Effective from 29 September 2026.
Data controller
Bondtofte Holding ApS, CVR 33642911
Sedenvej 3, 5000 Odense C, Denmark
Phone +45 32 73 62 93, email hello@thelinkbuildinghub.com
Bondtofte Holding ApS operates The Linkbuilding Hub and is the data controller for the personal data processed in the service.
What data we process
When you create an account: your email address and a password. The password is stored only as an encrypted hash, and we cannot see it.
When you use the service: the websites you add (address, name, description, audience, market and website type), your status per platform, the link addresses and notes you save yourself, and the AI drafts you request. If you use the login vault, the username, password and notes for the platforms are encrypted (AES-256-GCM) before they are stored in the database.
When you pay: Stripe handles the card details. We do not receive your card number. We store your Stripe customer ID, the status of your subscription and the number of extra websites.
Emails: whether you have agreed to tips and offers by email, the market and language you chose, the wording of your consent and when you gave it, and a log of which emails have been sent to you.
Cookies and similar: necessary cookies for login, language and theme. Only with your consent to marketing is OpenAI's ad pixel loaded, and only then do we send information about your sign-up or purchase (including your email address) to OpenAI to measure ads. You can change your choice at any time under "Cookies" at the bottom of the page.
Purposes and legal basis
- To deliver the service you asked for, including account, websites, progress and payment: performance of the contract (GDPR Article 6(1)(b)).
- Bookkeeping and invoices: legal obligation under the Danish Bookkeeping Act (Article 6(1)(c)).
- Tips and offers by email and measuring ads: your consent (Article 6(1)(a)), which you can withdraw at any time.
- Security, troubleshooting and preventing misuse: our legitimate interest in a secure service (Article 6(1)(f)).
Who we share data with
We never sell your data. We use these processors and suppliers:
- Supabase (database and login). Data is stored in the EU (Frankfurt).
- Vercel (hosting of the website and server functions). May process data in the USA.
- Stripe (payment). Stripe Payments Europe, Ltd., Ireland.
- Resend (sending emails). Emails are sent via the EU (Ireland).
- Anthropic (writes AI drafts when you ask for them). We send the website's text, your description and the directory's requirements, never your saved logins. Processed in the USA.
- OpenAI (ad pixel and ad measurement). Only with your consent to marketing. Processed in the USA.
Transfers to the USA are based on the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework.
How long we keep the data
Your account and website data is kept for as long as you have an account. If you delete the account, we delete it. Data required by the Bookkeeping Act (invoices and payments) is kept for five years from the end of the financial year it relates to. Copies in operational backups are deleted automatically as the backups rotate.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability and to object. If you have given consent, you can withdraw it at any time, without affecting the processing before the withdrawal.
You can delete websites and all their data in the app yourself, and you can delete the whole account from your profile. Otherwise, write to hello@thelinkbuildinghub.com.
You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk.
Changes
If we change this policy materially, you will be notified by email or in the app before the change takes effect.