Privacy Policy

Your privacy matters to us. This Privacy Policy explains how Backlinkbookmark.com ("we", "us", "our") collects, uses, stores, and shares your personal information when you use our website and services.

1. Who We Are

Backlinkbookmark is a curated bookmarking service operated by an MSME-registered proprietorship (Udyam Registration: UDYAM-TS-14-0016137) based in Hyderabad, Telangana, India. For any privacy-related inquiries, contact us at payments@backlinkbookmark.com.

2. Information We Collect

a) Account Information

• Name and email address (from registration or Google Sign-In)
• Password (stored as a one-way hash, never in plain text)
• Google Account ID (only if you sign in with Google)
• Profile picture (optional, only from Google)

b) Submission Data

• URLs, titles, descriptions, and categories you submit
• Open Graph metadata (title, description, image) fetched from your submitted URLs
• AI-generated content optimizations (title suggestions, keywords, etc.)

c) Payment Information

• Transaction ID, plan purchased, amount, and date
• Payment status (paid, refunded, pending)
• We do NOT store your credit card, debit card, UPI ID, or bank details. Payments are handled entirely by Razorpay (and other gateways) on their secure servers.

d) Usage & Technical Data

• IP address (for security and rate-limiting)
• Browser type, device information, and operating system
• Pages visited, time spent, and interaction data
• Session cookies (to keep you logged in)

e) Communications

• Contact form submissions (name, email, message content)
• Email conversations with our support team

3. How We Use Your Information

We use your data to:

• Create and manage your account
• Process your submissions and payments
• Send transactional emails (welcome, password reset, payment confirmations, submission approvals)
• Respond to your support inquiries
• Improve the Service (analytics, bug fixing, feature planning)
• Detect and prevent spam, abuse, and fraud
• Comply with legal obligations

We do not use your data for advertising or marketing to third parties. We do not sell your data. We do not share your data with data brokers.

4. Legal Basis for Processing

We process your personal data based on:

• Contract — to provide the Service you signed up for
• Consent — when you provide it (e.g. Google Sign-In)
• Legitimate interest — for security, fraud prevention, and service improvement
• Legal obligation — for tax records, government requests, etc.

5. Third-Party Services

We use the following third parties to run our Service. Each has its own privacy policy:

6. Cookies

We use only essential cookies necessary for the Service to function:

• Session cookies — to keep you logged in
• CSRF tokens — to prevent security attacks

We do not use tracking cookies, third-party analytics cookies, or advertising cookies. You can disable cookies in your browser settings, but the Service may not function correctly without them.

7. Data Retention

• Account data — kept while your account is active
• Submissions — kept indefinitely as they form part of our public directory (unless you request removal)
• Payment records — kept for 7 years (Indian tax law requirement)
• Contact form messages — kept for 2 years
• Server logs — kept for 90 days

8. Your Rights

You have the right to:

• Access — request a copy of the data we hold about you
• Correction — update inaccurate data (via your profile page)
• Deletion — request deletion of your account and personal data
• Portability — request your data in a machine-readable format
• Withdraw consent — where processing is based on consent
• Object — to certain types of processing
• Complain — to a data protection authority

To exercise any of these rights, email payments@backlinkbookmark.com. We'll respond within 30 days.

9. Data Security

We take security seriously and use industry-standard practices:

• HTTPS/TLS encryption for all data in transit
• Password hashing using bcrypt (passwords never stored in plain text)
• Prepared SQL statements to prevent injection attacks
• CSRF tokens on all forms
• ModSecurity WAF at the server level
• Regular backups and monitoring

Despite these measures, no method of transmission over the internet is 100% secure. In the unlikely event of a data breach, we will notify affected users within 72 hours.

10. Children's Privacy

Our Service is not directed to children under 18. We do not knowingly collect data from anyone under 18. If you believe a child has provided us data, please contact us and we'll delete it.

11. International Data Transfers

Our servers are located in India. If you access the Service from outside India, your data will be transferred to and processed in India, which may have different privacy laws than your country. By using the Service, you consent to this transfer.

12. Compliance with Indian Law

We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 along with rules made thereunder, as applicable to us as an Indian data fiduciary.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on our website. The "Last updated" date at the top will always reflect the latest revision.

14. Contact Us

For privacy-related questions, requests, or concerns: