隐私政策
生效日期:2026 年 8 月 27 日
Linkr(linkrkol.com)是一款帮助营销人员发现、分析并联系社媒创作者的产品,包含网页工作台和 Chrome 浏览器扩展。本服务由香港靈淩科技有限公司(ACUISPIRE TECHNOLOGY LIMITED,注册于中国香港)运营。本政策说明我们收集哪些数据、如何使用,以及扩展所需的权限用途。
1. 我们收集的数据
- 账号信息:当你通过 Google 或邮箱注册 / 登录 Linkr 时,我们会获取你的邮箱地址和基本资料(由 Supabase Auth 托管),用于创建和维护你的账号。
- 使用数据:你在 Linkr 网页端和浏览器扩展中的操作记录(搜索、收藏、建联记录等),用于提供和优化产品功能。
- 归因与分析数据:随机生成的匿名 ID、插件安装 ID、功能事件、来源域名和 UTM 渠道参数。我们不会把完整访问 URL、邮件正文或社媒账号密码发送到产品分析系统。
- 公开创作者数据:当你使用浏览器扩展浏览 TikTok / Instagram / YouTube 的创作者主页时,扩展会读取当前页面上公开展示的创作者信息(昵称、粉丝数、作品数据等),用于生成分析结果。我们不会读取你与这些平台的私信、密码或任何非公开数据。
- 除扩展实时读取外,我们的创作者索引还包含通过第三方数据服务采集的公开社媒信息,包括创作者公开展示的联系方式(如公开商务邮箱)。这些数据仅来源于公开渠道,用于帮助你发现、评估和联系创作者。
- 支付信息:付费订阅由 Stripe 处理,我们不会接触或存储你的完整银行卡号。
2. 我们如何使用数据
- 提供核心功能:博主分析、找相似、受众分析、邮件建联等;
- 构建和维护创作者索引,用于搜索、推荐与匹配;
- 账号鉴权与安全:识别你的登录状态,防止未授权访问;
- 计费与积分:记录套餐、积分消耗与支付状态;
- 产品改进:在聚合、去标识化的层面上分析功能使用情况。
3. Chrome 扩展权限说明
- storage:在本地保存你的扩展设置与工作状态;
- cookies:仅读取 linkrkol.com 域名下的登录凭证,用于让扩展以你的身份调用 Linkr API,不会读取其他任何网站的 Cookie;
- activeTab / scripting:在你主动打开扩展时,向当前标签页注入分析侧边栏;
- host_permissions(tiktok.com / instagram.com / youtube.com / linkrkol.com):用于在创作者页面展示分析面板,以及与 Linkr 服务端通信。
- 扩展不会将你的浏览历史上传到我们的服务器。
4. Gmail 连接与 Google API 数据使用
- 当你选择连接 Gmail 账号时,我们会通过 Google OAuth 获取访问令牌,并以加密方式存储,仅用于提供邮件建联功能。
- 我们仅申请“代你发送邮件”(gmail.send)权限:不会读取、下载或存储你的收件箱、邮件列表或任何已有邮件内容。
- 每封邮件都在你主动确认后,以你的名义从你的 Gmail 账号发出;收件人、主题、正文和发送状态会保存在你的 Linkr 账号下,用于建联跟进管理。
- 你可以随时在 Linkr 中断开 Gmail 连接,或在 Google 账号的安全设置中撤销授权;断开连接或删除 Linkr 账号时,我们会删除存储的 OAuth 令牌。
- Linkr's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. 第三方服务
- 我们使用以下第三方服务作为数据处理方:Supabase(账号与数据库)、Stripe(支付)、Google(Gmail 邮件发送)、PostHog(产品使用分析)、Apify(公开社媒数据采集)、以及大语言模型服务(内容理解与分析)。这些服务商仅在我们的指示下处理数据。
- 我们不会向任何第三方出售你的个人数据。
6. 数据存储与跨境传输
- 我们的服务器和数据处理方位于中国大陆以外(主要为美国)。使用本服务即表示你同意你的数据被传输至境外并在当地存储和处理;我们会通过加密传输和访问控制保护数据安全。
7. 创作者移除请求
- 如果你是创作者本人,希望从我们的创作者索引中移除或更正你的公开资料,请通过 linkrkol@acuispire.com 联系我们,我们会在核实身份后的合理期限内处理。
8. 你的权利
- 你有权访问、更正或删除你的个人数据,也可以随时撤销对特定数据处理(如 Gmail 连接)的授权。如需行使上述权利,请联系 linkrkol@acuispire.com。
9. 未成年人
- 本服务面向商业用户,不面向 16 岁以下的未成年人。我们不会故意收集未成年人的个人数据;如发现误收集,将及时删除。
10. 数据保留与删除
- 你的账号数据在账号存续期间保留。你可以随时联系我们删除账号及其关联数据,我们将在合理期限内完成删除。
11. 数据安全
- 所有数据传输均通过 HTTPS 加密;账号鉴权由 Supabase 托管;服务端接口启用访问令牌校验;Google OAuth 令牌加密存储。
12. 政策变更
- 如本政策发生重要变更,我们会在本页面更新并注明生效日期。
13. 联系我们
- 如对本隐私政策或你的数据有任何疑问,请联系:linkrkol@acuispire.com
Privacy Policy
Effective date: August 27, 2026
Linkr (linkrkol.com) helps marketers discover, analyze, and contact social media creators through a web workspace and a Chrome browser extension. The service is operated by ACUISPIRE TECHNOLOGY LIMITED (香港靈淩科技有限公司), registered in Hong Kong, China. This policy explains what data we collect, how we use it, and why the extension needs its permissions.
