Terms for Data You Collect

These terms apply whenever your page collects something from a visitor. They exist because collecting a person's details makes you responsible for them, and most of what follows is a description of that responsibility rather than a restriction we have invented.

"Visitor data" means anything a visitor hands over through your page — an address, a name, a message, a time they chose, what they asked for. It covers whatever your page can collect today and whatever it can collect after the next thing we build, because what makes these terms apply is that the person gave it to you, not which part of the page they gave it through.

They sit on top of the Terms of Service, which cover your account and your page whether or not you run a newsletter.

1. What MyLink.is Does, and What It Does Not

MyLink.is collects visitor data on your behalf, keeps a record of when and how it was given, and gives it to you. That is the whole service. Where a feature verifies something before it counts — an email address confirmed by clicking a link, a payment settled before a file is released — that verification is part of the record and is the reason the record is worth anything.

MyLink.is does not send your newsletter. We send exactly one message to a subscriber - the one asking them to confirm. Everything after that is yours: you export the list, you choose an email platform, you write and send the emails, and you are the sender of those emails in the eyes of every law that governs them.

2. Data Protection Roles

For visitor data, you are the controller and MyLink.is is the processor. You decide why it is collected and what it is for; we hold it and act on your instructions. This section is our data processing agreement with you, and it covers every collection your page makes rather than any one feature.

We will:

• Process visitor data only to provide this service and only on your instructions, never for our own purposes
• Never sell it, rent it, or use it to market anything to the people it is about
• Keep it confidential and apply appropriate technical and organisational measures
• Delete a record when you or the person it is about asks, and delete everything a profile collected when that profile is deleted
• Give you the data in a portable format (CSV) at any time
• Tell you without undue delay if we become aware of a breach affecting it
• Answer a reasonable request for the information you need to show that we are doing the above
• Use these subprocessors, and update this list before adding another: Cloudflare (hosting, the database, file storage and sending email), MailChannels (also sending email, until we finish moving that to Cloudflare), and Stripe (only where your page takes money, and only for those transactions).
• Not use anything a visitor gives you to train a model, ours or anyone else's.

3. Your Obligations

By collecting anything through your page, you agree that:

• You will use what you collect only for what the visitor gave it to you for. The form they filled in is what they agreed to, and it is the boundary of what you may do with the result.
• You will honour a request to be deleted or to be given a copy, from the person it is about, including one that reaches you after you have exported the data — which we cannot act on for you.
• You will not use what you collect through one feature for something the visitor would not expect. Somebody who booked an appointment did not join your mailing list by doing so.

And if you send email to the addresses you collect, whether they came from a signup form or from anywhere else on your page:

• You will only send subscribers the kind of email they signed up for. The description you put on your signup form is what they consented to, and it is the boundary of what you may send them.
• You will honour an unsubscribe request promptly - including one that reaches you after you have exported the list, which we cannot act on for you.
• You will not upload, import or add addresses to this list that were collected somewhere else. Every address here must have confirmed through this form, because the consent record we give you says that it did.
• You will comply with the law that applies to your sending. In the US that means CAN-SPAM, which requires a working unsubscribe link and your valid physical postal address in every commercial email - your email platform will ask you for this. In the EU and UK it means GDPR and the ePrivacy rules, under which you must be able to show, per subscriber, that they opted in.
• You will identify yourself honestly as the sender. You may not send in a way that suggests the email comes from MyLink.is.

4. What We Will Not Host

We will switch a collection off, without notice, if it is being used to gather details for:

• Phishing, fraud, malware, or impersonating another person or business
• Content that is illegal where you or your subscribers are
• Harassment of a person or group
• Resale of the list, or collecting on behalf of someone whose identity is hidden from subscribers

That stops anything new coming in and blocks export. It does not delete anything: the records survive so that they remain available to the people they are about. If you think it is a mistake, get in touch.

5. Deliverability

We make no promise that any email we send on your behalf arrives — a confirmation, a booking notice, a file. Mail providers filter, and an address that was mistyped or does not exist will never receive anything. This is one of the reasons a confirmed list is worth more than the addresses collected to build it: everyone on it has demonstrably received mail and acted on it.

6. Changes

We may update these terms. Material changes will be posted here with a new effective date before they take effect.

7. Exporting What You Collected

Every export is a CSV, one row per record, carrying what was given along with when and where it was given. For a subscriber that means the address, the name, the confirmation time, the consent IP and the page they signed up on — those last three are what email platforms ask for when you import a list they did not collect, so keep the file rather than pasting only the addresses.

Substack, Mailchimp, Kit, beehiiv and Klaviyo all accept a CSV import. Import as already-confirmed, and do not re-send a confirmation - your subscribers have opted in once already, and asking again is how a list loses most of itself.