Privacy Policy

Last updated: 2026-09-29 · Draft for review — not yet reviewed by counsel.

This policy explains what personal data li.link ([Legal entity name]) collects, why, and your rights. It is written to meet the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and the Saudi Personal Data Protection Law, and to be understandable without a lawyer.

1. Data we collect from creators

Account: email address, password (stored only as a salted hash), name, page address, language.
Page content: bio, photos, product links and titles, social handles.
Payout details you choose to give us (for example an IBAN), stored to pay you and shown only to you and to us.
Security data: the devices you sign in from (browser, operating system, approximate network), sign-in attempts, and the dates of security emails we send you.
Usage of the dashboard, so we can improve it.

2. Data we collect from visitors to pages

When someone taps a product button we record the time, the country we detected, the device type (phone, desktop), the store we sent them to and whether an app was opened. We do not record names, emails or full IP addresses of visitors; where an address is used to detect country or to limit abuse it is processed transiently.

We set no advertising cookies. On public pages we use an analytics service to understand how the site is used (pages viewed, approximate location, device and browser). Analytics cookies are set only if you accept them in the cookie banner; until then the service receives cookieless signals only. We do not send it your name, email, full address, or the tokens in sign-in and invitation links, and ad personalisation is switched off. You can change your choice at any time with "Cookie choices" at the bottom of our pages. A sign-in cookie is set when a creator signs in to their dashboard.

3. Why we process it (legal bases)

To provide the Service and pay creators — performance of our contract with you.
To attribute sales — our legitimate interest and yours in being paid for your recommendations.
To keep accounts secure and prevent fraud — legitimate interest and legal obligation.
To send transactional emails (verification, password reset, security alerts, payout notices) — contract and legitimate interest. We do not send marketing email without consent.

4. Who we share data with

Affiliate networks and stores receive your page address and link identifiers so they can attribute sales, and report back orders and commission amounts; they do not receive your email or payout details. Our hosting, email delivery, analytics and error-monitoring providers process data on our behalf under contracts that restrict its use. We disclose data to authorities only when required by law. We never sell personal data.

5. Where data is stored

Our servers are currently hosted in the European Union with content delivery through a global network, and may move to the UAE. Where data leaves the country you live in, we rely on the transfer mechanisms permitted by the UAE and Saudi laws, including your contract with us and, where required, your consent.

6. How long we keep it

Account data for as long as your account exists and for up to 12 months after closure. Sales and payout records for 7 years, as required for tax and accounting. Tap records for 24 months in identifiable form, then aggregated. Security logs for 12 months.

7. Your rights

You can access, correct, export or delete your data, object to processing, and withdraw consent where processing rests on it. Most of this is possible from your dashboard; for the rest, email [email protected] and we will answer within 30 days. You can complain to the UAE Data Office or, in Saudi Arabia, to SDAIA.

8. Children

li.link is not for anyone under 18. If we learn that a minor has created an account we will close it.

9. Changes

We will announce material changes on your dashboard or by email. This version is dated 2026-09-29.

10. Contact

Data controller: [Legal entity name], [Registered address, Dubai, UAE]. Email: [email protected].