Privacy policy

Who is responsible for your data

This policy is published by the administrator of the backlinksbot.com service ("we", "us"). You can reach us about anything in this policy at support@backlinksbot.com.

Customers and visitors

• Account data. Your email address, a hashed password, your workspace name, team members and the settings you choose.
• Sites and campaigns. The sites and competitors you add, campaign goals, budget caps, strategies and the results the bot produces (prospects, scores, placements, live link checks).
• Connected mailbox. The address, server settings and encrypted credentials of the mailbox you connect, the outreach emails sent from it and the replies to them.
• Demo analysis. The domains you type into the demo, the result, and a one-way hash of your IP address, kept to allow one analysis per visitor.
• Billing data. Plan, invoices and payment status. Card details are entered on the payment operator's page and never reach our servers.
• Technical logs. IP address, browser and request logs used for security and troubleshooting, kept for up to 30 days.

People contacted through outreach

When a customer runs a campaign, the bot collects business contact details that site owners and editors publish themselves: contact pages, author bylines, site imprints and similar public pages. For each contact we keep the name if published, the email address, the page where it was found and the outreach history. The customer is the controller of this outreach and we process the data on their behalf. Every email carries a one click opt-out, and anyone can ask us to stop at support@backlinksbot.com. After an opt-out the address is kept only in a suppression list so that it is never contacted again.

Why we use it

To run the service you signed up for (contract), to keep it secure and prevent abuse (legitimate interest), to send account and alert emails you asked for (contract), and to meet tax and accounting duties for paid plans (legal obligation). Outreach to published business contacts relies on the legitimate interest of the customer, with a simple way to object in every message. We do not sell personal data.

Who receives it

We share data only with service providers that help us run the service, under contracts that limit their use of it: a hosting provider in the European Union, a payment operator, an email delivery provider for account and alert emails, a provider of AI models that drafts outreach text for paying accounts, and providers of public web and link data. Outreach emails are sent through the mailbox the customer connects. We do not use analytics trackers or advertising pixels.

Cookies

The service sets only the cookies it needs: a session cookie, a security token that protects forms, a cookie that remembers that you are signed in, and a first-party cookie that remembers the campaign parameters of the link you arrived from, so we know which of our pages bring customers. Details are on the cookies page.

How long we keep it

Campaign data is kept while the site is in your workspace. When you delete a site, its prospects, messages and history are deleted. When you delete your account, your data is deleted within 30 days, except invoices that the law requires us to keep and the suppression list, which exists to protect people who asked not to be contacted.

Your rights

You can access, correct, export or delete your data, object to processing or ask us to restrict it. Most of this is available in your account settings. If you delete your account, cancel any paid plan on the billing page first, because deletion alone does not stop renewal. For anything else write to support@backlinksbot.com. If you are in the EU or UK you can also complain to your local data protection authority.

International transfers

Some providers may process data outside your country. Where that happens we rely on standard contractual clauses or an equivalent safeguard.

Changes

We will post any change on this page and, for material changes, email account owners before it takes effect.