Privacy Policy
Version: 22 September 2026
Working version, 22 September 2026. Under professional review; the governing version is always this page as published.
1. Controller
The controller of your personal data is EdgeWorks LLC, trading as EntityLinks, whose registered address is 30 N Gould St Ste R, Sheridan, WY 82801, United States. Contact: [email protected].
2. Data collected
Account data (agency contact details), intake data (end-client business information supplied by the agency), payment metadata (processed by Stripe; card details never touch our servers), a record of account activity in the portal (see "What we log" below), cookieless analytics (Cloudflare Web Analytics; no advertising or cross-site tracking cookies, no consent banner required), and founding-agency programme submissions (name and work email address, submitted voluntarily through the application form on this site).
3. Purposes
Service delivery, billing, service notices, processing founding-agency applications, and, where you have consented, sending emails about the founding-agency programme and pilot.
4. Lawful bases
Contract and legitimate interest for service delivery and billing. Consent for programme emails, given via the form's consent box and withdrawable at any time by unsubscribing or contacting us.
5. How we contact you
Account holders receive transactional emails about their orders and account. Because accounts are business accounts, we also send product and pricing updates on the basis of legitimate interest. Every such email carries an unsubscribe link, and unsubscribing never affects transactional email.
6. What we log
We keep a record of account activity in the portal: signing in, orders placed, credits bought or granted, downloads and messages. Sign-in records include the IP address the request came from and the browser used. All of it is kept for service, security and support purposes, for as long as the account exists and for the period set out in our data retention policy.
7. Retention
Account life plus statutory periods; intake data deleted or returned on request after site expiry. Programme submission data is retained while the programme runs, or until consent is withdrawn, whichever comes first.
8. Processors
Stripe (payments), Cloudflare (hosting and analytics), Railway (application infrastructure), Resend (transactional email: account verification, invitations, order and renewal notices), and Google (Sheets and Apps Script) for founding-agency form submissions. International transfers under standard contractual clauses.
9. Your rights
UK/EU GDPR rights are listed with our contact route: [email protected].