Privacy Policy

This Privacy Policy explains how ELITE CAPITAL GROUP LLC ("we", "us", "LinkRivo") collects, uses, and shares personal data when you use LinkRivo (the "Service"). We aim to be transparent and to give you real control over your data.

1. Who is the data controller

For personal data processed in connection with the Service, the data controller is ELITE CAPITAL GROUP LLC. You can reach us at [email protected] for any privacy-related request.

2. What data we collect

2.1 Account data

When you create an account, we collect your email address, name (optional), hashed password, and the preferred locale of your interface. We also generate a unique account identifier.

2.2 Billing data

If you subscribe to a paid plan, we collect billing information (name, billing address, country, and a Stripe customer identifier) necessary to process payments. We do not store your full card details — these are handled exclusively by our payment processor Stripe, Inc.

2.3 Content data

We store the content you create in LinkRivo: your landing pages, links, images, text, custom domain settings, team workspaces, and related configuration. This content is necessary to operate the Service.

2.4 Usage and analytics data

To help you measure the performance of your LinkRivo pages, we process anonymized click events: hashed IP address (salted), approximate geographic country, device type, browser, operating system, referrer, and timestamp. We also log technical events for security and debugging purposes (e.g., failed login attempts).

2.5 Cookies and similar technologies

We use first-party cookies that are strictly necessary to operate the Service — primarily to keep you signed in (session cookies) and to remember your preferences. We do not use third-party advertising or tracking cookies on our marketing or dashboard pages. When you embed third-party content or install tracking pixels (such as Meta Pixel or Google Analytics) on your LinkRivo pages, those third parties may set their own cookies on visitors' browsers; their policies apply to that processing.

3. How we use your data

We process personal data for the following purposes:

• Provide the Service — create your account, host your content, render your public pages, and route traffic;
• Billing and payments — process subscriptions, issue invoices, and calculate affiliate commissions;
• Security — detect fraudulent signups, abusive traffic, and credential-stuffing attacks; block bots and suspicious VPN traffic when you enable those features;
• Support and communications — reply to your support requests; send account-related emails (password resets, invoices, security alerts);
• Product improvement — aggregate usage statistics (non-identifiable) to understand how the Service is used and improve it;
• Legal compliance — comply with tax, accounting, and other applicable legal obligations.

4. Legal basis (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, we rely on the following legal bases:

• Performance of a contract — to provide the Service you signed up for;
• Legitimate interest — for security monitoring, product analytics, and affiliate commission calculation, where our interest does not override your rights;
• Legal obligation — to comply with applicable laws (e.g., keep accounting records);
• Consent — for any processing that requires your explicit opt-in. You can withdraw consent at any time without affecting the lawfulness of prior processing.

5. Who we share data with

We do not sell personal data. We share it only with service providers strictly necessary to operate LinkRivo:

• Stripe, Inc. (United States) — payment processing and subscription management;
• Resend (United States) — transactional email delivery (account verification, password reset, billing notifications);
• Cloudflare, Inc. (United States) — DNS, CDN, DDoS protection, and custom-domain SSL issuance;
• Railway Corp. (United States) — application hosting and database infrastructure;
• MaxMind, Inc. (United States) — offline GeoIP lookups for analytics and geographic routing;
• IPQualityScore (United States) — bot, VPN, and proxy detection for the optional shield feature.

Each of these providers is contractually bound to process data only on our instructions and to implement appropriate security measures. We may also disclose data if required by law, legal process, or to protect our rights, property, or safety, or that of our users.

6. International transfers

Our service providers are located primarily in the United States. Where personal data is transferred from the EEA, UK, or Switzerland to the United States or other jurisdictions, we rely on appropriate safeguards such as the EU Standard Contractual Clauses to ensure your data remains protected.

7. How long we keep your data

• Account data — for as long as your account is active, and up to 30 days after deletion, unless legal obligations require longer retention;
• Billing records — retained for the period required by applicable accounting and tax laws (typically 7–10 years);
• Analytics events — retained for 24 months, then aggregated or deleted;
• Security logs — retained for 12 months;
• Support emails — retained for 24 months after the last interaction.

8. Your rights

Depending on where you reside, you may have the following rights over your personal data:

• Access — request a copy of the personal data we hold about you;
• Rectification — ask us to correct inaccurate or incomplete data;
• Erasure — ask us to delete your data (subject to legal retention obligations);
• Portability — receive your data in a structured, machine-readable format;
• Restriction and objection — restrict or object to certain processing activities;
• Withdraw consent — where processing is based on consent;
• Complaint — lodge a complaint with your local data protection authority (in the EU, your national DPA).

To exercise any of these rights, email us at [email protected]. We respond to verified requests within 30 days.

9. CCPA notice for California residents

If you are a California resident, you have the right to know what personal information we collect, to request deletion of your personal information, and not to be discriminated against for exercising these rights. We do not sell your personal information. To exercise your rights, contact us at [email protected].

10. Security

We implement technical and organizational measures to protect your data: encryption in transit (TLS 1.3), encryption at rest for database backups, password hashing using scrypt, access controls, audit logging, and regular security reviews. No method of transmission or storage is 100% secure, but we continuously improve our practices to protect you.

11. Children

LinkRivo is not directed to children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or via a notice in the Service at least 30 days before they take effect. We encourage you to review this page periodically.

13. Contact

Questions about privacy? Email us at [email protected]. For general support, see our Terms of Service or contact [email protected].