Privacy Policy

1. Quick Summary

• We collect basic info to run your business page (name, email, phone).
• We do not sell your personal information.
• You control your data and can request access, deletion, or corrections at any time via our data rights request form.
• We use trusted services (Stripe, Resend, Twilio, Anthropic, Google) to operate.
• Your data is encrypted and stored securely in the United States.

For full details, read the policy below.

2. Who We Are

This Privacy Policy describes how Stack Host LLC(“we,” “us,” or “our”), operating the LinkToReviewplatform (“LinkToReview” or the “Service”), collects, uses, and shares your personal information. Stack Host LLC is the data controller for personal information processed through the Service.

3. Information We Collect

3.1 Information You Provide Directly

• Account info: name, email, phone, password
• Business info: business name, address, hours, photos
• Customer contact data: when business owners upload customer contacts (email, phone, name)
• Communications: emails, SMS, chat messages with our AI agent
• Payment info: processed by Stripe; we do not store card numbers
• Reviews and feedback you submit. If you provide an optional email when leaving a review, it is used only for spam prevention (deduplication) and is not displayed publicly.

3.2 Information We Collect Automatically

• Usage data: pages viewed, buttons clicked, time on site
• Device info: browser, OS, screen size
• IP address and approximate location (city/state)
• Cookies and similar tracking technologies
• Performance data: error logs, load times

3.3 Information from Third Parties

• Google Places API (business listings)
• Stripe (payment status, subscription info)
• Authentication providers (where applicable)

4. How We Use Your Information

• To operate your business page and review funnel
• To send transactional emails (account, billing, notifications)
• To send marketing emails (only if you have opted in)
• To process payments via Stripe
• To improve our products
• To prevent fraud and abuse
• To comply with legal obligations
• To communicate with you about our services

5. How We Share Your Information

5.1 Service Providers

• Stripe (payment processing)
• Resend (email delivery)
• Twilio (SMS delivery)
• Anthropic (AI features)
• DigitalOcean (hosting)
• Google (Places API)

5.2 Other Sharing

• With your consent
• For legal compliance (subpoenas, court orders, lawful requests)
• For business transfers (if Stack Host LLC is acquired or merges)
• For fraud prevention

We do NOT sell your personal information.

6. Cookies and Tracking

We use essential cookies for authentication, security, and core functionality. Some analytics cookies help us understand how the Service is used so we can improve it. You can control cookies via your browser settings. For details see our Cookie Policy.

7. Data Retention

• Active account data: kept while your account is active
• Closed accounts: deleted within 90 days of closure
• Marketing emails: until unsubscribed, then 30 additional days
• Payment records: 7 years (US tax compliance — IRS recordkeeping requirements)
• Server logs: 90 days
• Backup snapshots: 30 days rolling

8. Data Security

• Encryption in transit (HTTPS/TLS) for all customer-facing traffic
• Database access restricted to authorized internal services
• Sensitive credentials stored in encrypted secret storage
• Regular security review of code changes
• Incident response and breach notification procedures in place

No service can guarantee absolute security. We commit to notifying affected users in accordance with applicable law if a breach occurs that materially impacts their data.

9. Children's Privacy

LinkToReview is not directed to children under 18, and we do not knowingly collect personal information from children. Parents who believe a child has submitted information may contact us at support@linktoreview.com to request deletion.

10. California Privacy Rights (CCPA / CPRA)

10.1 Categories of Personal Information Collected

• Identifiers (name, email, IP address)
• Personal information under Cal. Civ. Code § 1798.80(e) (name, address, phone)
• Commercial information (subscription history, services purchased)
• Internet or other electronic network activity (browsing, page interactions)
• Geolocation data (approximate)
• Audio, electronic, or similar information (chat conversations, support emails)
• Inferences drawn from the above

10.2 Sources of Personal Information

• Directly from users
• From service providers (e.g., payment processor, email/SMS providers)
• From third-party APIs (e.g., Google Places)

10.3 Business Purposes for Collection

• Operating the Service
• Customer support
• Marketing (with consent)
• Security and fraud prevention

10.4 Categories of Third Parties We Share With

• Service providers (see Section 5.1)
• Legal authorities when required

10.5 California Resident Rights

• Right to Know: Request what personal information we have about you
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate information
• Right to Opt-Out of Sale/Sharing: We do not sell, but you can opt out anyway via our Do Not Sell or Share page
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for non-essential purposes
• Right to Non-Discrimination: We will not penalize you for exercising these rights

10.6 How to Exercise Your Rights

• Submit a request via our data rights request form
• Or email support@linktoreview.com
• Verification required (we will match the request to your account)
• Response within 45 days (extendable to 90 with notice)

10.7 Do Not Sell or Share My Personal Information

Stack Host LLC does not sell or share your personal information for cross-context behavioral advertising. To confirm or read more, visit /privacy/do-not-sell.

10.8 Authorized Agents

You may designate an authorized agent to make a request on your behalf. The agent must provide written authorization, and we will verify both the agent and the underlying consumer.

11. Canadian Privacy Rights (PIPEDA)

11.1 Canadian Resident Rights

• Access: Request what personal information we have about you
• Correction: Fix inaccurate information
• Withdrawal of Consent: Stop processing where consent is the basis
• Complaints: Contact our Privacy Officer

11.2 Privacy Officer Contact

Brian McCullough, Privacy Officer
Email: support@linktoreview.com
Mail: Stack Host LLC, 214 Main St #154, El Segundo, CA 90245

11.3 Cross-Border Transfer

Your data is processed in the United States. By using the Service, Canadian users are deemed to consent to this transfer.

11.4 Quebec Specifics (Law 25)

• Privacy by default
• Privacy impact assessments for high-risk data
• Right to data portability
• Right to de-indexing requests

12. GDPR Rights

For users in the European Economic Area and the United Kingdom:

• Lawful bases for processing: consent, contract performance, and legitimate interests
• Rights to access, rectification, erasure, restriction, portability, and objection
• Right to lodge a complaint with your local supervisory authority
• International transfers are governed by Standard Contractual Clauses where applicable

To exercise any of these rights, use our data rights request form or email support@linktoreview.com.

13. Other Jurisdictions

Residents of states with privacy statutes — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana — may have additional rights. Use the data rights request form to exercise them and we will respond per applicable law.

14. Changes to This Policy

We may update this policy from time to time. Material changes will be notified via email or in-app notice. Continued use of the Service after a change takes effect indicates acceptance of the updated policy. Previous versions are available upon request.

15. Contact Us

Stack Host LLC
214 Main St #154, El Segundo, CA 90245
Email: support@linktoreview.com
Privacy Officer: Brian McCullough