1. Data Controller
The data controller for the Lynk API Platform is Colopoint GmbH, Lindleystraße 12, 60314 Frankfurt am Main, Germany. Contact: hello@lynk.run
2. Data We Collect
When you use the Lynk API, we collect:
- Account data: Email address, name (optional), API key
- Authentication data: GitHub profile information (if using GitHub OAuth)
- Usage data: API requests, endpoints called, request parameters, timestamps, IP addresses, response times
- Billing data: Token balance, plan type, usage history
- Newsletter: Email address and subscription status (if opted in)
3. Purpose of Processing
We process your data for:
- Providing and operating the API service
- Authentication and account management
- Usage tracking and billing
- Service improvement and analytics
- Sending transactional emails (API keys, magic links)
- Newsletter communications (with your consent)
- Security and abuse prevention
4. Legal Basis (GDPR Art. 6)
- Contract performance (Art. 6(1)(b)): Account creation, API access, billing
- Legitimate interest (Art. 6(1)(f)): Security, analytics, service improvement
- Consent (Art. 6(1)(a)): Newsletter subscription, optional data
5. Data Storage & Security
Your data is stored on servers located in Germany (Hetzner, Nuremberg). We use encrypted connections (TLS), secure authentication, and follow industry best practices for data protection.
API keys are stored securely. Passwords are not used — we rely on magic link and OAuth authentication.
6. Third-Party Services
- Cloudflare: DNS and CDN (data processing in EU/US)
- GitHub: OAuth authentication (if you choose GitHub login)
- Resend: Transactional email delivery
7. Data Retention
Account data is retained for the duration of your account. API usage logs are retained for 90 days. You may request deletion of your account and associated data at any time.
8. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time (e.g., newsletter opt-out)
To exercise these rights, email hello@lynk.run or use the account deletion feature in Settings.
9. Cookies
We use a single essential cookie (lynk_token) for authentication. No tracking cookies, no analytics cookies, no third-party cookies.
10. Changes
We may update this policy. Changes will be posted on this page with an updated date.
11. Contact & Complaints
Contact: hello@lynk.run
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your residence.