Privacy Policy

1. Scope and roles

This Policy applies when Digilnk determines why and how personal information is processed. When a customer submits or publishes information through the Services, Digilnk generally processes that information on the customer’s behalf as a service provider or processor. The customer is responsible for its notices, permissions, instructions, and legal basis for that information. This Policy does not govern third-party sites or resources linked from a product experience.

2. Information we collect

We may collect the following categories of information:

• Account and contact information: name, business email address, authentication identifiers, organization, role, and communications with us.
• Customer content: product information, images, destinations, branding, workflow records, approvals, electronic-signature records, and other material submitted to the Services.
• Transaction information: subscription, order, product quantity, billing status, and payment-related metadata. Payments are processed by Stripe; Digilnk does not receive complete payment-card numbers.
• Usage and device information: IP-derived or request information, browser and device type, timestamps, pages or features used, diagnostic logs, referring host, source parameters, and interactions with resolver links.
• Access-verification information: credentials, jurisdiction, access outcomes, and short-lived access records when a protected resource requires audience verification.
• Information from third parties: identity providers, payment processors, a customer’s administrators, integration partners, and public or business sources.

3. How we use information

We use information to provide, secure, support, bill for, and improve the Services; authenticate users; administer organizations and permissions; publish requested product experiences; process transactions; provide analytics; communicate about accounts and updates; prevent fraud, abuse, and security incidents; enforce agreements; comply with law; and establish, exercise, or defend legal claims. We may create aggregated or de-identified information and use it for any lawful business purpose, provided we do not attempt to re-identify it where prohibited by law.

4. Cookies and similar technologies

We use technologies necessary for authentication, session security, preferences, protected-resource access, and core operation of the Services. We may also use limited measurement technologies to understand performance and usage. Browser controls can restrict cookies, but disabling necessary storage may prevent parts of the Services from working. Where required, we will request consent for non-essential technologies.

5. How we disclose information

We may disclose information to: vendors that provide hosting, infrastructure, authentication, email, payment, support, security, and related services; the customer organization that controls your workspace; parties you direct us to interact with; professional advisers, auditors, insurers, and financing sources; authorities or other parties where we reasonably believe disclosure is required by law or necessary to protect rights, safety, and the Services; and participants in a merger, financing, reorganization, sale, or similar transaction. We may disclose aggregated or de-identified information without restriction.

We do not sell personal information for money. We do not knowingly use personal information for cross-context behavioral advertising. If our practices change, we will provide legally required notices and choices.

6. Data retention

We retain information for as long as reasonably necessary for the purposes described here, including to provide the Services, preserve security and audit records, comply with legal and contractual obligations, resolve disputes, and enforce agreements. Retention varies by data type, customer instructions, subscription status, legal requirements, backup cycles, and the need to preserve immutable or regulated records. De-identified information may be retained indefinitely.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information. No system, transmission, or storage method is completely secure, and we cannot guarantee absolute security. You are responsible for protecting credentials, using available security controls, and promptly notifying us of suspected unauthorized access.

8. Your choices and rights

Depending on where you live and subject to applicable exceptions, you may have rights to request access, correction, deletion, portability, or restriction of personal information; object to certain processing; withdraw consent; or appeal a denied request. You may also have a right not to receive discriminatory treatment for exercising privacy rights. Send requests to support@digilnk.com. We may verify your identity and authority before acting. If your information is controlled by a Digilnk customer, contact that customer first; we will assist the customer as required.

9. International processing

Digilnk and its providers may process information in the United States and other countries whose laws may differ from those where you live. Where required, we use an approved transfer mechanism or other legally recognized safeguard.

10. Children

The Services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13. Contact us if you believe a child has provided information to us.

11. Changes to this Policy

We may update this Policy from time to time. We will post the revised version and update the date above. If required by law, we will provide additional notice or obtain consent. Continued use of the Services after the effective date means the revised Policy applies to subsequent processing, to the extent permitted by law.

12. Contact

Questions, complaints, and privacy requests may be sent to Pream AI, LLC, doing business as Digilnk, at support@digilnk.com.