Privacy Policy

Last updated: 25 January 2026

1. Introduction

LinkStream ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at www.lstream.app (the "Service").

By using LinkStream, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Email address
Display name (if provided)
Password (stored securely using Firebase Authentication)

2.2 LinkedIn Data

When you upload your LinkedIn data export, we process and store:

Connection information
Messages and conversations
Posts, comments, and reactions
Company information
Invitation history
Profile information included in your data export

Important: Your LinkedIn data is stored securely and encrypted. We do not share your LinkedIn data with third parties for marketing purposes. We only process this data to provide you with backup, analysis, and protection services.

2.3 Payment Information

Payment processing is handled by Stripe, Inc. We do not store your full credit card information. We receive and store:

Stripe customer ID
Subscription status and billing dates
Last 4 digits of your payment method
Billing email

2.4 Usage Data

We automatically collect information about how you interact with our Service:

Browser type and version
Device information
IP address
Pages visited and features used
Time and date of visits
Time spent on pages

3. How We Use Your Information

We use your information to:

Provide, operate, and maintain our Service
Process your LinkedIn data backups and provide analysis
Process payments and send billing-related communications
Send you important service updates and security alerts
Respond to your support requests and inquiries
Improve and optimize our Service
Detect and prevent fraud or abuse
Comply with legal obligations

4. Data Storage and Security

4.1 Where We Store Your Data

Your data is stored using:

Firebase (Google Cloud): User authentication and account data
Cloud Firestore: Backup metadata and user preferences
Cloud Storage: Your uploaded LinkedIn data exports (encrypted)

Data is stored in secure Google Cloud data centers with industry-standard encryption.

4.2 Security Measures

We implement security measures including:

Encryption in transit (HTTPS/TLS)
Encryption at rest for stored files
Secure authentication using Firebase
Regular security audits
Access controls and monitoring

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell your personal data or LinkedIn data to third parties.

We may share your information with:

Service Providers: Google Cloud (Firebase), Stripe (payments), Resend (email delivery) - only as necessary to provide our Service
Legal Requirements: If required by law, court order, or governmental authority
Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
With Your Consent: When you explicitly authorize us to share your information

6. Your Rights and Choices

Under GDPR (for EU/UK users) and other privacy laws, you have the following rights:

6.1 Access and Portability

You can access your data at any time through your dashboard. You can also request a complete export of your data by contacting us or using the GDPR export feature in your account settings.

6.2 Correction

You can update your account information through your account settings.

6.3 Deletion

You have the right to request deletion of your account and all associated data. You can do this through your account settings or by contacting us at privacy@lstream.app. We will delete your data within 30 days of your request.

6.4 Object to Processing

You can object to certain types of processing of your data by contacting us.

6.5 Withdraw Consent

You can withdraw consent for data processing at any time by deleting your account.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. When you delete your account:

Your data is permanently deleted within 30 days
Backup copies are removed from our systems
Some metadata may be retained for legal compliance (e.g., billing records for tax purposes) for up to 7 years

8. Cookies and Tracking

We use cookies and similar tracking technologies to:

Maintain your login session
Remember your preferences
Analyze how you use our Service

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Service.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including:

Standard Contractual Clauses approved by the EU Commission
Compliance with GDPR and UK data protection laws
Use of service providers certified under relevant data protection frameworks

10. Children's Privacy

Our Service is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the new Privacy Policy on this page
Updating the "Last updated" date
Sending you an email notification (for significant changes)

Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

13. GDPR Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at: dpo@lstream.app

You also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.