Privacy Policy
Last Updated: August 2026
1. Introduction
This Privacy Policy explains what Linkly AI LLC, a limited liability company registered in the State of Delaware, United States ("Linkly AI", "we", "our", "us"), collects and does with your information.
It covers three different things, and they work very differently:
- the desktop application you install on your computer
- our website at linkly.ai
- our cloud services, which you use only if you create an account
2. The short version
- The files you index stay on your computer. We never receive them. We cannot read them.
- The desktop app sends anonymous usage statistics, tied to a random identifier and not to you. You can turn this off.
- If you create an account, we hold your email, name, and profile picture, plus a record of your subscription.
- If you publish a public cloud library, its contents are visible to anyone on the internet.
- We do not sell your personal information.
The rest of this document is the detail behind those points.
3. What stays on your device
When you point Linkly AI at a folder, everything it does with those files happens locally:
- Reading and parsing the files
- Text extraction, OCR of images and PDFs, and speech-to-text for audio and video
- Building and updating the search index
- Answering searches, including those made by AI tools through the local MCP server or CLI
None of this content reaches us. The index lives on your disk alongside the app's data. Uninstalling the application removes both.
The application runs a local server so your AI tools can reach it. By default this is available only to your own machine; you can choose to allow other devices on your local network, or — with a paid subscription — to reach it remotely through our tunnel. When you use the tunnel, your search requests and their results pass through our infrastructure in order to reach your machine. We relay them; we do not store the file contents they carry.
4. Desktop application telemetry
To understand how the application is used and where it breaks, the desktop app sends usage statistics.
What it sends:
- Event names (for example: app opened, search performed, indexing finished)
- A random identifier (UUID) generated on first launch, which is not derived from your hardware and is not linked to your account
- Application version, operating system, and CPU architecture
- Aggregate numbers, such as how many results a search returned
What it does not send:
- File contents, file names, or file paths
- Search queries or keywords
- Your account identity, email, or name
- Stored IP addresses
Where it goes and for how long: Cloudflare infrastructure, automatically deleted after 3 months.
How to turn it off: in the desktop app, open Settings and disable the User Experience Improvement Program ("Help improve Linkly AI").
Because this data carries no account identifier, we cannot connect it back to you or to your website activity.
5. Your account and our cloud services
If you create an account, we collect and store:
- Account information: your email address, display name, username, and profile picture, provided by you or by the sign-in provider you chose (Google, GitHub, Notion, Apple, or an email verification code).
- Subscription information: your plan, status, and billing period. Card details are handled by Stripe — we never see or store your payment card.
- Cloud library content: documents and metadata you choose to publish or push to a cloud library.
- Usage records: API keys you create, quota and usage counters, and audit records of significant account actions.
- Technical records: sessions, and the IP address and user agent associated with them, used for security.
6. Cloud libraries and public visibility
A cloud library is private by default. You choose whether to make it public.
Public means public. Anyone on the internet can open the library and read its documents. Search engines may index it, and AI agents may read it. Please do not publish anything you would not want the world to see.
We may feature public libraries on our discovery pages or in promotional material. If you would rather we did not, email support@linkly.ai.
Making a library private again removes it from public view. Deleting it removes its contents from our systems.
7. Website analytics and advertising
Our website — separately from the desktop application — uses:
- PostHog for product analytics. Before you sign in, this is anonymous. After you sign in, we identify your activity with your user ID, email address, and name so we can understand how accounts actually use the product. This is not anonymous, and we would rather tell you plainly than describe it as such.
- Vercel Analytics for aggregate traffic measurement.
- Google Tag Manager and Google Ads conversion tracking, which record that a visit led to a download or a sign-up. These set first-party cookies (such as
_gaand_gcl_*) used to attribute visits to advertising campaigns.
None of this runs inside the desktop application.
8. How we use your information
- To provide, maintain, and improve the Service
- To create and manage your account and subscription
- To send you service notices, such as billing and security messages
- To answer your support requests
- To understand how the product is used, so we can improve it
- To measure the effectiveness of our advertising
- To keep the Service secure and prevent abuse
We do not sell your personal information, and we do not use the contents of your files to train models.
9. Third-party services we use
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Database for accounts and cloud libraries | Account and library data |
| Cloudflare (R2, Workers, D1) | File storage, API gateway, MCP tunnel, telemetry | Cloud library files; relayed tunnel traffic; anonymous telemetry |
| Vercel | Website hosting and analytics | Request data, aggregate traffic |
| Stripe | Payment processing | Your name, email, and payment details |
| PostHog | Product analytics | User ID, email, name, website activity |
| Sign-in, tag management, ads measurement | Sign-in identity; website activity | |
| GitHub / Notion / Apple | Sign-in | Sign-in identity |
| Resend | Sending email | Your email address |
Each provider has its own privacy policy governing what it does with the data it receives.
10. Cookies and similar technologies
Our website uses:
- Essential cookies — to keep you signed in and to remember your language preference. The Service does not work without these.
- Analytics cookies — set by PostHog and Vercel Analytics.
- Advertising cookies — set by Google Tag Manager and Google Ads (
_ga,_gcl_*) so we can tell which advertising brought a visitor to us.
You can configure your browser to refuse cookies. Essential cookies are required for sign-in to work; refusing analytics and advertising cookies does not affect the Service.
The desktop application does not use cookies.
11. How long we keep things
| Data | Retention |
|---|---|
| Desktop telemetry | 3 months, then deleted automatically |
| Account information | Until you ask us to delete your account |
| Cloud library content | Until you delete the library or your account |
| Subscription and payment records | As long as required for tax and accounting purposes |
| Session records | Until the session expires or you sign out |
12. Your rights
Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal information, and to object to it.
We do not currently offer self-service account deletion or data export. To exercise any of these rights, email support@linkly.ai. We handle these requests manually and will respond within 30 days.
When we delete your account, your cloud data — including cloud libraries and their contents — is deleted immediately and cannot be recovered. Files on your own computer are not affected; uninstalling the application removes those.
Uninstalling the application does not delete your account or your cloud data, because those are tied to your account rather than to the installation.
You can unsubscribe from marketing email at any time using the link in the message.
13. Security
We protect your information with:
- Encryption in transit (TLS) and at rest, provided by our infrastructure providers
- Authentication handled by established sign-in providers; we do not store passwords
- Access controls limiting who on our side can reach production data
- Payment card handling delegated entirely to Stripe
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.
14. International data transfers
We are based in the United States, and our infrastructure providers operate globally. If you use the Service from outside the United States, your information will be transferred to and processed in the United States and in other countries where our providers operate. We rely on the safeguards offered by those providers for such transfers.
15. Children's privacy
Linkly AI is not intended for children under 13 — or under 16 in the European Economic Area and the United Kingdom. We do not knowingly collect personal information from children. If you believe we have, email support@linkly.ai and we will delete it.
16. Changes to this policy
We may update this Privacy Policy. We will post the new version on this page, update the date at the top, and — for material changes — notify you by email or through the Service.
17. Contact us
- Company: Linkly AI LLC, Delaware, United States
- Email: support@linkly.ai
- Website: https://linkly.ai
By using Linkly AI, you acknowledge that you have read and understood this Privacy Policy.