Who is responsible
In the words of the privacy law (the GDPR), whoever runs Linkly is the controller: the one responsible for your data, and the one to write to.
Linkly is in beta. It is made and run by its maker, not yet by a company. The company’s name, address and registration numbers will be here when Linkly launches. Until then, the address below is for everything: a question, a request about your data or a complaint.
- info@linkly.me
A question about your privacy, or a request about your data: email info@linkly.me. This statement covers the Linkly app in your browser, the Linkly app on your phone and this website.
What Linkly keeps
Linkly knows only what you give it, what you connect to it, and what your browser or phone has to send to make it work.
| What | What is in it | Where it comes from |
|---|---|---|
| Your account | First name, last name, email address, country and language. Your password is kept by Linkly’s own login service as a hash, which cannot be read back; a passkey stays on your own device. | You, when you sign up |
| Transactions | Date, amount, description, the name and account number of the other party, and the name and number of your own account. | A bank file you import, or your bank, through the connection you approve |
| Documents | Receipts, invoices, payslips, statements and other files, and what was read from them: the shop, the date, the amounts, the VAT and the lines; for a payslip also the employer, the period, gross and net. | You upload them, or they arrive as an attachment in your email |
| Email about money | The whole message with its attachments and a picture of how it looks, and what was read from it: an order, a parcel, a contract, a booking, a statement. | The email account you connect |
| Other email | No content. Only the sender, the subject and how it was sorted, so that it is not read a second time. | The email account you connect |
| The keys to your connections | The permission you gave at Google or Microsoft, or the app password of your email account, and the key of your bank connection. All stored encrypted. | You, when you connect |
| What you do in Linkly | The categories you set, the corrections you make, your administrations and who you share them with, and the feedback you send, with a screenshot if you add one. | You |
| Use and technical data | Which kind of page is opened and which features are used (ids and labels, never names or amounts), error reports, server logs with the time and the request, and the address of your phone for notifications if you allow them. | Your browser or phone |
A payslip can show a citizen service number (BSN) or a date of birth. Linkly does not take those out as data: the AI is told not to return them, and they are dropped if it does. They stay inside the file itself.
Money says a lot about a person. A receipt from a pharmacy or a gift to a church can show something about your health or what you believe. Linkly treats all of it as sensitive and uses it only to show you your own records.
You are not obliged to give Linkly anything. But without an account Linkly cannot let you in, and without a bank file, a bank connection, an email account or a document there is nothing for it to put in order.
What Linkly uses it for
The law asks for a reason, a legal ground, for every use of personal data. These are Linkly’s.
| Purpose | What it involves | Legal ground |
|---|---|---|
| Giving you Linkly | Storing and showing your records, reading documents and email, matching receipts to payments, finding recurring costs, overviews, Ask Linkly, the notifications you switched on, sharing an administration with someone. | The agreement with you (the terms) |
| Your account and messages about the service | Logging in, and emails such as an invitation, a code to log in or a notice that a connection stopped working. | The agreement with you |
| Keeping Linkly safe and working | Logs, error reports, limits against abuse, backups. | Legitimate interest: a service that is safe and works |
| Making Linkly better | Counting which pages and features are used, without names or amounts; reading the feedback you send; looking at corrections people made, to see where reading goes wrong. | Legitimate interest: improving Linkly. You can object |
| Visitor statistics of this website | Google Analytics, only after you click Accept in the cookie bar. | Your consent, which you can withdraw at any time |
| Letting you know, and answering you | The address you leave in the keep-me-posted form, and the question you send. | Your request |
| What the law requires | Answering a request you make under the privacy law, or handing over data when a law or a court orders it. | Legal obligation |
Linkly does not use your data for advertising and does not sell it.
AI: what it reads and what it decides
Linkly uses an AI model to read your receipts, invoices and payslips, to sort your email into what is about money and what is not, to put payments in a category, to write the one-line summary of your month and to answer what you ask in Ask Linkly.
