Privacy Policy
What Whatslynk stores, what it records when a link is clicked, and how you can delete it.
Clicks only
We count clicks. We never see who clicked a link or what was said.
No IP addresses
Raw IPs are never stored. Unique visitors use a hash that resets daily.
Encrypted numbers
Phone numbers and messages are encrypted at rest.
Delete anytime
Remove one link or your whole account and every record with it.
What we store
- Your links. What the link opens (a chat, catalog, channel or group), the phone number or invite code and optional message you enter, the short code or custom name, and an optional label. Phone numbers, invite codes and messages are encrypted at rest.
- Landing pages (Premium). If you turn one on, we store its title, intro, button names and the extra buttons’ numbers or invite codes, encrypted at rest. Anyone who opens your short link can see the page, so only write what you want to be public.
- Form answers (Premium). On a form page, the answers a visitor types are sent to our server to build the WhatsApp message they are forwarded to. By default we do not keep them. If the link owner turns on “Save the answers”, the form page says so and links here, and we keep the answers, encrypted at rest, with the date they were sent. Identical answers sent again are kept once. We do not store the visitor’s IP address, device or location with them. The owner can read, export and delete them in their dashboard. We delete them 365 days after they were last sent, when the link or account is deleted, and when the owner deletes them. Link owners decide what to ask and are responsible for asking only what they need.
- Smart routing (Premium). Rules, their phone numbers and messages are encrypted at rest. To apply a rule we use the visitor’s country, which we already receive from our hosting provider, and the current time. Neither is stored for routing.
- Your account. A sign-in ID from our sign-in provider (Firebase Authentication). If you sign in with Google or email, we also keep your email address and name. If you create a link without signing in, we create an anonymous ID that lives in your browser. It has no email or name, and it is only used to let you manage that link.
- Link clicks. Each time a short link is clicked or its QR code is scanned we record the analytics listed in the next section.
What we record when a link is clicked
We keep this coarse, aggregate-friendly information. We do not store IP addresses or the full browser string.
| Recorded | Why |
|---|---|
| Time of the click | Show clicks over time |
| Country, region, city (approximate) | Show where clicks come from |
| Device type, operating system, browser | Show what people use, and estimate app opens from Android and iOS clicks |
| Language | Show audience language |
| Referring website | Show where the link was clicked |
| QR scan or link click | Compare printed codes with shared links |
| Bot or link-preview flag | Keep automatic fetches out of your counts |
| Daily visitor hash | Count unique visitors without storing IPs |
What we cannot see
We count clicks only. We do not know who clicked a link, whether a chat was started, or what was said. The WhatsApp chat itself happens outside Whatslynk.
Who receives the data
We use these providers to run the service. We do not sell your data.
- Vercel for hosting.
- Neon for the database.
- Google Firebase for sign-in.
- Paddle for payments, if you buy a paid plan. Paddle collects your payment details and billing information itself. We never see your card, and receive only your email, the plan you bought and its renewal dates.
- Upstash for caching and rate limits, if enabled. It only holds encrypted data.
- Cloudflare Turnstile for bot protection, if enabled.
Important: a person who opens a short link is sent on to a WhatsApp chat address that contains the phone number and message you chose. Anyone with the link or QR code can therefore see that number. Only share links for numbers you want to be reachable.
Retention and deletion
Raw click records are deleted after about 13 months. You can delete a link at any time, and you can delete your whole account, including all links and analytics, on the delete account page. Deleted links stop working, including printed QR codes, and their short codes are never given to anyone else. Links made without an account that nobody has clicked for a year are deleted automatically.
Your choices
- See, edit or delete your links from the dashboard.
- Disable a link without deleting it.
- Delete your account and data at any time.
- Ask us about your data at support@enhancify.in.
Children
Whatslynk is not directed at children under 13, and we do not knowingly collect their data.
Changes to this policy
If we change what we collect, we will update this page and the date at the top.
Contact
Questions or requests: support@enhancify.in
This is a plain-language draft and not legal advice.