Privacy Policy

Who can use DeLink

DeLink is for verified individuals aged 18 or older, and is offered in the United States at launch. We do not knowingly collect data from anyone under 18.

What we collect

• Account details — your email address, an optional display name and headline, and your password (stored only as a strong one-way hash, never in plain text).
• Two-factor authentication — an authenticator (TOTP) secret, held encrypted, so we can require a second factor at login.
• Identity verification result — DeLink requires one verified human per real person. Verification (a government ID plus a selfie liveness check) is performed by a third-party identity vendor. We never receive or store your ID images or biometrics — the vendor holds those. We store only the outcome (verified / failed), a vendor reference token, whether you are over 18, and a de-duplication signal that prevents one person from holding multiple accounts.
• Content and activity — posts you write, connection requests, organizations you act for, and job applications you submit.
• Membership & billing status — paid membership and organization subscriptions are processed by our merchant-of-record. Card and payment details never touch DeLink. We store only your subscription status and renewal period.
• Security & session data — a session identifier (stored hashed), plus limited technical signals (such as a hashed IP and user-agent) used to keep your account secure and to defend against bots and abuse.

Why we use it

To create and secure your account; to verify that each account is a unique real person; to provide the network (profiles, posts, connections, jobs); to process paid membership; to prevent fraud, bots, and abuse; and to meet legal obligations. DeLink is funded by subscriptions, not advertising.

We do not sell or share your data for advertising

DeLink does not sell your personal information, does not “share” it for cross-context behavioral advertising, and shows no ads. We disclose personal data only to the service providers that make DeLink work, under contract and only as needed:

• an identity-verification vendor (individual sign-up);
• a business-verification (KYB) vendor (organization accounts);
• a merchant-of-record that processes subscriptions and remits sales tax;
• our cloud/edge infrastructure and bot-protection provider.

We may also disclose data where required by law.

Your rights and choices

You can exercise the following directly from your profile, under “Your data & privacy”:

• Know & access / portability — download a machine-readable copy of the personal data we hold about you.
• Correct — edit your profile details at any time.
• Delete — permanently erase your account and personal data.

Depending on where you live (for example, California under the CCPA/CPRA), these rights may be guaranteed by law, along with the right not to be discriminated against for exercising them. You may also contact info@leddefense.com to make a request or appeal a decision. We will verify requests against your authenticated account.

How long we keep it

We keep your personal data while your account is open. When you delete your account, we erase your profile, identity-verification result, posts, connections, applications, and notifications. Content published on behalf of an organization (such as a job posting) belongs to that organization and is retained with your authorship removed. We retain a minimal, identity-free record of subscription/billing history where required for tax and financial compliance.

How we protect it

Mandatory two-factor authentication, one-way password hashing with breach-password screening, encryption of authentication secrets, HTTP-only session cookies, and edge bot/abuse protection. No method is perfectly secure, but we design for data minimization — we deliberately avoid holding sensitive data (like ID images) at all.

Changes and contact

We will update this policy as DeLink evolves and will revise the date above. For any privacy question or request, contact info@leddefense.com.