For that the model gets what it has to read: the document; the sender, the subject, the names of the attachments and text of an email; the amount, the description and the other party of a payment; your question and the figures for the answer. That goes for every email Linkly sorts with AI, also one that turns out not to be about money. Linkly adds no name, no account id and no file name. What is printed on a document or written in an email is read along with it, a name or an account number included.
The request goes to OpenRouter, a company in the United States, which passes it on to the maker of the model: today Google, for a Gemini model. Every request says it may not be used to train models, and the same is switched off on Linkly’s account. These services may hold a request for a short time, for example to answer it faster. Linkly has not required them to process it inside Europe.
No decisions about you. The AI reads and sorts. It decides nothing that has legal or similar weight for you. It can be wrong: a date, an amount or a category can be off. You can correct every result, and Linkly asks you to look at the ones it is unsure about (To check).
Linkly’s own record of AI use holds counts only: how much was read and what it cost, never the document or the answer. Of each document Linkly keeps the model’s latest answer. What you ask in Ask Linkly is not stored on Linkly’s server: the conversation lives in your browser tab, or in the app on your phone until you close the app.
Who else handles your data
Linkly cannot run without a few other companies. Each one gets only what its job needs. The first five work for Linkly, on its instructions; the others are services you choose to connect, or that deliver something to you.
| Who | What for and what they get | Where |
|---|---|---|
| Leaseweb | The server Linkly and its database run on, and a daily backup of that server. Everything in Linkly is on it. | Amsterdam, the Netherlands |
| Scaleway | Stores your files and the backups, which are encrypted before they leave the server, and sends Linkly’s emails: your email address and the message. | Amsterdam; email is sent from Paris, France |
| Cloudflare | Passes traffic on to linkly.me and the app and shields them from attacks. Your IP address and everything that travels between you and Linkly goes through it. In the app it also adds a script of its own that counts page visits (Cloudflare Web Analytics), without cookies; Linkly is switching that off. | A worldwide network; an American company |
| OpenRouter and the maker of the model (today Google) | Reading by AI: what the AI has to read, as described above. | The United States, and where the model runs |
| Google Analytics | Visitor statistics of this website, only if you accept the cookies: the pages you view, the site you came from, roughly where you are, your device and browser. Never in the app. | Google Ireland; the EU and the United States |
| Enable Banking | The connection to your bank, if you make one. You approve it at your bank; your payments pass through Enable Banking to Linkly. | Finland |
| Google or Microsoft | Only if you connect a Gmail or Outlook account: Linkly reads your email there with read-only permission. They get nothing from Linkly, but can see that you gave Linkly access. | Where your email already is |
| Mozilla and your email provider | Only when you connect an email account with an app password (IMAP) at a provider Linkly does not know yet, to find its server settings. Linkly asks Mozilla’s public list of email servers (the one Thunderbird uses) with the part of your address after the @. If that list does not know it, Linkly asks your provider’s own settings address with your full email address. Linkly then reads your email at your provider, read-only. | Mozilla: the United States; your provider: where your email already is |
| Apple and Google | Deliver a notification to your phone, if you allow notifications: the address of your phone and the short text, which never holds an amount. | The United States |
| DHL and GLS | Tell Linkly where a parcel is. They get the tracking code and the delivery postcode, nothing about you. | The Netherlands; DHL’s tracking service: the EU |
| Google Fonts | The app in your browser loads its typeface from Google. Google gets your IP address and what your browser sends with every request, such as its type and language; no cookie, and nothing from Linkly. Linkly is moving the typeface onto its own server. | Google; the EU and the United States |
Outside Europe. OpenRouter, Google, Cloudflare and Apple are American companies, so part of what they handle can be processed in the United States. That happens under the safeguards European law asks for: the European Commission’s decision that American companies certified under the EU–US Data Privacy Framework protect data well enough, or the Commission’s standard contract clauses in the agreement with that company. Ask and you get the details for any of them. Mozilla’s list of email servers is public: it gets only the part of an email address after the @, and Linkly has no agreement with Mozilla.
