Privacy Policy
LinkLayer is a content-management tool that helps creators organize media and product links and schedule posts to their own connected social accounts. This policy explains what we store and why.
What we store
- Account info from sign-up (email, display name).
- Media you upload and product links you capture.
- Access tokens for social platforms you connect (Instagram, Pinterest), stored encrypted at rest and used only to publish content you schedule.
How we use it
Solely to provide the app's features: storing your content, generating affiliate links, and publishing posts you schedule to accounts you connect. We do not sell data or share it with third parties except the platform APIs required to publish your content on your behalf.
Platform data (Instagram & Pinterest)
When you connect an Instagram (via Facebook Login) or Pinterest account, we access only what's needed to publish on your behalf:
- Your account identifiers (e.g. Instagram business-account id, Facebook user id, Pinterest user id) and the connected account's name/username.
- An access token, stored encrypted at rest, used only to publish the posts you schedule and to read back engagement metrics (reach, likes, etc.) for posts you published through LinkLayer.
We do not post without your action, and we retain platform data only while your account is connected. Disconnecting a platform in Settings deletes its stored token immediately.
Cookies & local storage
LinkLayer uses only strictly-necessary and functional storage — no advertising or third-party tracking cookies, and no cross-site trackers:
- A session/auth cookie set by our authentication provider (Supabase) to keep you signed in.
- Local storage for UI preferences only (your light/dark theme and sidebar state). It never leaves your browser and holds no personal data.
Because these are essential to the app working, no consent banner is required; clearing your browser storage simply signs you out and resets those preferences.
Data deletion
You control your data and can remove it at any time:
- Disconnect a platform in Settings → removes its stored access token.
- Delete your account in Settings → Danger zone → permanently removes your profile, media, links, posts, and all platform connections.
- Remove the app from Instagram/Facebook → Meta notifies us and we delete the data obtained through that login automatically.
See our Data Deletion instructions for details and to check the status of a deletion request, or email privacy@linklayer.app.
Contact
Questions? Email privacy@linklayer.app. See also our Terms of Service.