1. Data We Collect
- Account information: when you sign up or log in to Linkr via Google or email, we receive your email address and basic profile (hosted by Supabase Auth) to create and maintain your account.
- Usage data: your actions in the Linkr web app and browser extension (searches, favorites, outreach records), used to provide and improve product features.
- Attribution and analytics data: randomly generated anonymous IDs, extension install IDs, feature events, referrer hostnames, and UTM campaign parameters. We do not send full visited URLs, email content, or social-platform passwords to the product analytics system.
- Public creator data: when you browse creator profiles on TikTok / Instagram / YouTube with the extension, it reads publicly displayed creator information on the current page (handle, follower count, post metrics, etc.) to generate analysis. We never read your private messages, passwords, or any non-public data on those platforms.
- In addition to what the extension reads in real time, our creator index includes public social media information collected via third-party data services, including contact details that creators display publicly (such as public business email addresses). This data comes only from public sources and is used to help you discover, evaluate, and contact creators.
- Payment information: paid subscriptions are processed by Stripe; we never see or store your full card number.
2. How We Use Data
- Provide core features: creator analysis, finding similar creators, audience analysis, email outreach, and more;
- Build and maintain the creator index used for search, recommendation, and matching;
- Authentication and security: recognizing your login state and preventing unauthorized access;
- Billing and credits: recording plans, credit consumption, and payment status;
- Product improvement: analyzing feature usage on an aggregated, de-identified basis.
3. Chrome Extension Permissions
- storage: saves your extension settings and working state locally;
- cookies: reads only the login credential under the linkrkol.com domain so the extension can call the Linkr API as you; it never reads cookies of any other website;
- activeTab / scripting: injects the analysis sidebar into the current tab only when you actively open the extension;
- host_permissions (tiktok.com / instagram.com / youtube.com / linkrkol.com): used to display the analysis panel on creator pages and to communicate with the Linkr backend.
- The extension does not upload your browsing history to our servers.
4. Gmail Connection and Google API Data Use
- When you choose to connect your Gmail account, we obtain OAuth tokens via Google OAuth and store them encrypted, solely to provide the email outreach feature.
- We request only the "send email on your behalf" (gmail.send) scope: we never read, download, or store your inbox, message list, or any existing email content.
- Each email is sent from your Gmail account in your name only after you actively confirm it. Recipients, subjects, message bodies, and delivery status are stored under your Linkr account for outreach tracking and follow-up.
- You can disconnect Gmail in Linkr at any time, or revoke access in your Google Account security settings. When you disconnect or delete your Linkr account, we delete the stored OAuth tokens.
- Linkr's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Third-Party Services
- We use the following third-party services as data processors: Supabase (authentication and database), Stripe (payments), Google (Gmail email sending), PostHog (product usage analytics), Apify (public social media data collection), and large language model providers (content understanding and analysis). These providers process data only under our instructions.
- We do not sell your personal data to any third party.
6. Data Storage and Cross-Border Transfer
- Our servers and data processors are located outside mainland China (primarily in the United States). By using the service, you consent to your data being transferred to, stored, and processed in those locations. We protect your data with encrypted transmission and access controls.
7. Creator Removal Requests
- If you are a creator and would like your public profile removed from or corrected in our creator index, please contact us at linkrkol@acuispire.com. We will process your request within a reasonable period after verifying your identity.
8. Your Rights
- You have the right to access, correct, or delete your personal data, and to withdraw consent for specific processing (such as the Gmail connection) at any time. To exercise these rights, contact linkrkol@acuispire.com.
9. Minors
- The service is intended for business users and is not directed at minors under the age of 16. We do not knowingly collect personal data from minors; if we learn that we have, we will delete it promptly.
10. Data Retention and Deletion
- Your account data is retained for as long as your account exists. You may contact us at any time to delete your account and associated data, and we will complete the deletion within a reasonable period.
11. Data Security
- All data transmission is encrypted over HTTPS; account authentication is hosted by Supabase; backend APIs enforce access token verification; Google OAuth tokens are stored encrypted.
12. Changes to This Policy
- If this policy changes materially, we will update this page and note the effective date.
13. Contact Us
- If you have any questions about this privacy policy or your data, please contact: linkrkol@acuispire.com