retained for 7 years to comply with UK financial record-keeping obligations.
Email marketing list — retained until you unsubscribe. You can request complete removal at any time.
Contact form submissions — retained for up to 12 months for support and correspondence purposes.
Anonymised analytics data — retained for up to 26 months in accordance with our Google Analytics settings.

10. Your Rights

Depending on your location, you may have rights under applicable data protection law, including:

The right to access the personal data we hold about you.
The right to request correction of inaccurate data.
The right to request deletion of your data.
The right to object to or restrict certain processing.
The right to data portability.
The right to withdraw consent at any time (where processing is based on consent).
The right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe your personal data has been handled unlawfully.

To exercise any of these rights, please contact us at the address in Section 12.

11. Children’s Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after any changes constitutes your acceptance of the updated policy.

13. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

support@reviewlinker.io