In short
- We collect what Vink needs to work: your account, your links, and a few facts about each click.
- We never store the IP address of someone who clicks a link. Clicks are deleted after 90 days.
- No ads, no tracking cookies, and we don’t sell data.
- Ask us any time to see, fix, export or delete your data.
The full text below is what counts.
1. Who we are
Vink is run by Prince Yadav, an individual based in India. We decide how your account data is used, which makes us its data fiduciary under India’s Digital Personal Data Protection Act, 2023. For click data about people who open your links, you decide why it’s collected and we process it for you.
2. Your account
- Your name and email address, and your password stored only as a salted Argon2 hash that we can’t turn back into the password.
- If you use Google to sign in: your Google account ID, name and email. We don’t get your Google password or anything else from your Google account.
- When you signed up and confirmed your email, and which workspaces you belong to with which role.
3. What you put into Vink
Your links, their titles, tags, destinations and rules, your custom domains, your public page, API keys (stored as hashes, not the key itself) and the email addresses of people you invite. Every change to a link is kept as a version so you can restore it.
4. People who click your links
For each click we keep: the time, which link, the visitor’s country, device type, browser family, the site they came from (the domain only) and any campaign tags in the link. We use the visitor’s IP address for a moment to find the country and to protect Vink from abuse, then drop it. It is never stored with the click. Rate limits and the limit on links made without an account keep an address in memory for up to an hour, never alongside click data. Clicks are deleted after 90 days.
6. How we use it
- To run Vink: redirect links and show you your clicks.
- To send the emails you need: confirming your address, resetting your password and invites. No marketing email without your permission.
- To keep Vink safe: stopping abuse, spam and links to harmful sites.
8. How long we keep it
Clicks: 90 days. Your account and content: as long as your account exists. Sign-in sessions end after 7 days. Links in our emails stop working after 24 hours (confirmation), 1 hour (password reset) or 7 days (invites).
9. Your choices and rights
You can change most of your data in Vink yourself. Under India’s Digital Personal Data Protection Act, 2023 you can also ask us to show you your data, correct or complete it, or erase it, withdraw your consent, and name someone to act for you if you die or can’t act yourself. Write to support@usevink.com; we answer within 30 days. If you’re unhappy with our answer, contact our Grievance Officer (below). If that doesn’t resolve it, you can complain to the Data Protection Board of India. If you live elsewhere, you can also contact your local data protection authority.
10. Security
We use HTTPS, store passwords and keys only as hashes, keep sign-in separate from API keys, and limit how fast anyone can try to sign in. No system is perfectly secure, so tell us at support@usevink.com if you find a problem.
11. Children
Vink isn’t meant for anyone under 18, and we don’t knowingly collect their data.
12. Grievance Officer
Our Grievance Officer is Prince Yadav. Email grievance@usevink.com with complaints about content on Vink, how we handled a report or your account, or how we use your personal data. We acknowledge complaints within 24 hours and resolve them within 15 days, as the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 require.
13. Changes and contact
If we change this policy in an important way we’ll tell you by email or in the app before it applies. Questions: support@usevink.com.