Privacy Policy

WELINK TECH SASU ("we", "our", or "us", SIREN 984 800 136, 6 RUE DES BATELIERS, 92110 CLICHY, FRANCE) respects your privacy and is strictly committed to protecting the personal data of our users ("Creators", "You") and your community members under the European Union General Data Protection Regulation (GDPR / RGPD).

1. Information We Collect

We process data exclusively to provide our autonomous community OS and Dark Social intelligence:

• Account Data: Name, professional email address, encrypted authentication hashes, and subscription metadata.
• Stripe Connect Metadata: Account ID and webhook event streams. We never store or process raw credit card numbers (PCI-DSS Level 1 compliance delegated to Stripe).
• Discord & Telegram OAuth Scopes: Server ID, channel IDs, user handles, and role mapping metadata strictly necessary to execute automated gating and Ghost Operator interactions.
• Vector Embeddings: Knowledge base documents and FAQs uploaded to your private vault for agent semantic search.

2. GDPR & Data Processor Role

• Your Role: For the community chat messages, member emails, and audience interactions occurring in your channels, you act as the Data Controller.
• Our Role: WELINK TECH acts strictly as a Data Processor according to Article 28 of GDPR. We process community data solely on your documented instructions.
• No Data Brokering: We do not sell, rent, or cross-reference your community data with advertising networks.

3. Security & Zero-Knowledge Storage

All communications are encrypted in transit via TLS 1.3. Sensitive credentials (OAuth refresh tokens, webhook signing secrets) are encrypted at rest using AES-256-GCM. Vector databases are isolated in tenant-partitioned schemas.

4. Data Retention & Permanent Deletion

Upon subscription cancellation or account termination request, your tenant database schema, vector indexes, and chat logs are queued for permanent cryptographic erasure within 30 days.

5. Exercising Your Rights (GDPR / DPO)

You have the right to access, rectify, export (data portability), and delete your personal data. For all privacy-related requests or DPO inquiries: