Last updated: August 13, 2026
Linkwise is a link-saving and organization tool that lets you save links, organize them into collections, and interact with your saved material through an AI chat feature. Account creation is required to use the Service.
This policy covers the Linkwise iOS and iPadOS applications, the Linkwise Chrome extension, and the linkwise.app website.
For questions about this policy, contact us at: [email protected]
We do not collect, store, or process your payment card details or financial data. Card data is handled entirely by our payment providers:
We receive limited non-financial transaction data from these providers - a subscription status, a product identifier, a renewal or expiry date, and an anonymized transaction reference - solely to activate and manage your paid features. We never receive your card number, CVV, or bank details.
The links, collections, highlights, notes, and tags you save within Linkwise are stored to power the Service's functionality. This content belongs to you and is processed only as necessary to provide the Service.
📌 We do not sell, rent, or share your link data with third parties for marketing or advertising purposes.
| Purpose | Lawful basis (GDPR Art. 6) |
|---|---|
| Creating and managing your account | Performance of a contract |
| Authenticating you and securing your session | Performance of a contract |
| Providing, operating, and maintaining the Service | Performance of a contract |
| Processing subscriptions and managing entitlements | Performance of a contract |
| Detecting fraud and security threats | Legitimate interests |
| Monitoring and analysing usage trends | Legitimate interests |
| Improving and personalising your experience | Legitimate interests |
| Responding to support requests | Performance of a contract / Legitimate interests |
| Complying with legal and tax obligations | Legal obligation |
We do not use your data for profiling, targeted advertising, or any purpose beyond what is described in this policy.
We use the following processors. Each is bound by contract to process data only as instructed by us and in compliance with applicable privacy law.
| Provider | Role | Data it receives | Region |
|---|---|---|---|
| Supabase | Database, authentication, and serverless functions - our primary infrastructure | Account details, all saved link and collection data, session tokens | Southeast Asia (Singapore) |
| RevenueCat | Cross-platform subscription entitlements | Your account identifier, subscription status, anonymized purchase receipts | United States |
| Apple | In-app purchases on iOS and iPadOS | Payment and billing data (we do not receive it) | Global |
| Paddle | Merchant of Record for web and extension purchases | Payment, billing, and tax-residence data (we do not receive card data) | Global |
| Anthropic, OpenAI, Perplexity | Powers AI summaries, insights, chat and websearch | The content you explicitly submit to an AI feature | Global |
| PostHog | Product analytics | Pseudonymous usage events tied to a user identifier | United States |
| Permission | Why |
|---|---|
| activeTab | Read the URL and title of the current tab when you invoke Linkwise - by clicking the toolbar icon, using the keyboard shortcut, or choosing a context-menu item |
| tabs | Save multiple open tabs at once, and open Linkwise surfaces |
| storage | Store your session and preferences locally in the browser |
| identity | Sign you in via Google OAuth |
| contextMenus | Add "Save to Linkwise" to the right-click menu |
| sidePanel | Show Linkwise in Chrome's side panel |
| alarms | Schedule background refresh and session renewal |
| notifications | Show you save confirmations and plan-limit notices |
| bookmarks (optional) | Requested only if you choose to import your existing bookmarks. Declined by default; you can revoke it at any time |
Host permissions: the extension is granted network access to exactly one host - our Supabase backend It has no permission to send your data to any other server.
Linkwise runs a content script on web pages so that saving and highlighting work without a page reload:
Your authentication session is stored locally in your browser. Links, collections, and highlights you save are transmitted to our Supabase backend and stored in your account. Nothing is sent anywhere else.
Uninstalling the extension removes all locally stored data from your browser. It does not delete your Linkwise account or its server-side data - see Section 7 - and it does not cancel an active subscription.
| Data | Retained for |
|---|---|
| Link and collection data | While your account is active; deleted on request |
| Technical and log data | 30-90 days, for security and debugging |
| Support communications | Up to 12 months after resolution |
| Billing and transaction records | This retention is a legal obligation and overrides a deletion request: if you ask us to delete your account, we must still retain the minimum billing records the law requires |
You have the right of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. You also have the right to lodge a complaint with your local supervisory authority.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
You have the right to access information about processing, the right to correction and erasure, the right to grievance redressal, and the right to nominate another individual to exercise your rights on your behalf in case of death or incapacity.
Depending on your state of residence, you may have additional rights under applicable state privacy laws (e.g., CCPA/CPRA for California residents), including the right to know what data is collected, the right to delete, and the right to opt out of sale of personal information. We do not sell personal information and have not done so in the preceding twelve months.
Email [email protected]. We may need to verify your identity before acting on a request.
Linkwise is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately at [email protected] and we will take steps to delete such information promptly.
For users between 13 and 18, parental or guardian consent is required for use of the Service.
We take reasonable and appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction, or alteration. These include encryption in transit, row-level access controls that scope every record to its owning account, and scoped API credentials.
No system is perfectly secure. Where a breach is likely to result in a risk to your rights, we will notify you and the relevant authorities as required by law.
Your data may be processed in countries other than your own, including in the United States and the European Union. For transfers from the EU/EEA and the UK, we rely on appropriate safeguards including Standard Contractual Clauses. For users in India, we comply with the DPDP Act's cross-border data transfer requirements.
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this document. For material changes, we will take reasonable steps to inform you - such as a notice within the Service. We encourage you to review this policy periodically.
For any privacy-related questions, data access requests, or concerns, please reach out to us at:
We aim to respond to all data-related requests within 30 days.