Privacy Policy

1. Controller

GL Eudepot GmbH Basler Str. 3 61352 Bad Homburg v. d. Höhe Germany Email: hello@linkorna.com

2. Hosting and technical delivery

When the site is accessed, we process technically necessary connection data such as IP address, date and time, requested URL, referrer, browser and device information. We use it to deliver the service securely, diagnose faults and prevent misuse. The legal basis is Art. 6(1)(f) GDPR.

• Hosting and delivery: Vercel
• Authentication, database and file storage: Supabase

3. Account, tasks and files

When you register and use LINKORNA, we process contact, login and account data, workspace assignment, inputs, uploaded files, task parameters and generated results. This is necessary to provide the contracted service under Art. 6(1)(b) GDPR.

Do not submit special-category personal data or confidential third-party data unless it is necessary and you are legally permitted to do so.

4. AI processing

To provide AI features, task content and files may be sent to OpenAI or a model provider connected through Vercel AI Gateway, only to the extent needed for the requested output. The legal basis is Art. 6(1)(b) GDPR.

5. Payments and transactional email

Stripe processes the contract and payment metadata needed for checkout, subscriptions, invoices and payment status; full payment details are normally collected by Stripe. Resend delivers contractual and billing emails. The legal bases are Art. 6(1)(b) and (c) GDPR.

6. Cookies, local storage and analytics

Necessary cookies and local storage support login, core features and storage of your cookie choice. Optional Vercel Web Analytics and Speed Insights load only after you consent to analytics. The legal basis is consent under Art. 6(1)(a) GDPR together with Section 25 TDDDG.

You can change your choice at any time through Cookie Settings. Withdrawal applies prospectively. No marketing tags are currently installed; future Google or Meta tags must remain blocked until marketing consent is given.

7. Recipients and international transfers

Recipients are limited to the processors and providers identified above where required for operations, the contract, payment or the selected AI feature. Providers may process data outside the EEA. Where required, transfers rely on an adequacy decision or safeguards such as the EU Standard Contractual Clauses.

8. Retention

We keep personal data only for the purpose, contract or mandatory retention period. Account data is generally retained until account deletion or completion of the contract. Tasks and results remain in the workspace until deleted or the account ends. Billing records follow statutory commercial and tax retention periods. Technical logs are deleted or anonymised when no longer needed for security and diagnostics.

9. Your rights

Subject to the legal conditions, you may request access, correction, deletion, restriction, portability and object to processing. You may withdraw consent at any time for the future. Email hello@linkorna.com to exercise these rights.

10. Complaints

You may complain to a data protection authority. The Hessian Commissioner for Data Protection and Freedom of Information is generally competent for the company’s registered office; you may also contact the authority where you live or work.

11. Security and updates

We use appropriate technical and organisational safeguards, although no internet service can guarantee absolute security. We will update this policy when processing, providers or the legal position materially changes.