Legal

Privacy policy

What Linkyard collects, why, how long we keep it, and what you can ask us to do with it.

Template — review before launch

This policy is a working starting point drafted for a service of this type. It is not legal advice. Have a solicitor in your operating jurisdiction review and adapt it — particularly the sections on data transfers, refunds and liability — before you rely on it.

Last updated: 10 August 2026

1.Who we are

Linkyard Media LLC operates linkyard.com and is the data controller for the personal data described here. You can reach us about anything on this page at support@seo.nulldesign.co.

2.What we collect

Account data. Your name, email address, optional company name, and a hashed password. We never store your password in a readable form.

Order data. The target URLs, anchor text, keywords and any files you submit with an order, plus the resulting placements.

Project data. Domains, keywords, Google Business Profile details and brand terms you add for tracking.

Payment data. We do not store card numbers. Card payments are processed by Stripe, PayPal payments by PayPal, and crypto payments by our payment processor. We store the amount, the status and the processor's reference so we can reconcile your balance.

Technical data. IP address, browser and device information, and pages visited. We use this for security, abuse prevention and rate limiting.

3.Why we process it

To provide the service you bought (performance of a contract), to keep the platform secure and prevent abuse (legitimate interest), to comply with tax and accounting obligations (legal obligation), and — only where you have opted in — to send you product updates (consent).

We do not sell personal data, and we do not use your data to train machine learning models.

4.Who we share it with

Processors acting on our instructions: our hosting provider, our database provider, our email provider, our payment processors, our SEO data provider, and the AI provider that generates article drafts.

Publishers receive only what is needed to fulfil a placement — typically the target URL, anchor text and article. They do not receive your account details.

We disclose data to authorities only where we are legally required to, and we will tell you unless we are prohibited from doing so.

5.International transfers

Some of our processors operate outside your country. Where personal data is transferred out of the UK or EEA, we rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.

6.How long we keep it

Account and order records: for the life of your account, then seven years for accounting purposes.

Reporting data (rankings, AI scans, heatmaps): for the life of the project, and 90 days after you cancel a subscription so you can come back without losing history.

Technical logs: 90 days. Uploaded intake attachments: 24 hours after use.

7.Your rights

Depending on where you live you may have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent. To exercise any of these, email support@seo.nulldesign.co. We respond within 30 days.

You can also complain to your local data protection authority — in the UK that is the Information Commissioner's Office.

8.Cookies

We use a session cookie to keep you signed in and a referral cookie (30 days) when you arrive through an affiliate link. Both are strictly necessary or functional; we do not run advertising trackers.

Blocking the session cookie will prevent you from signing in.

9.Security

Passwords are hashed with Argon2id. Credentials we must be able to replay — such as publishing credentials — are encrypted at rest with AES-256-GCM. Access to production data is limited to staff who need it and is logged.

10.Changes

We will post any change here and update the date at the top. If a change materially affects your rights we will email you before it takes effect.