Privacy Policy

1. Introduction

mylink.bz ("we", "our" or "us") is committed to protecting your privacy and the security of your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard information when you use our service, in line with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) and other applicable data protection laws. It should be read with our Terms of Service.

2. Data controller and contact

mylink.bz is the data controller for personal data collected through our services. For data protection questions, contact our Data Protection Officer:

Ryan Baggott
Email: ryan@baggottsbots.com
Phone: (843) 505-1657

For personal data our customers collect about their own contacts using the Service, the customer is the data controller and we act as a data processor. If you interacted with a business that uses mylink.bz, contact that business first about your data.

3. Legal basis for processing (GDPR Article 6)

• Contract performance: processing needed to provide the service to you.
• Legitimate interests: service improvement, fraud prevention and security.
• Consent: when you opt in to marketing or non-essential cookies.
• Legal obligation: to comply with applicable laws and regulations.

4. Google API data — Limited Use

Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data we read from Google APIs (Calendar, Sheets, Docs, Drive, Gmail) is used only to provide the feature you turned on. It is never used to train generalized AI or ML models, never sold, and never transferred to third parties for unrelated purposes.

AI provider separation: data obtained from Google APIs is technically blocked from being sent to AI providers whose terms allow training on submitted content (currently DeepSeek). Agents that read from a Google API must use an OpenAI, Anthropic Claude or Google Gemini key, whose business terms forbid training on API-submitted content.

5. Information we collect

We collect information when you register for an account, create and configure AI agents, process payments through the service, contact support, or visit our website (with your consent for non-essential cookies). This may include:

• Identity data: name, username and account credentials.
• Contact data: email address and phone number.
• Financial data: payment information, processed securely by Stripe. We do not store full card details.
• Technical data: IP address and the approximate location (city, region, country) derived from it, browser type, browser timezone, device information and cookies.
• Usage data: how you use the service, including analytics and short-link click data.
• Communication data: chat transcripts and support correspondence.

6. How we use information

• To provide and maintain the service.
• To process payments and manage subscriptions.
• To improve and personalize the service.
• To communicate with you about updates and support.
• To send marketing communications, only with your consent.
• To monitor and analyze usage patterns.
• To prevent fraud and keep the service secure.
• To comply with legal obligations.

7. Sub-processors

We use the service providers below to process personal data on our behalf. Some are used for every account; others only when you turn on the related feature, such as a specific AI model, messaging channel or voice calling.

Infrastructure and storage

• Neon, Inc. — managed database for account, contact and conversation data (USA)
• Google Cloud Storage — uploaded files, media and knowledge-base documents (USA)

Payments

• Stripe, Inc. — payment processing (USA)

Email, SMS and voice

• Amazon Web Services (Amazon SES) — transactional and notification email (USA)
• Twilio Inc. — SMS and voice (USA)
• ElevenLabs, Inc. — AI voice generation and speech-to-text (USA)

AI model providers

Which provider receives conversation content depends on the AI model selected for your agent:

• OpenAI — language, image and video (USA)
• Anthropic (Claude) — language (USA)
• Google (Gemini) — language and video (USA)
• xAI (Grok) — language and voice (USA)
• Groq, Inc. — language model inference (USA)
• DeepSeek — language (China)

Training note: OpenAI, Anthropic and Google do not train their models on data submitted under their business/API terms. DeepSeek, based in China, may operate under terms that allow training on submitted content. If you need participant data never to be used for training, choose an OpenAI, Anthropic or Google model for your agent.

Some optional features, such as landing-page generation, can use other AI providers, but only when your account supplies its own API key for that provider. That use is governed by your own agreement with the provider, is separate from your agent conversations, and never receives data read from Google APIs.

Location and analytics

• ipapi.co and ip-api.com — approximate location from IP addresses, for analytics and contact records (international)
• Google Analytics — website and page analytics, where configured (USA)

Messaging and social channels (only for channels you connect)

• Meta Platforms, Inc. — Facebook Login, WhatsApp, Messenger and Instagram (USA)
• Telegram — messaging (international)
• Discord, Inc. — messaging (USA)
• X Corp. — X/Twitter messaging and posting (USA)

All sub-processors are bound by data-processing terms that require them to protect your data and follow applicable law. This list may change; the current version is always on this page.

8. SMS and mobile information

Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help.

9. Data retention

• Account data: kept while your account is active, plus 30 days after a deletion request.
• Chat and conversation data: kept for 2 years or until you request deletion.
• Payment records: kept for 7 years, as required by tax and accounting rules.
• Analytics data: aggregated and anonymized after 26 months.
• Marketing consent records: kept for 3 years after your last interaction.

To delete your account, including one created with Facebook Login, use the account deletion feature in your settings or email ryan@baggottsbots.com.

10. International transfers

Your data is mainly processed in the United States. Depending on the AI models and channels you turn on, some data may be processed by providers outside the US and the European Economic Area, including, for certain optional AI models, providers in China (see section 7). For transfers from the EEA or UK, we rely on Standard Contractual Clauses approved by the European Commission, together with the provider controls described above.

11. Cookies

• Essential cookies: needed for the service to work (no consent needed).
• Analytics cookies: help us understand how you use the service (consent required).
• Marketing cookies: used for targeted advertising (consent required).

Pages and short links created by our customers may also use cookies, analytics or pixels set up by those customers.

12. Your rights under GDPR

If you are in the EEA or UK, you have the right to:

• Access a copy of your personal data (Article 15).
• Correct inaccurate or incomplete data (Article 16).
• Have your data deleted (Article 17).
• Restrict how we process your data (Article 18).
• Receive your data in a machine-readable format (Article 20).
• Object to processing based on legitimate interests or direct marketing (Article 21).
• Withdraw consent at any time for consent-based processing.
• Complain to your local data protection supervisory authority.

To exercise these rights, email ryan@baggottsbots.com or use the data export feature in your account settings.

13. Your rights under CCPA (California residents)

• The right to know what personal information is collected.
• The right to know whether personal information is sold or disclosed.
• The right to say no to the sale of personal information.
• The right to equal service and price (non-discrimination).

We do not sell your personal information to third parties.

14. Data security

We use technical and organizational measures to protect your information, including encryption in transit (TLS/SSL) and at rest, regular security assessments and penetration testing, access controls and authentication, staff training on data protection, and incident response procedures.

No method of transmission or storage is 100% secure. If a data breach affects your personal data, we will notify you and the relevant authorities within 72 hours, as GDPR requires.

15. Automated decision-making

Our AI-powered services may involve automated processing, but we do not make decisions that significantly affect you based solely on automated processing. You can request human review of any AI-related decision.

16. Children

The service is not intended for children under 16, and we do not knowingly collect their personal information. If we learn we have collected data from a child under 16, we will delete it promptly.

17. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting the new policy here with an updated "Last updated" date.

18. Contact us

Questions about this Privacy Policy, or want to exercise your rights? Contact us:

Data Protection Officer: Ryan Baggott
Email: ryan@baggottsbots.com
Phone: (843) 505-1657
Support: ryan@baggottsbots.com

You may also contact your local data protection supervisory authority.