Privacy Policy

Last Updated: November 4, 2026

At LinkJolt, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform.

By using LinkJolt, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information: When you register for LinkJolt, we collect information such as your name, email address, and password.
Business Information: For merchants, we collect business details including company name, address, and payment information.
Tracking Information: When using our affiliate tracking features, we collect data such as referrer URLs, IP addresses, user agents, device types, and UTM parameters to accurately track affiliate referrals and prevent fraud.
Sales Information: For each sale an affiliate referred, the amount, currency and date, and the customer's email address and name when the merchant's payment platform sends them.
Lead Information: When a merchant counts leads, the email address (and the merchant's own user id, if they send one) of a person who came through an affiliate's link and signed up, started a trial, joined a waitlist or booked a demo with that merchant, with the date and the affiliate. To tie a lead to the click that brought it, we also keep a one-way code made from the browser and network it came from (never the internet address itself). The merchant sees the email address; the affiliate never does.
Usage Information: The pages you visit, what you click, and your browser and device. When you are signed in, our product analytics links this to your account, including your name and email address, and can record your session with anything you type hidden. When you sign up we also note the site you came from and the first page you visited.
Support Chats: What you write to us in the chat on our site or in the app, your email address if you give it, and your approximate location (country, region and city) and device.
AI Assistant Connections: If you connect LinkJolt to an AI assistant such as ChatGPT or Claude, the requests it makes on your behalf. See Section 11.
Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity on our Service and hold certain information. See our Cookie Policy for more details.
Connected Email Accounts: If you are a merchant and connect a Gmail or Outlook account to Find affiliates, we collect that account's email address and the access tokens needed to send the messages you write. See Connecting a Gmail or Outlook account in Section 10.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process transactions and send related information, including confirmations and invoices
Track affiliate referrals and calculate commissions
Detect and prevent fraudulent activities
Send administrative information, such as updates to our terms, conditions, and policies
Respond to your comments, questions, and customer service requests, including with an AI assistant that answers support chats outside our working hours
Understand how LinkJolt is used so we can improve it, and measure our own marketing
Carry out what you ask an AI assistant you connected to LinkJolt to do

3. How We Share Your Information

We may share your personal information in the following situations:

With Service Providers: We share information with the companies that run parts of LinkJolt for us, each only for its job:
- Hosting, file storage and the database: Vercel and Neon.
- Email delivery: Resend.
- Payments: Stripe, for our own billing and for automated affiliate payouts; and the payment platform a merchant connects (Stripe, Polar or Creem) when LinkJolt creates an affiliate's coupon code there, which can include the affiliate's name.
- Analytics and advertising: PostHog, Google Analytics, Meta and Ahrefs, and Google Ads when we run ads.
- AI models: Anthropic (Claude), to answer support chats outside our working hours and draft our replies, and in Find affiliates to read the pages it finds, draft messages and sort the replies.
- Find affiliates data: Hunter, which receives a person's name and website to find a business email address, and DataForSEO, which receives website addresses.
- Our team's messaging: support chat messages are forwarded to our team's Telegram group so we can answer them.
With Systems a Merchant Chooses: When a merchant sets up event webhooks, the events LinkJolt sends to the address they chose include their affiliates' names and email addresses.
With AI Assistants You Connect: What you ask ChatGPT, Claude or another assistant to read or do in LinkJolt is sent to that assistant. See Section 11.
Between Merchants and Affiliates: Information necessary for the operation of affiliate programs will be shared between merchants and their affiliates. This includes contact information, program details, and campaign performance data.
Business Transfers: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4. Cookies

We use cookies to collect information and improve our services. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

For more information about the cookies we use, please see our Cookie Policy.

5. Data Security

The security of your data is important to us. While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We implement appropriate technical and organizational measures to protect your data.

6. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

The right to access personal information we hold about you
The right to request correction or deletion of your personal information
The right to object to or restrict the processing of your personal information
The right to data portability

To exercise these rights, please contact us at privacy@linkjolt.io.

