Privacy Policy

1. Definitions

User (“you”) means any individual or organization accessing or using the Services.

Account means a registered profile used to access certain features.

Catalog means a collection of links created by a User (can be private, public, or shared by link).

Personal Data means information that identifies or can be reasonably linked to an individual.

2. Information We Collect

2.1 Information You Provide

• Account data: name, email, password (hashed), and optional profile details.
• Content: links and catalogs (titles, descriptions, tags), collaboration settings, sharing preferences.
• Billing: subscription plan details handled by third-party payment processors (we do not store card numbers).
• Support: messages, attachments, and contact details you submit to us.

2.2 Information Collected Automatically

• Log data: IP address, device/browser type, OS, language, referrer, timestamps, session identifiers.
• Usage data: interactions with catalogs and links, sharing events, feature engagement metrics.
• Device data: approximate location (e.g., country/region), mobile identifiers.
• Cookies and similar technologies (see Section 5).

2.3 Information from Third Parties

• Single Sign-On (e.g., Google): we may receive your name, email, avatar according to your SSO settings.
• Social platforms: if you share content to third-party services, we may receive related metadata subject to their policies.

3. How We Use Your Information

• To operate, maintain, and improve the Services.
• To authenticate users and manage Accounts.
• To enable creation, organization, and sharing of link catalogs (including team features).
• To provide customer support and communicate about service updates and transactions.
• To personalize features and content where permitted by law.
• To detect, prevent, and respond to fraud, abuse, security incidents, and policy violations.
• To perform analytics, research, and reporting to improve quality and reliability.
• To comply with legal obligations and enforce our terms.
• With your consent, to send marketing communications (you can opt out at any time).

Legal bases (where applicable, e.g., GDPR) include: performance of a contract, legitimate interests (e.g., service operation, security, product improvement), consent (e.g., marketing), and compliance with legal obligations.

4. Sharing of Information

• Service providers: hosting, storage, analytics, customer support, payment processing.
• Other users: when you make a catalog public or share it via link, its content becomes visible as configured.
• Advertising & analytics partners: to understand usage and (where permitted) tailor messages; we do not share names or payment card data for ads.
• Legal & safety: to comply with law, respond to lawful requests, or protect rights, property, and safety.
• Business transfers: if we undergo a merger, acquisition, reorganization, or asset sale.

We do not sell Personal Data for monetary compensation. Where “sale” is defined to include certain advertising practices, we honor opt-out rights as required by law.

5. Cookies & Similar Technologies

We use cookies, local storage, and similar technologies to:

• Keep you signed in and maintain session security.
• Remember your preferences (e.g., language, UI settings).
• Measure performance and improve the Services.
• Where permitted, personalize content or marketing.

You can control cookies through your browser settings. Disabling certain cookies may affect functionality.

6. Data Retention

We retain Personal Data only for as long as necessary for the purposes described in this Policy or as required by law. Typical periods:

• Account & profile data: until account deletion.
• Catalogs & links: until you delete them or your account.
• Transactional records: retained per legal and tax requirements.
• Backups: typically up to 180 days, then purged on a rolling basis.

7. International Transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) to protect your Personal Data.

8. Your Rights

Depending on your jurisdiction (e.g., GDPR, UK GDPR, CCPA/CPRA), you may have the right to:

• Access, correct, or update your Personal Data.
• Delete your data (“Right to be Forgotten”) subject to legal exceptions.
• Restrict or object to certain processing.
• Receive a portable copy of your data.
• Withdraw consent where processing is based on consent (e.g., marketing).
• Lodge a complaint with a supervisory authority.

To exercise rights, contact us at privacy@lbook.work. We may need to verify your identity and authority to act on behalf of a user.

You will not be discriminated against for exercising privacy rights under applicable law.

9. Security

We implement administrative, technical, and physical safeguards designed to protect Personal Data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children’s Privacy

The Services are not directed to individuals under 16 years of age (or as defined by local law). We do not knowingly collect Personal Data from children. If you believe a child has provided Personal Data, contact us at privacy@lbook.work for deletion.

11. Do Not Track

Some browsers offer a “Do Not Track” signal. Because there is no common industry standard for DNT, we do not currently respond to such signals. You can manage cookies and permissions in your browser settings.

12. Changes to This Policy

We may update this Policy from time to time. We will post updates on this page with an updated Effective Date. If changes materially affect your rights, we may also notify you by email or in-app notice.

13. Contact Us