Privacy policy

Last updated: 16 October 2026

1. Who is responsible

The controller for data processing on optilinkai.com and in the OptiLink AI app is:
Abdul Musah, OptiLink AI, Hutäcker 17, 91347 Aufseß, Germany
Phone: +49 151 68495881 · Email: support@optilinkai.com

For any question about your data, or to use your rights, write to support@optilinkai.com.

2. What we process and why

Visiting the website

When you open a page, our server receives technical data your browser sends automatically: IP address, date and time, page requested, referrer, browser and operating system. We use it to deliver the website, keep it secure and find errors (Art. 6 (1) (f) GDPR — legitimate interest in a secure, working website). Server logs are deleted after 14 days at the latest, unless we need a specific entry to investigate an attack.

Your account

When you register we store your name, email address, a securely hashed password, your plan and the settings you make. We need this to provide the service you signed up for (Art. 6 (1) (b) GDPR — contract). We send you the emails needed to run your account (confirmation, password reset, important service and billing notices).

Using the service

When you use OptiLink we process the websites, target pages, keywords and texts you enter for your link-building campaigns, the links placed for you and their status checks (live, dofollow, indexed), the reports we upload to your dashboard, and — if you add one — your own AI API key, which is stored encrypted and used only for your campaigns. Links you choose to submit are sent to ping and indexing services. We process this data to provide the service (Art. 6 (1) (b) GDPR). Our servers are located in Germany/the EU.

Payments

Paid plans are billed through Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. Stripe receives your payment details directly — we never see or store your full card number. We receive and keep the plan, payment status, invoice data and a Stripe customer reference (Art. 6 (1) (b) and (c) GDPR; invoices are kept for the periods required by German tax and commercial law, usually 8–10 years). Stripe's privacy policy: stripe.com/privacy.

Contact form and email

If you contact us, we use your message and contact details only to answer your request (Art. 6 (1) (b) or (f) GDPR) and delete them when they are no longer needed, unless legal retention periods apply.

3. Service providers we use

• Hosting: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus — our server is located in the EU. Data processing agreement in place (Art. 28 GDPR).
• Payments: Stripe (see above).
• AI providers: to write campaign texts and run AI visibility checks, the keywords, brand names and questions you enter are sent to AI model providers (Ollama Cloud, or the provider of your own API key if you add one). No account data is sent.
• Bot protection: forms may use Cloudflare Turnstile (Cloudflare, Inc., USA) to tell people from bots; Cloudflare receives technical data such as your IP address for this purpose (Art. 6 (1) (f) GDPR).
• Indexing and ping services: links you submit for indexing (never your personal data) are sent to search engines, IndexNow and ping services.
• Email: service emails are sent through our own mail server at Hostinger.

Where a provider processes data outside the EU/EEA, this happens on the basis of an adequacy decision (such as the EU-U.S. Data Privacy Framework) or the EU standard contractual clauses.

4. Cookies and tracking

We only use cookies that are strictly necessary: a session cookie that keeps you logged in and a small setting that remembers your light/dark theme. We do not use advertising cookies and do not sell your data. To understand how the website is used we run our own privacy-friendly, cookieless statistics (Umami) on our own server at analytics.optilinkai.com. It does not use cookies, does not store full IP addresses and does not track you across websites (Art. 6 (1) (f) GDPR).

5. How long we keep data

Account data is kept while your account exists. When you delete your account or ask us to, we delete your data within 30 days, except where the law requires us to keep it (for example invoices). Backups are overwritten within 30 days.

6. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). If you gave consent, you can withdraw it at any time with effect for the future. Just email support@optilinkai.com.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany — www.lda.bayern.de.

7. Security

All connections use encrypted HTTPS. Passwords are stored only as secure hashes, and secrets such as API keys you add are stored encrypted.

8. Changes

We update this policy when our service or the law changes. The current version is always available on this page.