Privacy Policy

What we collect

• Your Genlinklab account - name, email, phone (optional), and a hashed password for logging in. We never see or store your plain-text password, only a one-way hash of it.
• Credit and payment history - your credit balance, purchase records, and a reference to each Stripe/PayPal/Paddle/Ziina payment. Card and payment-account details themselves are held entirely by Stripe, PayPal, Paddle, or Ziina - they never reach our servers.
• Link-generation history - which club account (email/ID, never the password) and fixture you ran, whether it succeeded, and the resulting ticket link. This is kept so you can see your own history and so the same account isn't re-charged for the same fixture twice.
• Basic technical data - things like IP address and browser information that any web server logs as part of handling a request, used only for security (e.g. rate-limiting abuse) and troubleshooting.

What we don't collect

We do not store club/ticketing account passwords, and we do not store card numbers, CVCs, or other payment card details - those are handled entirely by our payment providers.

How we use it

• To run the service - authenticate you, process a link-generation attempt, apply/deduct credits, and show you your own history.
• To process payments and keep an accurate record of what you've purchased.
• For account approval, support, and responding to questions you send us.
• For security - detecting abuse, enforcing rate limits, and protecting the service and other users.
• To meet legal or accounting obligations (e.g. keeping payment records).

We don't use your data for advertising, and we don't send marketing communications unless you've asked us to.

Who we share it with

Only the third parties needed to run the service: Stripe, PayPal, Paddle, and Ziina (payment processing), our transactional email provider (account approval/welcome/receipt emails), and our hosting/database provider. Solely for the purpose of attempting a link, the club's own login/ticketing platform receives the credentials you submit for that attempt - we don't send them any other Genlinklab account data. We don't sell or share your data for advertising, and we don't disclose it to anyone else except where required by law.

Data security

Connections to Genlinklab are encrypted in transit (HTTPS). Your account password is stored as a one-way hash, never in plain text, and club/ticketing passwords are never stored at all, as described above. We use CSRF protection on forms and rate-limit login and payment attempts to reduce abuse. As with any online service, we can't guarantee absolute security, and you should keep your own account password and email secure.

Where your data is processed

Genlinklab is operated from the United Arab Emirates. Our hosting and database infrastructure may be located outside the UAE (including within the EU), which means your data can be processed in a country other than the one you're in. We only use providers that are appropriate for running a service like this, and only for the purposes described in this policy.

Data retention

We keep your account and history for as long as your account is active. If you ask us to delete your account, we'll remove your personal data except where we're required to keep certain records - most commonly payment/transaction records, for legal and accounting reasons.

Cookies & local storage

We use a session cookie to keep you logged in (it expires automatically after a short period of inactivity) and a CSRF token to protect form submissions - both essential to the service working at all. Your light/dark theme preference is kept in your browser's local storage, not on our servers. We don't use analytics or advertising cookies.

Your rights

You can ask us to see, correct, or delete the data we hold on you, or to export it, at any time by emailing admin.genlinklab@gmail.com. We'll action deletion requests except where we're required to keep certain payment records for legal/accounting reasons. If you're in the EU/EEA or UK, you also have the right to complain to your local data protection authority if you believe your rights have been breached.

Children's privacy

Genlinklab isn't intended for anyone under 18 (see our Terms & Conditions). We don't knowingly collect data from minors - if you believe a minor has given us personal data, contact us and we'll delete it.

Changes to this policy

We may update this policy from time to time; continued use of Genlinklab after a change means you accept the update. Material changes will be reflected by the "last updated" date above.

Contact

Questions about this policy: admin.genlinklab@gmail.com