Privacy Policy

This policy explains what bklink collects and why. The operator and data controller isImmortal Reality PA LLC, 6375 Penn Ave Ste B, Pittsburgh, Pennsylvania 15206, United States.

What we collect

Account data. Your email address and a hashed password. We never store your password itself — it is hashed with PBKDF2-SHA256 and cannot be reversed.

Data you submit. The backlink URLs, domains, publication names, campaign names and any spreadsheets or documents you upload for auditing.

Data we generate. Audit results, report snapshots, and the valuation figures derived from them.

Billing data. Your wallet balance, a record of each charge, and Stripe payment and session identifiers. We never see or store your card number — that is handled entirely by Stripe on their own pages.

Activity data. A log of actions taken in your account: sign-ins, audits started and finished, and the vendor cost of each. Sign-in records include your IP address, which we use to rate-limit password guessing.

We do not use advertising cookies, analytics trackers or third-party tracking pixels. The only cookie we set is the one that keeps you signed in.

Why we collect it

• To provide the service — we cannot audit a backlink profile without the backlinks.
• To bill you — and to let you see what each action cost.
• To keep the service secure — rate limiting, detecting abuse, and letting you see and end your own sessions.
• To meet legal obligations — retaining financial records.

Who we share it with

We share the minimum necessary with the following processors, and with nobody else. We do not sell personal data, and we do not share it for advertising.

• DataForSEO — receives the domains you audit, to return backlink and authority data.
• Ahrefs — receives the domains you audit, to return Domain Rating.
• Cloudflare — hosts the service and resolves DNS for the domains audited.
• Neon — hosts the database.
• Stripe — processes payments and receives your payment details directly from you.
• Sentry — receives error reports, which may incidentally contain account identifiers.

We also fetch the URLs you submit directly from the publications hosting them. Those sites will see a request from us, identified as a browser user agent, in the ordinary course of serving a page.

These providers operate in the United States and elsewhere. If you are in the United Kingdom or the European Economic Area, your data may be transferred outside it; we rely on our providers' standard contractual clauses for those transfers.

How long we keep it

• Account and campaign data — until you delete it, or delete your account.
• Financial records — retained after account deletion, with your email address and password removed, because we are required to keep records of payments made.
• Activity logs — deleted with your account.

Your rights

You can:

• Access your data — reports are downloadable from the app, and you can request a full export.
• Delete your data — individual campaigns and your entire account can be deleted from within the app, without contacting us. Deletion is permanent and we cannot restore it.
• Correct inaccurate data, or object to or restrict processing.

Depending on where you live you may have additional rights — for example under the California Consumer Privacy Act, or the UK/EU GDPR. We apply the rights above to everyone regardless of location. To exercise any of them, email support@bklink.uk. We will respond within 30 days. We will not discriminate against you for exercising a privacy right.

Security

Passwords are hashed with PBKDF2-SHA256. Session cookies are HTTP-only, restricted to HTTPS, cryptographically signed, expire after seven days, and can be revoked by you at any time from account settings. All traffic is served over TLS. Accounts are isolated at the database query level.

We should be equally plain about a limitation: we do not currently operate tested backups. Data you delete is not recoverable, and in the event of a serious database failure it may not be recoverable either. Keep your own copy of anything you cannot afford to lose.

Children

The service is for business use and is not directed at anyone under 16. We do not knowingly collect data from children.

Changes

We will post any update here and change the date at the top. If a change materially affects how we handle your data, we will email the address on your account.

Contact

Immortal Reality PA LLC
6375 Penn Ave Ste B, Pittsburgh, Pennsylvania 15206, United States
support@bklink.uk