Linkly gives your data to nobody else, unless a law or a court order leaves no choice.
Parcels: what a carrier is asked
When an email about an order names a tracking code, Linkly can ask the carrier where the parcel is. It asks DHL and GLS on their public track and trace, from Linkly’s server or from your own phone. For DHL it can also use DHL’s own tracking service, if you agreed to that for your administration. Each time it sends only the tracking code and, when it knows it, the delivery postcode: nothing about you, the order or your household.
Linkly keeps the answer with your order: where the parcel is, when it is expected and when it was delivered. What came from DHL’s tracking service is deleted 30 days after delivery, as DHL asks; the delivery date stays. What came from the public track and trace stays with the order until you delete the order or its administration.
Where your data is
Linkly, its database, its login service and its own statistics run on one server at Leaseweb in Amsterdam. Your files are at Scaleway in Amsterdam. Backups are kept on that server, at Leaseweb and, encrypted, at Scaleway in Amsterdam.
So your data is stored in the European Union. Only what is named under Who else handles your data can leave it.
How long it is kept
Your records stay until you delete them. For everything around them there is a fixed period.
| What | How long | After that |
|---|---|---|
| Your records: payments, documents, kept email, contacts | Until you delete them, the administration or your account | Removed, with their files. Files of records deleted before 11 November 2026 can still be in storage until a clean-up removes them |
| A deleted administration | 30 days, so that you can bring it back | Removed from Linkly for good |
| Your account and your login | Until you delete your account | Your account is removed, and Linkly asks its login service to remove your login at the same time. If that fails, nothing is removed and you see why; then write to info@linkly.me. Administrations only you were in follow the row above; shared ones go to a member who stays |
| Email that is not about money | Its content is not kept after sorting. The sender, the subject and the sorting stay until the administration is removed | Removed |
| A bank file you import | Until it has been read | Deleted; the payments stay. A card statement is kept as a document |
| The keys to your email account and your bank | Until you disconnect | Removed |
| A file you deleted, at the storage provider | 30 more days, as a safeguard against a mistake | Gone for good |
| Backups | At most 190 days | They run out automatically. Until then, something you deleted can still be inside a backup; it is not put back into Linkly, unless all of Linkly has to be restored after a failure |
| Feedback you sent | 12 months after it was dealt with, or until you delete your account | Made anonymous: the text stays, your name and the screenshots go |
| An invitation nobody accepted | 30 days after it ran out | Deleted, with the invited email address |
| The history of uploads and imports | 13 months | Deleted; what was imported stays |
| Counts of which features are used | 13 months | Deleted |
| Error reports, server logs and traces of requests | 30, 31 and 7 days | Deleted |
| Tracking details from DHL’s tracking service | 30 days after delivery | Deleted; the order and its delivery date stay |
| Tracking details from the public track and trace of DHL and GLS | As long as the order | Removed with the order |
| Corrections kept to improve reading | Until the record they belong to is deleted, or your account | What the correction was about is erased, at most a day later |
| The log of who at Linkly looked at user data | No end date | It is the proof of who looked at what |
| Google Analytics on this website | At most 14 months, the longest Google Analytics allows | Deleted by Google |
| Your address and message from the keep-me-posted form, which reach Linkly as an email to info@linkly.me; Linkly’s server stores none of it | Until Linkly is open and you have been told, or until you ask for it to go | Deleted |
Who sees what inside Linkly
You see the administrations you are a member of. Someone you invite to an administration sees everything in it, the email kept there included: a Member can also change things, Read-only can only look. They see nothing of your other administrations.
What the people who run Linkly can see. Linkly’s admin pages show your name and email address, your plan and how much you use, the feedback you sent with its screenshots, corrections you made and error reports. They do not open your documents, your email or your payments. Every look at such data is written to a log.
To keep Linkly running and to repair faults, the people who run Linkly also have technical access to the server and the database. That access is used only when maintenance or a fault calls for it.
