Privacy Policy

Datalenk is an audience measurement tool that ties visits to sales, published by GO TO AGENCY (GTA), a French simplified joint-stock company (SAS) with a share capital of €1,000, RCS Dijon 944 980 762, 9 rue Jean-Jacques Rousseau, 21000 Dijon, France ("we"). This policy explains what we collect, why, for how long, and your rights. Questions: hello@datalenk.com.

Controller: for our customers' accounts, for the visitors of datalenk.com, and for measuring the use of the app. Processor: for the data our customers measure on their own websites; they decide what is measured and why, and we follow their instructions (see the data processing agreement). If you visit a site that uses Datalenk, that site is responsible: contact it first; we help it answer you.

You sign in to Datalenk with your LenKore account, the single account of GO TO AGENCY's tools (or, for an account opened before it launched, with your Datalenk credentials). Datalenk receives from it your name, your email address, your team and the rights of your subscription.

• Your email address, your name, your Google profile if you sign in with it (name, email, picture), your language and time zone.
• Your workspace: sites, settings, goals, team (name, email and role of invited people), API keys.
• Your subscription: plan, dates, amounts and Stripe ids, never your card number.
• The version and date of the terms and processing agreement you accepted.
• The emails we send you (subject, date, status) and your messages to support.
• Access to the services you connect (Google Search Console, Stripe…), encrypted (see below).

If you choose to connect a service, we receive access to some of its data to show it back to you in Datalenk:

• Google Search Console (scope webmasters.readonly): we read your search performance (queries, pages, clicks, impressions, position) to display it and to estimate revenue per search query. Read-only: we never modify anything in your Search Console.
• Stripe (a restricted key you create): we read your charges, customers and subscriptions to attribute revenue to channels, and we create a webhook to receive them in real time. Never your full secret key, never any movement of funds; you revoke access at any time from Stripe.
• Other services (Bing, LemonSqueezy, imports…): only what is needed to show your figures.

We measure the use of the Datalenk dashboard with Datalenk itself, in Simple measurement: no cookies, no campaign parameters, no identifier that follows you from one day to the next. If you accepted cookies on datalenk.com, we also tie to your workspace the page that led you to sign up and your visits of datalenk.com made with the same identifier. Purpose: improving the app, helping you get started and answering support. Legal basis: our legitimate interest. You can object at any time, with the button below or by writing to us.

By default, the Datalenk script writes nothing on the visitor's device, but it reads standard browser information (language, screen size, referrer) and sends it with each event. The IP address is used to derive the country, region and city, then discarded; it is never written. Visits are recognised within the day by a key that changes every day.

With the visitor's consent, and only if the site turned it on, the Persistent layer keeps a random, pseudonymous identifier: it holds no name and no address, but it is personal data under the GDPR, because it recognises a returning visitor. It lives 90 days from its first deposit. With that same consent: campaigns and click ids, the link with payments, identify() (the email is hashed server-side then discarded), replay (pointer positions, no content or input) and A/B tests (the version shown and its conversions). The visitor accepts these purposes together or one by one, and can withdraw consent at any time. If the site uses Datalenk's banner, the choice is kept 6 months in a cookie (datalenk_consent); if the visitor objects to measurement, a datalenk_optout cookie stops it for 13 months.

Our customers may also send us their payments (amounts, Stripe ids, a hashed card fingerprint, an email fingerprint) and, if they use Calenkli or Lenkli with the same account, their bookings and clicks: these relays stay within the customer's account (see the processing agreement).

• Before you choose: Datalenk's Simple measurement, writing nothing on your device (page views, referring domain, device, country, region and city).
• dl_consent: your choice in the banner ("1" or "0"), 6 months. It only avoids asking you again.
• With your consent: dl_vid (local storage) and datalenk_ref (cookie), a random identifier that lives 90 days from its first deposit, to know which page led you to sign up; the recording of your mouse position, scrolls and clicks, kept 30 days; the visit counter of the home page demo (dl-visits, in your browser only).
• datalenk_optout: if you object to measurement, 13 months.
• Needed by the service, without consent: your account sign-in session and your preferences (language, time zone, theme, chosen workspace and site, period, notices already closed), in cookies and local storage whose names start with dl.
• Resources from other sites: the General Sans font is served by Fontshare (Indian Type Foundry), and the Startup Fame badge image on the home page by startupfa.me; your browser sends them your IP address to download them.
• Public statistics pages (datalenk.com/p/…): Simple measurement only, no cookies.

Change your mind: Cookie settings. If your browser sends the Do Not Track signal, the Datalenk script does nothing at all.

• Your account, the service, support: the contract.
• Security, abuse prevention, measuring the use of the app and the Simple measurement of datalenk.com: our legitimate interest; you can object.
• The identifier and mouse recording on datalenk.com, the services you connect: your consent, which you withdraw whenever you want.
• Billing and accounting: our legal obligations.

We never sell any data and never use it for advertising.

Datalenk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: Google Search Console data is only used for the features of your dashboard, is never sold or used for advertising, and is never transferred to anyone except as required to operate the service or by law. Humans do not read it without your consent, except for security or where the law requires.

Our providers, named on the sub-processors page (hosting, network, emails, billing, logos, screenshots, and Anthropic for the on-demand AI analysis and a few features that read public pages). Your team members see what their role allows. Google or Stripe, only if you connect them. The other GO TO AGENCY tools you use with the same account (links between tools).

If you connect an AI assistant (Claude, ChatGPT, Cursor…) to Datalenk, what it reads in your account is sent to its publisher, which processes it under its own terms, sometimes outside the European Union; you can revoke its access at any time.

Servers and databases in the European Union (Hetzner). Some providers are based in the United States: transfers rely on the adequacy decision of 10 July 2023 for companies certified under the Data Privacy Framework (Cloudflare, Stripe, Amazon Web Services), and on the Commission's standard contractual clauses for Anthropic, which is not; the details, checked provider by provider, are on the sub-processors page. A copy on request.

• Your account: as long as it is open. Once deleted, it goes to a 30-day bin (signing back in restores it), then everything is erased, except billing records, kept 10 years as the law requires.
• Identifiers stored on a visitor's device: 90 days from their first deposit.
• Events measured without the visitor's consent (Simple measurement): 25 months at most; they only feed statistics. A lead drawn from them before this rule is hidden, and kept 25 months at most too.
• Recorded interactions (replay): 30 days.
• Our customers' events: 3 years at most with the Pro plan or without a paid plan, 5 years at most with the other plans (Business, LenKore pack). Their leads: the same duration, counted from the event each one comes from. Their attribution registry: the same duration, counted from each customer's last payment. Beyond that, they are deleted.
• Your cookie choice: 6 months; your objection: 13 months.
• Access to the services you connect: deleted when you disconnect them or close your account.

Encryption in transit and of the credentials you give us, access limited to what is strictly needed. No system is perfectly secure; we work to protect your data and to react quickly if something happens.

You can access your data, correct it, export it, have it erased, restrict or object to some processing (including the measurement of the use of the app), and withdraw your consent at any time. You can also give us instructions on what happens to your data after your death (keeping, erasure, communication): write to hello@datalenk.com. We answer within one month. You can also complain to the CNIL, the French data protection authority (cnil.fr).

Datalenk is a tool for businesses, not directed to children under 16.

We update this policy as the product evolves: we change the date at the top of the page and, for a material change, we tell you by email.

GO TO AGENCY (GTA): hello@datalenk.com.