Privacy Policy

Last updated: 2026-10-12

1. Who we are

Links is a software product developed and operated by Ai Coded (“Ai Coded”, “we”, “us”, or “our”).

Links is a multichannel messaging automation platform available at https://trylinks.io. It allows businesses and creators to connect their own supported social media accounts and automate eligible customer interactions, including direct messages, comments, lead capture, inbox management, and related analytics.

For customer conversation data processed on behalf of a business using Links, that business generally acts as the controller of its own customer data, and Ai Coded acts as its service provider or processor.

For account, billing, security, fraud prevention, service administration, and other operational data relating directly to Links users, Ai Coded may act as an independent controller where required by applicable law.

Links is not affiliated with, endorsed by, or sponsored by Meta Platforms, Inc., Instagram, TikTok, ByteDance, or any other connected platform. Their names, trademarks, and logos belong to their respective owners and are referenced only to identify supported integrations.

2. Platforms we connect to

Links connects to supported social platforms using their official APIs and authorization systems.

Instagram

When a business connects an Instagram professional account, Links uses the Instagram API with Instagram Login provided by Meta.

For the current Instagram integration, Links may request the following permissions:

instagram_business_basic
instagram_business_manage_comments
instagram_business_manage_messages

These permissions are used to:

identify and connect the authorized Instagram professional account;
access eligible account and media information;
access eligible comments on the business’s content;
respond to eligible comments;
receive eligible direct messages;
send eligible replies and messages on behalf of the connected business;
display conversations inside the Links inbox;
run automations configured by the business.

TikTok

When TikTok functionality is enabled, Links may connect to TikTok using official TikTok business messaging and related APIs.

The exact permissions requested are displayed to the business during the authorization process and depend on the features that business chooses to use.

Additional channels

Links may support additional messaging channels in the future. Any additional platform integration will use the relevant platform’s official authorization mechanisms and APIs where required.

Data received through connected platforms may be considered Platform Data under the relevant platform’s terms.

We process Platform Data only as necessary to provide the Links service and in accordance with applicable platform terms, developer policies, and this Privacy Policy.

3. Information we collect

Account information

When you create a Links account, we may collect:

your name;
email address;
business or workspace name;
account preferences;
authentication information.

If Links supports password-based authentication, passwords are stored only in cryptographically hashed form. We do not store your plain-text password.

If you sign in using a third-party authentication provider such as Google, we may receive information such as:

your email address;
display name;
provider account identifier.

We do not receive your third-party account password.

Channel connection information

When you connect a social media account, we may receive and store:

platform account ID;
username;
display name;
profile information made available through the API;
granted permissions;
authorization status;
access tokens or similar integration credentials;
token expiration information;
platform-specific account metadata;
the follower count, and the number of likes and comments on recent posts, when you apply for the content creator plan.

Media and content information

Depending on the platform and permissions granted, Links may access information about media owned or managed by the connected business, such as:

post or reel IDs;
captions;
thumbnails;
media links;
timestamps;
media type.

This information may be used so a business can select content for an automation.

Links does not republish social media content unless the business explicitly uses a feature designed to do so and the relevant platform permits that functionality.

Conversation information

When people interact with a connected business account, Links may process:

direct messages;
comments;
replies;
message identifiers;
comment identifiers;
conversation identifiers;
sender platform user IDs;
public usernames or display names made available by the platform;
timestamps;
delivery information;
messaging status;
attachments or media references where supported.

This information is processed so Links can operate messaging, inbox, automation, support, and related features on behalf of the business.

Contact and lead information

Businesses may create or collect information through Links, including:

names;
email addresses;
phone numbers;
tags;
custom fields;
notes;
lead information;
answers submitted during an automated conversation.

This information belongs to the business that collected it and is processed by Links on its behalf.

Operational and security information

We may collect operational information such as:

IP addresses;
device and browser information;
login activity;
error codes;
API errors;
delivery status;
audit records;
security events;
actions performed by workspace members;
timestamps.

We use this information to operate, secure, troubleshoot, and improve the service.

Billing information

We may collect:

subscription plan;
billing status;
invoice information;
payment transaction references;
payment provider identifiers;
a creator’s referral code you used, or, if you are a content creator, your referral link and how many people visited it, signed up and paid through it.

When someone opens a creator’s referral link, the code is kept in their browser for up to 30 days so the discount reaches the first workspace they create.

Payment card details are processed by our payment provider and are not intended to be stored directly by Links.

4. How we use Platform Data

Platform Data received from Instagram, TikTok, or another connected platform is used to provide the service requested by the business that authorized the connection.

This may include:

receiving eligible messages and comments;
matching incoming events against automation rules;
sending replies configured by the business;
displaying conversations in the Links inbox;
managing contacts;
capturing leads;
enforcing platform messaging rules;
displaying automation activity;
producing service analytics;
diagnosing delivery or integration problems;
checking whether a content creator who applied for the creator plan meets its rules, and checking the follower count each month while the plan runs;
preventing abuse or unauthorized activity.

We do not use Platform Data for purposes unrelated to providing and operating Links.

5. What we do not do with Platform Data

We do not:

sell Platform Data;
rent Platform Data;
license Platform Data to data brokers;
provide Platform Data to advertising networks for their own purposes;
use Platform Data to create unrelated advertising profiles;
use Platform Data for surveillance;
use Platform Data to discriminate against individuals;
use Platform Data for purposes that would be unexpected or unrelated to the Links service;
use private conversation data to train general-purpose artificial intelligence models.

Where AI-powered features are offered inside Links, data will only be processed as necessary to provide the specific feature selected by the business and subject to the relevant product terms and privacy controls.

6. How we store access credentials

Platform access credentials, including access tokens, are treated as sensitive information.

Links uses security controls designed to protect integration credentials at rest and in transit.

Access credentials are intended to:

be encrypted at rest;
be transmitted over encrypted connections;
be accessible only to authorized services when required to communicate with the connected platform;
not be intentionally written to application logs;
not be displayed back to users after storage;
not be exposed through public application interfaces.

A connected business may revoke platform access by disconnecting the integration or through the relevant platform’s own account settings.

7. Why we process information

We process information for purposes including:

providing the Links service;
authenticating users;
connecting authorized social media accounts;
receiving and sending eligible messages and comments;
executing user-configured automations;
providing the unified inbox;
managing contacts and leads;
displaying analytics;
enforcing platform messaging and usage rules;
maintaining security;
detecting fraud or abuse;
troubleshooting service problems;
processing subscriptions and payments;
providing customer support;
complying with legal obligations.

8. Who we share information with

We share information only where necessary to operate Links, provide requested integrations, or comply with applicable law.

Connected platforms

We exchange information with the social platforms a business chooses to connect, including platforms such as:

Instagram / Meta;
TikTok;
other supported platforms enabled by the business.

This exchange is necessary to send and receive messages, comments, account information, and other authorized Platform Data.

Service providers

We may use service providers to operate Links, including providers for:

cloud infrastructure;
database hosting;
email delivery;
monitoring and security;
payment processing;
customer support infrastructure.

Service providers are permitted to process information only as necessary to provide services to us and are subject to appropriate contractual restrictions where required.

Links currently uses services that may include:

Microsoft 365 for operational email services;
MyFatoorah for payment processing.

The list of providers may change as the service develops.

Legal requirements

We may disclose information where required by applicable law, court order, regulatory requirement, or lawful government request.

We may also disclose information where reasonably necessary to:

protect the security of Links;
prevent fraud or abuse;
protect the rights of users;
investigate violations of our terms.

9. International processing

Some service providers or connected platforms may process information in countries other than the country in which the user or business is located.

Where required by applicable law, we take reasonable steps to ensure that appropriate safeguards apply to such processing.

10. Data retention

We keep information only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to legal, security, contractual, and platform requirements.

Our intended retention practices include:

Conversations and contacts

Conversation and contact data may be retained for as long as the relevant Links workspace remains active or until the business or individual requests deletion, subject to applicable requirements.

Platform credentials

Stored authorization credentials are deleted or invalidated when the relevant channel is disconnected where technically possible.

Operational logs

Operational, security, and audit information may be retained for a limited period where necessary for security, troubleshooting, fraud prevention, or compliance.

Backups

Deleted information may remain temporarily in encrypted or protected backup systems before being overwritten or permanently removed according to our backup retention process.

Platform requests

Platform Data may also be deleted when:

a connected business removes the Links integration;
the relevant platform notifies us that authorization has been revoked;
an authorized deletion request is received;
a platform requires deletion;
applicable law requires deletion.

We aim to complete valid deletion requests without undue delay and generally within 30 days unless a longer period is required or permitted by law.

11. Data deletion

Users and businesses may request deletion of information associated with Links.

Data deletion requests can be submitted at: https://trylinks.io/legal/data-deletion

You may also contact: support@trylinks.io

A connected business may also disconnect its social media account directly from Links or revoke Links access through the relevant platform.

When a valid deletion request is received, we will delete or anonymize the relevant information unless retention is required by law, security obligations, dispute resolution, or another legitimate requirement.

12. Your rights

Depending on applicable law and your relationship with Links, you may have the right to:

request access to your personal information;
request correction of inaccurate information;
request deletion;
object to or restrict certain processing;
request information about how your data is processed;
withdraw authorization where processing depends on authorization or consent.

Requests can be submitted through https://trylinks.io/legal/data-deletion or by emailing support@trylinks.io.

We may need to verify your identity before completing certain requests.

13. People who message a business using Links

If you are an individual who messaged or commented on the social media account of a business that uses Links, that business is generally responsible for deciding how your conversation and contact information is used.

You should normally contact that business first regarding:

access requests;
corrections;
deletion requests;
questions about why your information was collected.

If you are unable to obtain assistance from the business, you may contact us at support@trylinks.io. We will provide reasonable assistance where appropriate.

14. Platform controls

People who interact with a business through Instagram, TikTok, or another connected platform retain the controls and rights provided by that platform.

For example, depending on the platform, users may be able to:

block an account;
report an account;
delete messages;
stop interacting with the business;
revoke permissions;
manage privacy settings.

The privacy policies and terms of the relevant social platform continue to apply independently of this Privacy Policy.

15. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against:

unauthorized access;
unauthorized disclosure;
loss;
misuse;
alteration;
destruction.

However, no internet-based system can guarantee absolute security.

Users are responsible for:

protecting their account credentials;
using strong authentication;
managing team member access;
disconnecting integrations they no longer use.

16. Children

Links is a business software service and is not directed at children under 13.

We do not knowingly create Links accounts for children under 13.

If you believe we have collected information from a child in violation of applicable law, contact support@trylinks.io and we will review the request.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify Links users through the service, by email, or by updating the “Last updated” date shown at the top of this page.

Continued use of Links after an updated policy becomes effective may be subject to the updated policy.

18. Contact information

Links is developed and operated by Ai Coded.

Product: Links
Product website: https://trylinks.io
Support email: support@trylinks.io
Operating entity: Ai Coded
Legal business name: شركة أي أي كوديد لتصميم وبرمجة البرمجيات الخاصة
Registered business address: Al Zahra, Block 6, St Sayer AlOtaibi, House 30, Hawalli, Kuwait 47766, State of Kuwait
Business phone: +965 9888 5635
Business website: https://aicoded.io
Jurisdiction: State of Kuwait