You can also do these yourself in LinkJolt:

Change your account details, and as an affiliate your payout details, in Settings
Choose which notification emails you get (merchants, in Settings), and stop product news with the unsubscribe link in any of those emails
Disconnect a payment platform, a Gmail or Outlook account, or an AI assistant at any time
Export commissions, affiliates and message conversations as files
Delete your affiliate account in Settings; merchants close their account by emailing privacy@linkjolt.io
Block or delete cookies in your browser

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes.

8. Children's Privacy

Our Service is not intended for use by children under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.

9. Messaging Data

When you use LinkJolt's platform messaging feature, we collect and process the following data:

What We Collect: Message content, metadata (sender, recipient, timestamps), read receipts, mute preferences, and campaign tags associated with messages.

How We Use It: To deliver messages between parties, enable message search functionality, send email notifications for unread messages, and generate aggregate analytics for platform administration.

Data Sharing: Message content is visible only to the sender, the recipient, authorized staff members of the merchant account, and platform administrators for compliance purposes.

Retention and Deletion: Messages are subject to a global retention period. Messages older than the retention period are automatically deleted along with any empty conversation threads. You may export your conversation data in CSV or text format at any time.

Email Notifications: We send email notifications for the first unread message in a conversation thread. Subsequent messages in the same thread do not trigger additional emails until you read the thread. You can disable message email notifications in your notification settings.

10. Found Contacts (Find affiliates)

Find affiliates helps a merchant using LinkJolt find websites, channels, newsletters and podcasts that already recommend products like theirs, and write to the people behind them. If you received a message with a link to this section, that is how the merchant found you.

Where the information comes from: public web pages you published that link to other companies' products, public search-engine data about those pages, and, when a merchant asks us to look one up, a business email address matched to your website by an email-lookup provider. We do not read private accounts, social inboxes or anything behind a login.

What we hold: the page you were found on, the name of your site or channel, an estimate of its audience, your name where the page states it, and the business email address a merchant revealed. Each merchant sees only the results of its own searches.

Who writes to you and how: the merchant, from their own email account. LinkJolt drafts the message and adds the join link and the unsubscribe link under it. The merchant either sends it from their own mail app, or, when they have connected their Gmail or Outlook account to LinkJolt, has LinkJolt send the message they wrote from that account on their instruction. LinkJolt never sends marketing to found contacts from its own domains. The merchant is the sender and the controller of that message. When a message came through a connected Gmail account, your reply goes to a LinkJolt reply address and is shown to that merchant.

How to stop: every message carries an unsubscribe link. Using it puts your address and your site on that merchant's do-not-contact list, and the invitation link in the message stops working. Nothing further is written to you through LinkJolt by that merchant. To have your details removed from LinkJolt altogether, email privacy@linkjolt.io and name the site or address concerned.

Legal basis and retention: the legitimate interest of a business in inviting publishers who already promote comparable products to its affiliate program, balanced by the limits above. A revealed email address that no merchant has written to is cleared after 90 days; the record of a message and of an unsubscribe is kept so the do-not-contact list can be honoured.

Connecting a Gmail or Outlook account (merchants)

A merchant can connect their own Gmail or Outlook account so that the messages they write on the Find affiliates page are sent from that account, as them. Connecting is optional: without it, the merchant sends each message from their own mail app.

Gmail (Google user data). When you connect Gmail, LinkJolt asks Google for these permissions, and no others:

https://www.googleapis.com/auth/gmail.send: send email from your Gmail account. This permission cannot read, list, change or delete any message, and LinkJolt asks for no permission that can.
openid: confirm which Google account you connected.
email: read that account's email address, so we know which address your messages are sent from.

What we keep: the connected address, Google's identifier for the account, and the access and refresh tokens Google issues, encrypted at rest (AES-256-GCM) and used only by our servers. For each message we send, we keep Gmail's identifiers for the message and its conversation, so a follow-up joins the same conversation.

How we use it: only to send the messages you write or approve on the Find affiliates page, each to the one person you chose: the first message and, if nobody has replied after 4 days, one follow-up in the same conversation, which you can switch off or cancel. Each message carries a reply address on reply.linkjolt.io, so replies reach LinkJolt without LinkJolt reading your mailbox.

Sharing and limits: we do not sell data we receive from Google, share it with anyone other than the hosting providers that run our systems, use it for advertising, or use it to develop, improve or train AI or machine-learning models, and none of it is sent to an AI model. People at LinkJolt do not look at it unless you ask us to for support, it is needed for security, or the law requires it. LinkJolt's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting and deletion: disconnecting Gmail on the Find affiliates page deletes the tokens at once. You can also remove LinkJolt's access at any time from your Google Account settings. The record of each message sent stays with your LinkJolt account so your do-not-contact list can be honoured.

Outlook and Microsoft 365. When you connect Outlook, LinkJolt asks Microsoft for these permissions:

offline_access: keep the connection working without asking you to sign in each time.
User.Read: read your account's name and email address, so we know which address your messages are sent from.
Mail.Send: send email from your mailbox.
Mail.Read: read new messages in your mailbox to find replies to the messages you sent through LinkJolt.

Messages go out the same way, one person at a time, with at most one follow-up. Every 15 minutes LinkJolt reads the sender, subject and conversation of messages that arrived since its last check, to find replies to conversations it started. It opens and keeps only those replies, which an AI model sorts automatically so a no or an unsubscribe is honoured and an answer can be drafted for you; everything else is left as it is and not stored. The tokens are encrypted at rest, and disconnecting Outlook on the Find affiliates page deletes them at once.

11. AI Assistants (ChatGPT and Claude)

A merchant can connect LinkJolt to an AI assistant such as ChatGPT or Claude. You sign in to LinkJolt and approve the connection for one brand, and the assistant can then read and do what you ask in that brand, within what your account and your role allow.

What the assistant receives: only the results of what you ask it to read or do: for example campaigns, affiliates (their names, email addresses and how they chose to be paid, including a PayPal or Wise email address), sales (including the customer's email address and name), coupon codes, payouts and statistics. What the assistant's provider does with that information is covered by its own privacy policy.

What LinkJolt receives: the requests the assistant makes, such as which action it took and the details you asked it to record (for example the email address of an affiliate to invite). We do not receive your conversation with the assistant.

What we keep: a record of each connection (the assistant's name, the brand, who approved it, and when it was approved and last used). The access keys are stored only in hashed form. An access key lasts one hour and is renewed for up to 90 days at a time, and every connection ends 180 days after it was approved. A log of each change made through a connection, and of failed sign-ins, is kept for 90 days.

Your controls: see and disconnect your brand's connections on the Developers page in LinkJolt, under "Connected right now". Removing a team member ends their connections. You can also remove LinkJolt in the assistant's own settings.

12. How Long We Keep Information

Your account, brands, campaigns and settings: while your account is open.
Clicks and sales: kept as the program's record of referrals and commissions for as long as the campaign exists. Deleting a campaign deletes its clicks and sales.
Leads: the email address of a lead who never paid the merchant, the merchant's own user id for them, and the code made from their browser and network, are cleared after 180 days; the record of the lead, without them, is kept so the merchant's counts stay right.
Messages between merchants and affiliates: deleted after 365 days. Conversations with LinkJolt support are kept so we can follow up on them.
Events received from payment platforms: 90 days, or 180 days when one could not be processed.
The log of changes made through the Developer API or an AI assistant: 90 days. Connection records end as described in Section 11 and are deleted 30 days after a connection ends.
Found contacts: as described in Section 10.
Deleting an affiliate account removes the sign-in and the account. When the affiliate has recorded sales, their name, email address and payout details stay with those sales, because merchants need them for their commission records.
Our service providers keep the information they hold for us under their own retention periods.

13. Where Information Is Processed

LinkJolt is run by POSTLAZY LTD, a company registered in England. Our servers, and most of the service providers named in Section 3, are in the United States, so your information is processed there.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: privacy@linkjolt.io