Cookies and what stays on your device
- This website sets no cookies unless you click Accept in the cookie bar. Then Google Analytics sets its cookies and measures which pages you view, which site you came from, roughly where you are and which device and browser you use. Google keeps that for at most 14 months. Your IP address is not stored and nothing of it is used for advertising. Your answer and the theme you picked are remembered in your browser’s storage. You can change your answer with Cookie settings at the bottom of every page, or on About & privacy.
- The app sets one cookie of its own, linkly_signed_in, which holds only a 1 and lasts 30 days. It lets this website show “Open app” where it would say “Log in”. The login pages use the cookies that logging in needs.
- In your browser’s storage the app keeps what it needs to work: that you are logged in, your language, the theme and a few choices about how a page looks. What is personal is removed when you log out.
- Statistics in the app are Linkly’s own count of which kinds of pages are opened: no cookies, no stored IP address, and nothing at all when your browser sends Do Not Track.
- The app on your phone keeps your login in the phone’s secure storage. A document you open is kept on the phone as a copy, which the app removes the first time it opens after a day. A photo of a receipt stays until it has been sent. Log out removes all of it: it first sends the photos that are still waiting, and asks before it removes any that could not be sent. When Linkly signs you out without you asking, for example because your login ran out, those photos stay on the phone until you log in again or remove them.
No advertising cookies. Two other companies do come near the app today: Cloudflare adds its count of page visits and Google delivers the typeface (both under Who else handles your data); neither sets a cookie. Because the app’s own cookie and storage are needed for it to work, the app shows no cookie bar.
How it is protected
- Every connection to Linkly is encrypted (HTTPS).
- The keys to your email account and your bank are stored encrypted. Linkly can only read there: it cannot send email and cannot make a payment.
- Every request is checked: you get only the administrations you are a member of.
- Your files are never public. Every download goes through Linkly, which checks that it is yours first.
- Backups are encrypted before they are copied to a second place.
- You can log in with a passkey, and add two-step verification under Login & security.
- The app on your phone can lock itself: it asks for your face, fingerprint or phone passcode when you open it and after 5 minutes away. It is on where the phone has a face or fingerprint set up; you switch it under Settings › App lock.
No system is perfectly safe. If something goes wrong with your data and that puts you at risk, Linkly tells you and the regulator, as the law requires.
Your rights
The privacy law gives you these rights over your data:
- to see it and get a copy;
- to have it corrected;
- to have it deleted;
- to have its use paused while a question about it is open;
- to object to a use that rests on Linkly’s legitimate interest, such as the feature counts;
- to take it along to another service, in a common file format;
- to withdraw a consent, such as accepting the cookies of Google Analytics.
Much of this you do yourself in Linkly: you can correct any record, delete records, an administration or your account (in the app in your browser under Your account › Delete account, or in the app on your phone under Settings › Delete account), and disconnect your email account or your bank.
There is no button yet to download all your data in one go. Email info@linkly.me and you get it sent to you. The same address is for every other request. Linkly answers within one month and it costs nothing. To be sure it is you, Linkly may ask you to write from the email address of your account.
Not satisfied with the answer? Say so, and Linkly looks again. You can always complain to the Dutch regulator, the Autoriteit Persoonsgegevens, or to the regulator of the EU country you live in.
If you are in someone else’s Linkly
Your name and account number can be in the payments of someone who uses Linkly, your name on an invoice they uploaded, your message in their email. Linkly holds that for that person, for their own finances, and does nothing else with it. The legal ground is that person’s legitimate interest in keeping their own finances in order. Linkly cannot tell everyone who appears in someone’s records: it would have to go through those records to find them.
You have the same rights as anyone else. Write to info@linkly.me and Linkly looks at what it can do, with care for both you and the person whose records they are.
Age
Linkly is for people of 18 and older. Linkly does not knowingly keep an account of anyone younger; tell us if you see one and it is removed.
When this statement changes
Linkly changes, and this statement changes with it. The date at the top says when the text last changed. If a change matters for what happens to your data, you hear about it by email before it takes effect.