PrivacyPolicy

1. Scope

This Privacy Policy explains how Interlinked ("we", "us", "our") collects, uses and shares information in connection with the Interlinked desktop application, the ifile command line tool, the MCP server, our websites, our hosting and every related service (together, the "Service"). By using the Service you agree to this Policy. If you do not agree, do not use the Service.

If you use the Service through an organization, that organization decides how its projects and members are managed, and its own policies apply to its use of your information.

2. Information we collect

Account information: your email address, name, profile picture, password (stored as a hash), organization and team membership, and settings. If you sign in through another provider (such as Google, Microsoft, Discord, or your organization's single sign-on or directory), we receive the profile and directory information that provider sends.

Content you publish: the files you upload to a project or a link, their versions, and information about them (names, sizes, paths, tags, history, who has access, and who did what and when).

Payment information: subscriptions are sold through Link, and Stripe is the seller of record. We receive your email address and a record of the transaction and subscription. Card details are held by Stripe under its own privacy policy.

Usage and device information: how the software and the hosting are used (features used, commands run, the client or agent that made a request, counts and volumes of storage and transfer, errors and performance), the software version, operating system, an identifier for the installation or device, IP address, and approximate location derived from it.

Website information: pages viewed, referrers, downloads, how pages are used (including recordings of sessions on the website), and similar data, collected by our own tools and those of service providers through logs, cookies, local storage, pixels and similar technologies.

Communications: what you send us by email or through the Service, and reports made about content.

3. What runs on your own machine

The desktop application, the command line tool and the MCP server work on files on your own machine. They are designed so that files, file names and searches you have not published stay on your machine, and nothing is uploaded to hosting until you publish it. The software does send the usage and device information described above; you can turn optional usage reporting off in the application's settings.

AI agents and other tools you connect to the Service are governed by their own providers' terms and privacy policies. We do not control what they do with what they read.

4. How we use information

We use information to provide, operate and maintain the Service; to authenticate you and apply your organization's access rules; to measure usage, bill and apply plan limits; to secure the Service and detect, prevent and act on abuse, fraud and breaches of our Terms; to provide support; to understand how the Service is used and to develop and improve it and build new features and products; to communicate with you about your account and the Service; to market the Service; and to comply with the law and protect our rights and those of others.

We may create aggregated or de-identified information from the information we hold and use and share it for any purpose.

5. How we share information

With service providers that host, store, deliver, secure, measure, bill and support the Service on our behalf. These currently include Cloudflare (hosted files and APIs), PlanetScale on Amazon Web Services (databases), Vercel (the website), Stripe (payments, as seller of record) and Resend (email). We may change or add providers, and where data is stored or processed, at any time.

With the people and organizations you work with: administrators and members of your organization can see account and activity information, and anything you publish is available to those you share it with. A public link is available to anyone who has it.

With business partners, including those who help us market, measure and improve the Service or who offer products with us.

With a successor or prospective successor in a merger, acquisition, financing, reorganization or sale of assets.

Where we believe it is necessary to comply with the law or a legal demand, to enforce our Terms, or to protect the rights, property or safety of Interlinked, our users or others.

With your consent or at your direction.

If we share personal information in a way that applicable law treats as a sale, or as sharing for advertising, we will give the notices and choices that law requires.

6. Published content

Published content is stored on our providers' infrastructure and processed automatically to run the hosting (for example chunking, deduplication, caching, previews, and checks for malware and abuse). We may access it to operate, secure, maintain, support and improve the Service, to act on a report, to enforce our Terms, and where the law requires. Published content is encrypted in transit and at rest by our providers; it is not end-to-end encrypted.

To bill and apply limits, we record how much storage a project uses and how much data moves in and out of it, including downloads by people other than you.

7. Retention and deletion

We keep information for as long as we need it for the purposes in this Policy, including to provide the Service, meet legal and accounting obligations, resolve disputes and enforce our agreements. When you delete content or an account, or when hosting ends, it stops being served; copies in backups, caches and logs are removed on their normal cycles, and some records may be kept where the law requires or permits. Hosted content may be deleted when hosting ends, as the Terms of Service describe.

8. Security

We use technical and organizational measures intended to protect information. No system is completely secure, and we cannot guarantee the security of information. You are responsible for your credentials, your keys and tokens, the links you share, and the security of your own machines.

9. International transfers

We and our providers process information in the United States and other countries, which may have data protection laws different from those where you live. By using the Service you understand that your information will be transferred to and processed in those countries. Where the law requires a safeguard for a transfer, we rely on one it recognizes.

10. Your choices and rights

You can update account information in your account, turn off optional usage reporting in the application's settings, and opt out of marketing email using the link in the message. We will still send messages about your account and the Service.

Depending on where you live, you may have the right to ask for access to, correction of, deletion of or a copy of your personal information, or to object to or restrict certain uses. To make a request, email us; we may need to verify who you are, and we will respond as the law requires. If your information is managed by an organization, we may refer your request to it. You may also have the right to complain to your local data protection authority.

11. Children

The Service is not directed to children under 13, or under the age at which the law where they live allows them to agree to this Policy, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us.

12. Changes to this Policy

We may update this Policy at any time. The revised Policy takes effect when it is posted on the website, or on a later date if one is stated; for material changes we will also post a notice on the website or in the application, and where the law requires your consent we will ask for it. Continuing to use the Service after the revised Policy takes effect is acceptance of it.

13. Contact

For privacy questions and requests, email [email protected].