Privacy Policy

LinkTalent Flow is a business software service operated by LINKTALENT GLOBAL LTD at app.linktalentflow.com. Company identification details appear at the top of this policy.

This Privacy Policy explains how we process personal information when you visit our websites, create or use a LinkTalent Flow account, or interact with the client portal and related features we provide. It does not apply to third-party websites or services you choose to connect to LinkTalent Flow (for example GitHub or Jira), which have their own privacy practices.

Our role depends on context. LINKTALENT GLOBAL LTD generally acts as a controller for account registration, authentication, service administration, security, abuse prevention, and similar operations we control. For organization-managed content (projects, tasks, client records, time entries, comments, files, and portal material your team submits), we typically process personal data as a processor on instructions from your organization, which is usually the controller for that content. The correct classification for your use case should be confirmed with qualified counsel.

The categories below depend on how you use LinkTalent Flow. We collect information you provide, information generated through use of the service, and limited technical information needed to operate and secure the product.

• Account and profile information: name, email address, authentication identifiers, and profile settings (such as timezone or avatar when you provide them).
• Authentication information: credentials or sign-in data when you register or sign in (including through a supported identity provider when you choose that option).
• Organization and workspace information: organization name, membership, roles, invitations, and access configuration set by administrators.
• Project and delivery data: clients, contacts, projects, milestones, tasks, comments, attachments, delivery updates, and related workflow information your organization records in the product.
• Time and work-session data: time entries, timers, and related notes that users explicitly record in LinkTalent Flow.
• Engineering activity and integration data: metadata about connected development and project-management tools (for example repositories, pull requests, reviews, or issue transitions) when your organization authorizes a connection. This data is used for delivery context; it is not used to silently create billed work hours.
• Client portal data: portal user relationships, project visibility, and client-safe activity your organization chooses to expose.
• Notifications and communications: in-product notifications and transactional messages (such as invitations or account-related email) where applicable.
• Support and correspondence: information you send when you contact us or request assistance.
• Device, browser, and technical logs: IP address, browser type, device characteristics, and similar technical data in application and security logs.
• Analytics data (where permitted): aggregated usage information through Google Analytics 4 only after you choose "Allow analytics" in cookie preferences.
• Legal acceptance records: confirmation that you accepted the applicable Terms and acknowledged this Privacy Policy, including version identifiers and timestamps.

We do not intentionally collect keystrokes, mouse movement, screenshots, webcam imagery, or employee "presence" scores. Work sessions and time entries reflect what users explicitly record in LinkTalent Flow.

Sources include: you and your organization's users; administrators who invite members; identity providers you choose; connected integrations your organization enables; and operational logs generated when the service runs.

• Provide, maintain, and improve LinkTalent Flow and its features.
• Create and administer accounts and organizations.
• Enable project, delivery, collaboration, time tracking, and client portal workflows requested by customers.
• Authenticate users and apply organization and portal access permissions.
• Send transactional communications (for example confirmations, invitations, and service notifications).
• Understand product usage in aggregate where analytics is enabled and permitted by your choices.
• Monitor reliability, diagnose errors, and protect against fraud, abuse, and security incidents.
• Comply with legal obligations and respond to lawful requests.
• Provide customer support and handle enquiries.

Where UK or EEA data protection law applies, we rely on one or more of the following legal bases, depending on the activity:

• Performance of a contract — to provide the service and features you or your organization request, including account and customer-requested product functions.
• Legitimate interests — to secure and operate the service, prevent fraud and abuse, and maintain appropriate records, balanced against your rights.
• Legal obligation — where we must process or retain information to comply with applicable law.
• Consent — where required, for example optional analytics cookies. Creating an account involves contractual acceptance of our Terms and acknowledgement of this Policy; it is not a blanket consent to all processing.

Mapping each activity to a specific legal basis should be confirmed with qualified counsel for your jurisdiction and use case.

We use cookies and similar technologies that are necessary to keep you signed in, maintain security, and operate core features. These essential technologies are not optional for authenticated use of the service.

Optional Google Analytics 4 is used only in our production environment to understand aggregated product usage. The analytics script does not load until you select "Allow analytics" in our cookie preferences. If you choose "Necessary only," analytics does not run. Preview and local development environments do not send data to our production analytics property.

We may use error and performance monitoring to keep the service reliable. You can reopen cookie and analytics preferences at any time via "Cookie / Analytics settings" in the site footer.

We use trusted service providers to host and operate LinkTalent Flow. They process personal information on our behalf only as needed to provide their services to us. Our main infrastructure and operational providers include:

• Supabase, Inc. — Cloud hosting for application data, authentication, and file storage. Processing location: Depends on project configuration; may include the United States and other countries.
• Vercel Inc. — Application hosting and content delivery. Processing location: Global network; provider operations primarily in the United States.
• Resend, Inc. — Transactional email delivery. Processing location: United States and other locations where the provider operates.
• Functional Software, Inc. (Sentry) — Error and performance monitoring. Processing location: United States and other locations where the provider operates.
• Google LLC — Sign-in (where used) and optional website analytics when you allow analytics. Processing location: United States and other countries where Google operates.

Customer-connected tools (such as GitHub or Jira) are controlled by your organization and are not automatically our subprocessors for all processing. Those providers process data under their own terms when you enable a connection.

LINKTALENT GLOBAL LTD is based in the United Kingdom. Some service providers may process personal information in countries other than your own, including countries that may not provide the same level of data protection as your home jurisdiction. Where required by applicable law, we use appropriate safeguards for international transfers (such as adequacy decisions, standard contractual clauses, or other mechanisms recognized by applicable law). The specific mechanism may vary by provider and should be confirmed in commercial agreements or with qualified counsel where relevant.

We retain personal information for as long as reasonably necessary to provide the service, maintain security and audit integrity, resolve disputes, and meet legal, regulatory, or accounting obligations.

• While your account or organization's service relationship remains active and as needed to deliver features you use.
• Longer where necessary for security investigations, dispute resolution, or compliance with law.
• Until deleted or anonymized when no longer needed for the purposes described in this policy, subject to backup and legal limitations.
• Backup copies may persist for limited operational periods before being overwritten according to our providers' and our own operational practices.

We do not currently apply a single fixed automated deletion period for every data type in production. Retention may also depend on your organization's instructions for customer-controlled content.

We implement reasonable technical and organizational measures designed to protect personal information, including access controls, encrypted transport where appropriate for data in transit, restricted access for personnel and providers, and operational monitoring. No online service can guarantee absolute security. If you believe your account or data has been compromised, notify your organization administrator and contact us using the details below.

Depending on your location and applicable law, you may have rights to:

• request access to personal information we hold about you;
• request correction of inaccurate information;
• request deletion in certain circumstances;
• request restriction of processing in certain circumstances;
• object to certain processing based on legitimate interests;
• request portability of information you provided, where applicable;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a supervisory authority in your country or region.

For personal information your organization controls in LinkTalent Flow, contact your organization administrator first. We will assist controllers with individual rights requests as required by applicable law. To exercise rights relating to information LINKTALENT GLOBAL LTD controls directly, contact us at the address in the Contact section.

LinkTalent Flow is a business product not directed at children. You must be at least 18 years old to use the service (see our Terms of Service).

We may update this Privacy Policy from time to time. When we do, we will post the revised policy with an updated effective date and version identifier. If changes are material, we may provide additional notice and may ask you to review or acknowledge the updated policy before continued use, consistent with our versioning approach.

For privacy-related enquiries, contact LINKTALENT GLOBAL LTD at its registered office: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, England, BH16 6FA.