Privacy Policy
This Privacy Policy describes how Url Shortener ("we", "us", or "our") collects, uses, and shares your personal information when you use our URL shortening platform and related services.
1. Introduction
Welcome to Url Shortener. We are committed to protecting your personal information and your right to privacy. This Privacy Policy applies to all information collected through our website, platform, and any related services, sales, marketing, or events.
By accessing or using our Service, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Service immediately.
2. Information We Collect
We collect information you provide directly to us, information collected automatically when you use our Service, and information from third-party sources.
2.1 Information You Provide
- Account information: name, email address, password, avatar, and timezone when you register.
- Billing information: payment method details processed securely by Razorpay. We do not store raw card numbers.
- Team data: team names, member email addresses you invite, and role assignments.
- Links and content: URLs you shorten, titles, descriptions, and associated metadata you enter.
- Communications: messages you send us through support channels or feedback forms.
2.2 Information Collected Automatically
- Click analytics: IP address, approximate geolocation (country, region, city), device type, operating system, browser, and referrer URL — captured when someone clicks one of your short links.
- Usage data: pages you visit on our platform, features you use, and time spent.
- Log data: server logs including request timestamps, error logs, and performance metrics.
- Cookies and tracking: session cookies for authentication and preference cookies. See Section 8 for details.
2.3 Information from Third Parties
- Payment transaction records from Razorpay (transaction IDs, status, and amounts).
- MaxMind GeoIP data used to resolve IP addresses to approximate locations.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Url Shortener platform and its features.
- Process transactions and send related information such as invoices and receipts.
- Send transactional emails (account verification, password reset, subscription confirmations).
- Send product updates, security notices, and support responses.
- Generate aggregated, anonymised analytics you can view in your dashboard.
- Detect, investigate, and prevent fraudulent or abusive activity and spam links.
- Comply with legal obligations.
- Improve and develop new features based on usage patterns (using aggregated data only).
We do not sell your personal data to third parties. We do not use your data to serve third-party advertising.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
- Account data: Retained until you delete your account. Soft-deleted and purged after 30 days.
- Click analytics: Retained for 24 months from the date of the click. Older data is aggregated and anonymised.
- Billing records: Retained for 7 years to comply with accounting and tax regulations.
- Support communications: Retained for 2 years after ticket closure.
You may request deletion of your data at any time by contacting us (see Section 12). Note that certain data may need to be retained for legal compliance.
6. Security
We implement industry-standard technical and organisational measures to protect your data, including:
- TLS/SSL encryption for all data in transit.
- AES-256 encryption for sensitive data at rest.
- Hashed passwords using bcrypt with a cost factor of 12.
- Regular automated security scans and dependency audits.
- Role-based access control restricting internal access to personal data.
- Two-factor authentication support for all accounts.
Despite our efforts, no method of transmission over the internet is 100% secure. If you suspect a security incident, please contact us immediately at security{{ strtolower(config('app.name')) }}.io.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your personal data ("right to be forgotten").
- Portability: Receive your data in a machine-readable format.
- Objection: Object to processing of your data for certain purposes.
- Restriction: Request restricted processing in certain circumstances.
- Withdraw consent: Where processing is based on consent, withdraw it at any time.
To exercise any of these rights, contact us at privacy{{ strtolower(config('app.name')) }}.io. We will respond within 30 days.
9. Third-Party Services
Our Service integrates with the following third-party providers. Their privacy practices apply when you interact with them:
- Razorpay — payment processing. Governed by the Razorpay Privacy Policy.
- MaxMind GeoIP — IP geolocation (server-side only; your IP is not shared with MaxMind in real-time).
- Google Fonts — font delivery. May set performance cookies per Google's policies.
We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies.
10. Children's Privacy
Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete such information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Sending an email to your registered address at least 14 days before the change takes effect.
- Displaying a prominent notice in the dashboard.
- Updating the "Last updated" date at the top of this page.
Continued use of the Service after the effective date constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: