What we collect, and what we don't.

1. Who is responsible for your data

There are two different relationships here and it is worth separating them, because they decide who you write to.

If you have a LinkPier account, Stepmade is the controller of your data. We decide what is collected and why, and this policy describes it.

If you filled in the contact form on an agent's page, or your review appears on one, that agent is the controller of your information. They chose to collect it and they decide what happens to it; we hold it on their behalf as a processor. Ask the agent first. If you cannot reach them, write to us at privacy@linkpier.com and we will pass it on and, where the law requires us to act, act.

2. What we collect

If you have an account

• Your name and email address, and a password. Passwords are stored only as a scrypt hash with a per-account salt — we cannot read yours, and neither can anyone who obtains the database.
• Your notification preferences, whether your email is verified, whether you have finished onboarding, the date your account was created, and the last time you signed in or saved your page.
• The QR codes you make for your signs and cards: the name you give each one, and when you made or archived it. A name never appears on your page or in the code's link.
• Billing state: your Stripe customer and subscription identifiers, your subscription status, when the current period ends, whether you hold the founding rate, and timestamps for starting checkout, entering a card, first payment and cancellation. We never see or store your card details. Those go directly to Stripe.
• If your subscription ends: whether you cancelled it or a payment failed, and, if you answer Stripe's cancellation survey, the reason you pick and anything you write. If we later offer you free time to come back, when we offered it and when it ends.
• Notes we write on your account while helping you with support or billing. They are deleted with your account.
• Any support conversation you start in the app, including messages and images you attach.

What you publish on your page

Everything in this group is public by design — it is the page you are paying us to host, and it is visible to anyone with the link and to search engines:

• Your username, display name, brokerage, tagline, headshot, cover image, biography, specialties, and the three figures on your profile — homes sold, average sale, sold last year.
• Your service areas and ZIP code, your quick links, an intro video URL, and the wording of your contact section.
• Your listings and recent sales: price, address, city, beds, baths, square footage and photographs, plus the source URL if you imported one.
• Client reviews you publish: the author's name as you enter it, a rating, and the text. You control whether each one is visible.

Images you upload are stored in our database, encoded in the record itself. We do not currently use a third-party image host for them.

If you contact an agent through their page

• Your name and email address, your phone number if you give one, what you are interested in, your timeline, and your message.
• The agent can add their own notes to that enquiry and move it through their pipeline. Those notes are the agent's, not ours.

3. Analytics, and what we do not do

Agents can see how their page is performing. What that is built from is counters, not records:

• A daily total per agent of page views, enquiries, outbound link clicks, and appointments the agent marked.
• A running count per agent of which broad channel a visit came from — direct, Instagram, Facebook, Google, email, or a QR code — read from the referrer or the link used.
• When an agent prints more than one QR code, a daily count of scans for each of those codes. The code in the link says which sign or card was scanned. It says nothing about who scanned it.

That is the whole of it. There is no row anywhere that represents a single visitor, no identifier assigned to you, no device fingerprinting, no session recording, no third-party analytics service, and no advertising or tracking pixels. Two people visiting the same page are indistinguishable to us afterwards, because all that changed was a number.

We do not determine your location. Nothing in the system records where a visitor is, and nothing looks it up.

Your IP address does reach our server, as it must for any web request. We use it to rate-limit public endpoints so that forms and view counters cannot be flooded. It is held in memory only, for the length of the rate-limiting window, and it is never written to our database. Our hosting provider's request logs record it too, as any web host's do, and keep it for the short period their logs are kept; we use those logs only to keep the service running.

4. Cookies

A public agent page sets no cookies at all. You can read one without anything being stored on your device by us.

If the page has an intro video, nothing is loaded from YouTube or Vimeo until you press play. Then the player comes from them, and their own policies cover what it stores on your device. YouTube videos play in YouTube's privacy-enhanced mode.

When you sign in, we set a session cookie so you stay signed in between pages. Signing in also sets two security cookies that last until you close your browser: one protects the sign-in form against cross-site request forgery, and one remembers the page to return to. If you open a founding invitation link, we set one more, holding the invitation for 30 days so the founding price can be applied when you subscribe. All of them are strictly necessary for the service to function, and they are the only cookies we set. We use no analytics, preference or advertising cookies, which is why this site has no cookie banner — there is nothing to ask you to consent to.

5. Why we use it, and on what legal basis

• To provide the service — hosting your page, saving your edits, delivering enquiries to you. Necessary for the performance of our contract with you.
• To take payment — running the 14-day trial and the subscription through Stripe. Contract, and our legal obligation to keep financial records.
• To send transactional email — verification, password resets, and notifications of new enquiries and reviews, which you can turn off. Contract, and our legitimate interest in you knowing when something happens on your page.
• To help you, and to look into problems — when you ask us for help, or when something about your page needs looking into, such as a report from a visitor, someone at LinkPier can open your dashboard as you see it, including your enquiries and reviews, for up to 30 minutes at a time. Each time is recorded on your account. Our legitimate interest, and yours, in support that can see what you see.
• To keep the service standing up — rate limiting and abuse prevention. Our legitimate interest in not being knocked over.
• To count page views— the aggregate figures above. Our legitimate interest, and the agent's, in knowing whether the page works. No individual is identified, which is what keeps this proportionate.

6. Who else sees it

We do not sell your personal information, we do not share it for cross-context behavioural advertising, and we do not disclose it to data brokers. We use a small number of providers to run the service, each of which sees only what its job requires:

• Stripe — payments and subscriptions. Stripe receives your name, email and card details directly, and is the controller of that payment data under its own policy.
• Resend — delivery of transactional email. Receives the recipient address and the contents of the message.
• Our hosting and database providers — they store and serve the data described above on our instructions.

We will also disclose information where we are legally required to, and to protect our rights or someone's safety. If the business is ever sold or merged, account data may transfer with it; we will say so before that takes effect.

Requests we make on your behalf

Two features have our server fetch something from elsewhere. Neither sends them anything about you, and both come from our server rather than your browser, so the third party does not see your IP address:

• Pasting a listing URL fetches that public page — typically Zillow, Realtor.com or RE/MAX — to read the price, address and photograph.
• Entering a ZIP code looks up nearby place names through the public Zippopotam and OpenStreetMap services, and pasting a video link asks YouTube or Vimeo for the title.

One works the other way round. A photograph that came with a pasted listing can stay on the listing site, and when you view that agent's page your browser loads it from there, so that site sees your IP address as it would for any image. Your browser does not tell it which page you were on.

7. How long we keep it

• Account and page content — for as long as your account exists. Delete your account and it goes with it.
• Enquiries and reviews— for as long as the agent's account exists, and deleted with it. If one is about you, write to privacy@linkpier.com and we will remove it sooner.
• Billing records — retained after cancellation for as long as tax and accounting law requires.
• Password reset and verification tokens — these expire and are removed.
• Aggregate view counts — these contain no personal data, and may be kept indefinitely.

8. Your rights in the EU and UK

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to ask for a copy of your data, to have it corrected, to have it deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we relied on it. Where we rely on legitimate interests, you can object and we will stop unless we have compelling grounds not to.

Write to privacy@linkpier.com. We answer within one month. You do not have to pay, and we will not make the service worse for you because you asked.

You can also complain to your local supervisory authority — in the UK, the Information Commissioner's Office. We would rather you came to us first, but that route is yours regardless.

Our servers and providers are in the United States, so using LinkPierinvolves transferring your data there. Where those transfers need a safeguard, we rely on the European Commission's Standard Contractual Clauses and the UK Addendum with each provider.

9. Your rights in California and other US states

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information we have collected and disclosed, to have it deleted, to have it corrected, and not to be discriminated against for exercising any of that. Residents of other states with comparable laws have comparable rights, and we apply the same process to everyone.

We have not sold or shared personal information in the previous twelve months — not in the ordinary sense of those words and not in the broader statutory sense, which covers disclosure for cross-context behavioural advertising. There is no opt-out to offer you because there is nothing to opt out of. We do not process sensitive personal information for the purpose of inferring characteristics.

The categories we collect are set out in section 2, the purposes in section 5, the recipients in section 6, and how long we keep each in section 7. To exercise a right, write to privacy@linkpier.com. You may use an authorised agent; we will ask for proof of their authority.

10. Security

Traffic is served over HTTPS. Passwords are hashed with scrypt and a per-account salt and compared in constant time. Access to the production database is limited to the people who need it. Card data never touches our servers.

No service can promise that a breach is impossible, and we are not going to. If one occurs and it puts you at risk, we will tell you and the relevant regulator within the time the law allows.

11. Children

LinkPier is a business tool for licensed professionals and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, write to us and we will delete it.

12. Changes

When this policy changes we will update the date at the top of the page. If a change materially affects how we handle your information, we will email account holders before it takes effect rather than relying on you to notice.

13. Contact

Stepmade, [REGISTERED ADDRESS].

Privacy and data-protection requests: privacy@linkpier.com. Anything else, including questions about the Terms of Service: legal@linkpier.com.